Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft
File:                     8RbpEqlQneSy1rPZPLwY9QA24Wg.mft (raw, json)
Hash identifier:          6xklbIvP4MvfRiOgc1WSx+yT+cs0nQ5RZhpTydIjuPk=
Subject key identifier:   28:71:BA:CE:20:7C:28:7A:4E:B9:37:DB:6A:B4:28:82:07:2D:A3:7C
Authority key identifier: F1:16:E9:12:A9:50:9D:E4:B2:D6:B3:D9:3C:BC:18:F5:00:36:E1:68
Certificate issuer:       /CN=A9156D54/serialNumber=F116E912A9509DE4B2D6B3D93CBC18F50036E168
Certificate serial:       035C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8RbpEqlQneSy1rPZPLwY9QA24Wg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft
Manifest number:          035C
Signing time:             Wed 19 Aug 2026 01:15:07 +0000
Manifest this update:     Wed 19 Aug 2026 01:15:07 +0000
Manifest next update:     Wed 26 Aug 2026 01:15:07 +0000
Files and hashes:         1: 8RbpEqlQneSy1rPZPLwY9QA24Wg.crl (hash: xkbjEp7hsagRy4LokdGOdODfTsOdrVYb9PEAL17uxPE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.crl
                          rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8RbpEqlQneSy1rPZPLwY9QA24Wg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 01:15:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 860 (0x35c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156D54, serialNumber=F116E912A9509DE4B2D6B3D93CBC18F50036E168
        Validity
            Not Before: Aug 19 01:15:07 2026 GMT
            Not After : Aug 26 01:15:07 2026 GMT
        Subject: CN=6a85039b-164e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:9d:f0:f8:c4:fa:a6:d1:d1:94:f0:c2:84:8b:
                    74:8b:1d:62:e8:62:7a:91:20:4b:c8:ac:3b:ec:11:
                    66:ba:7b:7c:82:cc:c0:aa:77:26:fd:02:f9:b8:6e:
                    87:86:de:52:d1:bc:8e:c0:50:6b:8d:52:c7:56:e2:
                    de:53:46:a5:f9:65:fd:01:92:b9:75:38:0f:88:d8:
                    d9:82:aa:b0:fa:7d:56:f3:c9:a5:d4:10:a3:40:0e:
                    f7:da:21:81:b1:44:33:e0:cc:f8:a9:eb:7c:24:c4:
                    6d:12:63:f3:ae:e1:9c:67:e1:95:e4:75:5f:67:5e:
                    35:3d:65:aa:0a:a6:43:b9:7e:62:38:ff:83:c0:76:
                    ed:b6:c8:ba:fd:9e:57:a1:1f:c3:87:e6:ca:5c:e7:
                    d3:92:a9:4b:49:3a:65:bc:b9:19:a5:c9:3f:4c:14:
                    cb:36:12:af:bd:e8:37:c6:c4:0a:ff:9c:30:0e:6d:
                    91:2a:31:22:34:a7:13:96:f2:fd:1b:24:b0:23:f8:
                    3f:7f:6a:2a:53:4e:10:d8:59:29:07:d4:e0:92:cb:
                    8f:13:20:fa:9c:15:2a:f9:21:93:22:c0:f7:4f:49:
                    64:2e:65:dc:31:e6:4c:88:be:99:a9:52:2a:c6:61:
                    06:ff:18:68:bf:c9:6a:79:32:dd:a4:56:99:dd:48:
                    b3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:71:BA:CE:20:7C:28:7A:4E:B9:37:DB:6A:B4:28:82:07:2D:A3:7C
            X509v3 Authority Key Identifier:
                keyid:F1:16:E9:12:A9:50:9D:E4:B2:D6:B3:D9:3C:BC:18:F5:00:36:E1:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8RbpEqlQneSy1rPZPLwY9QA24Wg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:6a:31:1b:0c:3c:26:fb:00:d8:9c:e0:4d:1a:03:4a:b7:b2:
         3f:13:71:a6:70:74:2a:52:b2:8c:56:28:61:2d:20:89:ed:d2:
         a2:e2:62:3f:5e:0a:d8:78:14:82:45:f8:ec:4d:e1:cf:dd:45:
         34:c0:72:fb:eb:a2:cd:22:12:1a:64:6f:a4:39:73:7d:4d:2f:
         f6:56:73:0d:f6:89:c1:fc:80:16:50:53:50:35:2a:67:b8:f1:
         44:a8:0c:c6:e1:97:89:87:0f:a3:dc:b0:94:a7:4c:c2:38:53:
         03:2b:d6:0a:72:92:7f:39:fe:e6:62:2c:ec:8e:d2:1d:75:47:
         5a:45:1b:fe:87:c3:4a:3b:2c:b2:21:77:b2:81:58:ef:9a:48:
         52:9e:cc:12:4d:0f:06:65:3e:4a:46:13:5e:b2:7c:44:0a:a3:
         a3:6d:40:de:5e:8e:da:6b:7c:b3:9a:6b:d0:5d:67:3f:f9:78:
         22:c4:82:3c:c2:b6:6e:de:73:12:5f:0d:c5:c8:99:99:3a:ac:
         d5:05:dc:22:d6:72:7d:df:75:db:3a:1e:ea:d6:c5:5c:97:0a:
         51:6f:60:b7:d6:58:d0:2e:d3:fe:38:62:e6:fc:bb:38:1e:dd:
         6f:24:87:51:a5:bb:f2:22:3a:02:81:15:5a:18:1f:7f:b0:df:
         ec:c7:41:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:29 2026 by rpki-client