Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.mft
File:                     0AZhDr1oKXhFffitopEQATORAZI.mft (raw, json)
Hash identifier:          9v349BJWWR64q4coOqwBlaKOw8gKkgQywLNSyN4tbf0=
Subject key identifier:   5D:DE:6A:C9:9D:57:44:B5:84:E1:87:B9:98:92:5B:87:A0:7C:F3:9B
Authority key identifier: D0:06:61:0E:BD:68:29:78:45:7D:F8:AD:A2:91:10:01:33:91:01:92
Certificate issuer:       /CN=A9153A6E/serialNumber=D006610EBD682978457DF8ADA291100133910192
Certificate serial:       0F72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AZhDr1oKXhFffitopEQATORAZI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.mft
Manifest number:          0F5D
Signing time:             Tue 18 Aug 2026 17:45:21 +0000
Manifest this update:     Tue 18 Aug 2026 17:45:21 +0000
Manifest next update:     Tue 25 Aug 2026 17:45:21 +0000
Files and hashes:         1: 0AZhDr1oKXhFffitopEQATORAZI.crl (hash: b3nHOtf3EZwvNb56JD7IE6nYdGpKy39/eH9C6UC4OLc=)
                          2: CBD704945F5F11EFB99ABA76C4F9AE02.roa (hash: +qoTLB4KGdOq7tBr+CT5TB+FxY8uAOKgWCjbTm8+jho=)
                          3: 42431FFC8FF711EEA0FC990FC4F9AE02.roa (hash: UTqTDw+6C0kCCjzWGb1ZXGyuDiWfWII0jQrmfbm2l34=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.crl
                          rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AZhDr1oKXhFffitopEQATORAZI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 17:45:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3954 (0xf72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153A6E, serialNumber=D006610EBD682978457DF8ADA291100133910192
        Validity
            Not Before: Aug 18 17:45:21 2026 GMT
            Not After : Aug 25 17:45:21 2026 GMT
        Subject: CN=6a849a31-042f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f7:8f:6b:a2:a4:31:03:37:d4:1a:13:d9:8f:
                    56:f9:4f:72:8b:f6:8f:81:6f:74:15:60:43:53:8d:
                    ec:aa:76:10:4e:02:0e:50:a2:dc:31:b4:f8:a6:f5:
                    98:92:9b:44:ca:45:b2:71:4e:c4:57:f2:b0:3e:96:
                    5b:7d:cb:54:9d:2f:93:b8:4d:ee:02:66:b9:7c:95:
                    19:60:d8:4c:57:13:33:69:1b:90:35:0e:8a:33:8f:
                    9a:13:06:b4:87:5f:bd:b3:86:ca:d3:1e:cf:20:b4:
                    c0:95:a2:60:e6:91:be:a5:a6:40:96:cc:e3:44:8b:
                    e5:ce:99:42:9e:14:c2:a4:18:d0:f1:3e:69:e1:78:
                    db:89:a1:1b:5d:e7:c1:57:1b:ca:0c:b7:88:24:7e:
                    07:c3:f3:61:be:82:a0:ce:3d:fb:c0:1e:da:61:8a:
                    97:b3:65:dd:5c:9e:60:6f:33:a9:f8:c9:e3:86:94:
                    c4:5d:f4:64:70:d3:61:c7:59:c2:b7:a5:d7:1f:67:
                    05:8d:f4:63:47:b7:71:03:0d:a1:51:bb:31:30:97:
                    98:88:25:ed:ee:cc:c4:cd:ef:1e:b5:b7:f7:d9:8b:
                    40:ee:23:08:dc:02:58:7d:a6:2c:80:8b:0d:5b:6e:
                    36:dd:97:a0:fa:3c:2e:60:52:e9:ee:bb:04:0e:0e:
                    b8:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:DE:6A:C9:9D:57:44:B5:84:E1:87:B9:98:92:5B:87:A0:7C:F3:9B
            X509v3 Authority Key Identifier:
                keyid:D0:06:61:0E:BD:68:29:78:45:7D:F8:AD:A2:91:10:01:33:91:01:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AZhDr1oKXhFffitopEQATORAZI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:b3:ee:e4:36:26:d2:bf:1e:e9:45:42:3e:96:d1:75:32:30:
         be:94:1d:e4:42:c7:68:f8:76:b4:ca:e1:66:bf:4a:a5:93:ef:
         1f:02:f7:38:d3:5d:7e:d7:35:07:cb:75:bf:c9:56:4a:7c:d1:
         2b:e5:ed:6e:29:6c:1c:e3:dd:85:95:68:99:81:0c:92:87:1e:
         30:cd:92:8b:a2:71:0f:e8:01:1a:3c:20:e9:6f:2b:ad:5d:39:
         75:f1:11:b2:d8:19:ee:3c:1c:4d:70:83:f2:ac:18:dc:0d:ff:
         3b:e2:17:65:fc:78:bb:cc:27:67:ff:16:ef:f0:7d:85:a2:b5:
         d9:b9:2f:4e:c0:97:f3:8b:9c:9b:d1:52:76:61:98:61:ce:44:
         14:21:69:dd:3f:93:84:12:19:6b:e0:a4:47:33:ae:45:1a:5a:
         2e:3e:20:12:bf:7e:ae:4d:00:02:7f:f2:1d:55:1f:17:f7:65:
         93:3c:7e:7d:53:60:56:85:02:ce:64:b5:71:86:a9:71:35:01:
         ed:52:66:9b:03:25:85:af:a8:0f:48:79:66:8e:ff:ab:72:4a:
         e8:1b:c6:9b:6f:8c:1e:ce:ae:6e:3a:1d:4d:e9:da:82:17:1b:
         f3:99:d2:aa:d6:4b:5d:7a:34:fe:4d:c9:e0:3c:15:e8:3a:d4:
         c7:77:79:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 17:01:40 2026 by rpki-client