Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft
File:                     tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft (raw, json)
Hash identifier:          3ivKqVzlnzYbsPkDAaGybHg/Lm7OKaoXIreMVDyQ0OU=
Subject key identifier:   C3:60:29:D5:A0:2E:AF:53:03:87:BC:A4:55:A0:AB:F5:88:11:65:49
Authority key identifier: B6:7C:D4:F3:0A:DC:19:50:B9:2D:C3:49:8F:9B:53:52:66:05:BF:76
Certificate issuer:       /CN=A9154FFD/serialNumber=B67CD4F30ADC1950B92DC3498F9B53526605BF76
Certificate serial:       9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft
Manifest number:          9A
Signing time:             Wed 19 Aug 2026 08:02:14 +0000
Manifest this update:     Wed 19 Aug 2026 08:02:13 +0000
Manifest next update:     Wed 26 Aug 2026 08:02:13 +0000
Files and hashes:         1: tnzU8wrcGVC5LcNJj5tTUmYFv3Y.crl (hash: HlpAvWOvI231uxwzTA6ORbDojI1d9a9G9efrxemFmTk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.crl
                          rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 08:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154 (0x9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154FFD, serialNumber=B67CD4F30ADC1950B92DC3498F9B53526605BF76
        Validity
            Not Before: Aug 19 08:02:13 2026 GMT
            Not After : Aug 26 08:02:13 2026 GMT
        Subject: CN=6a856306-4200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1e:4f:95:26:9a:64:57:b5:c1:43:f4:6a:40:
                    56:31:db:16:86:bf:68:05:17:c5:c7:26:4e:c2:87:
                    95:23:ea:7e:cc:37:b3:1a:ef:5b:c4:c2:96:d6:72:
                    4e:81:57:1e:57:a4:8d:e4:6f:18:38:5f:68:22:59:
                    2a:74:07:13:61:39:89:1e:71:9b:35:c0:9b:f2:f6:
                    40:12:a1:c0:3c:e3:b9:6c:c2:f2:0f:f9:8c:d3:a1:
                    21:3b:53:10:1f:fb:e2:87:09:c1:1c:34:55:69:31:
                    5e:4c:ed:80:8d:76:c3:6f:6c:fb:8d:eb:64:12:a4:
                    af:b7:17:87:c5:1b:0b:4d:4a:7d:16:41:7c:7a:ac:
                    ca:39:df:f7:c3:c0:15:7a:6f:bf:50:e1:d8:3e:ac:
                    30:ee:84:91:74:91:71:ba:de:87:ec:dc:e2:35:0f:
                    a7:b4:6f:e6:8c:85:ea:d4:7c:2d:8b:43:df:be:a0:
                    8d:c5:8a:fd:2b:29:7d:d6:e4:37:c4:d9:40:c0:62:
                    f4:01:5f:b4:2a:a7:4f:3a:50:e6:0c:45:08:ae:a9:
                    e9:89:29:44:58:d5:ef:75:7e:8f:aa:36:f0:c9:50:
                    7a:5b:bb:bf:b0:97:2a:98:c8:b1:fb:db:75:61:45:
                    64:b5:3c:4f:e1:e9:ac:9a:48:30:81:4d:f5:60:fb:
                    71:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:60:29:D5:A0:2E:AF:53:03:87:BC:A4:55:A0:AB:F5:88:11:65:49
            X509v3 Authority Key Identifier:
                keyid:B6:7C:D4:F3:0A:DC:19:50:B9:2D:C3:49:8F:9B:53:52:66:05:BF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e3:b8:55:89:1b:59:8e:b4:70:a6:ac:09:b4:03:cd:3f:a5:29:
         bd:3f:38:af:1f:c8:1a:a3:24:ea:ec:4e:8a:68:e9:c8:9c:7e:
         80:ea:4b:33:a8:ff:04:9e:86:4f:47:17:c2:bc:fc:4a:8c:d5:
         ac:62:12:11:35:da:27:9e:3d:8c:ea:6e:15:79:56:aa:d6:ee:
         d9:c0:a6:d2:b7:7c:c9:24:cc:12:d3:9b:40:0a:b9:4d:24:ac:
         aa:69:4c:69:92:b4:a8:53:f0:6f:ad:a6:ee:57:bd:ac:be:96:
         85:35:34:79:4f:61:b5:68:2b:10:f3:75:56:f7:5b:bf:b1:17:
         0a:73:9b:2d:85:36:78:4f:d6:4a:77:d3:43:27:a7:84:8a:f5:
         f6:7e:32:8c:d4:b3:6b:35:32:c1:99:30:f8:69:ca:72:9d:0e:
         0d:c0:40:2b:50:e7:2c:5e:36:fb:69:e1:4a:07:ee:23:c4:4d:
         71:fc:5d:8f:34:3d:57:7b:10:b1:2c:87:d8:47:51:d6:17:ae:
         ef:28:66:6b:18:2b:56:fb:e6:9b:8b:fc:fa:8c:b5:91:28:46:
         79:03:3f:c5:e6:41:62:fc:55:87:a0:66:a1:af:a1:b5:54:90:
         36:cb:c2:52:52:71:cd:db:b1:6c:e4:a7:42:15:1f:62:19:03:
         ad:bf:54:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:44:05 2026 by rpki-client