Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft
File:                     sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft (raw, json)
Hash identifier:          pGwWqhUfd+BayR7wUwB1OLbEIFO4VLa6i4uWp99Sjrg=
Subject key identifier:   85:DE:49:8F:43:15:70:91:64:04:07:C5:E7:98:E2:85:69:88:07:B2
Authority key identifier: B2:A7:84:EE:85:F5:53:83:67:29:7B:51:C0:86:8F:8F:1C:02:F9:11
Certificate issuer:       /CN=A9158F08/serialNumber=B2A784EE85F5538367297B51C0868F8F1C02F911
Certificate serial:       0A2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft
Manifest number:          1727
Signing time:             Thu 20 Aug 2026 18:12:56 +0000
Manifest this update:     Thu 20 Aug 2026 18:12:56 +0000
Manifest next update:     Thu 27 Aug 2026 18:12:56 +0000
Files and hashes:         1: sqeE7oX1U4NnKXtRwIaPjxwC-RE.crl (hash: UAp0km/+wNoDGLRFHRUuycHuO9DL0j6vqdPMkuEP9Zo=)
                          2: DCDFB82CA17B11EAB16F4954C4F9AE02.roa (hash: kTqCbZKUtBsFFXpPj9uO/YMS3jJEQ+u1QwW8st6ZqAs=)
                          3: DD70B00CA17B11EAB16F4954C4F9AE02.roa (hash: r3oax/+V4q+jPioRQnTYAoCLL+EoLljtLzFVV7hSq0M=)
                          4: DC4BD210A17B11EAB16F4954C4F9AE02.roa (hash: eIAHLPD+G1WHeALpmNDjCvEhWTMycfos5yNXip7qHSk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.crl
                          rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2602 (0xa2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158F08, serialNumber=B2A784EE85F5538367297B51C0868F8F1C02F911
        Validity
            Not Before: Aug 20 18:12:56 2026 GMT
            Not After : Aug 27 18:12:56 2026 GMT
        Subject: CN=6a8743a8-a046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:20:2d:b1:24:56:45:8b:cf:42:05:63:6f:f0:
                    50:38:77:a6:c0:db:a6:23:5c:75:b9:15:22:77:fd:
                    f2:bb:e8:e9:bc:07:b5:9c:41:28:da:19:6f:26:0f:
                    09:e6:f5:7b:e8:cb:3a:0b:32:70:55:b7:bd:c9:1e:
                    83:28:59:64:e4:db:65:a6:d2:15:6f:6c:f8:ec:5b:
                    ea:a4:6f:cf:4c:62:ad:ec:03:03:23:f7:b4:3d:47:
                    1f:23:fd:36:54:81:5e:41:83:18:49:1a:75:e7:16:
                    bf:a0:b2:7a:77:dc:2c:e3:ee:a9:99:5b:7e:f5:1d:
                    f1:3f:08:94:91:11:81:a7:87:41:30:06:a4:d2:29:
                    cc:bc:90:d8:d4:58:b5:fd:28:6e:5f:f8:bc:7a:32:
                    b3:65:f9:6e:44:8c:17:f9:db:33:cd:59:6f:6e:77:
                    35:9e:d7:69:f6:2e:84:bf:5e:37:99:59:7c:72:96:
                    d2:d0:79:69:6c:45:e2:e5:8d:65:2b:48:af:17:e4:
                    5d:43:04:45:1b:21:d9:46:41:08:12:7e:c0:03:d3:
                    96:b2:4d:39:40:fb:35:ee:a3:1b:fe:26:5e:d0:6c:
                    47:6e:a0:b6:74:b3:3a:34:4e:4e:1f:cf:a3:4b:48:
                    19:05:c7:65:e5:3c:5b:cf:74:e7:81:00:40:6b:f6:
                    48:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:DE:49:8F:43:15:70:91:64:04:07:C5:E7:98:E2:85:69:88:07:B2
            X509v3 Authority Key Identifier:
                keyid:B2:A7:84:EE:85:F5:53:83:67:29:7B:51:C0:86:8F:8F:1C:02:F9:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:94:5f:3e:d4:c0:ba:de:23:10:8b:df:ce:46:64:ba:13:4d:
         b2:6e:24:d2:44:f4:0d:d6:52:8c:d4:90:28:e0:d6:28:a0:fd:
         b0:e7:5e:e1:37:39:58:6e:0e:96:2b:bc:ac:58:06:4d:49:db:
         e7:64:7f:d6:a5:c8:35:c5:ab:36:6a:9f:13:12:a9:de:91:b9:
         43:ba:c1:81:bd:7e:3d:6c:04:df:9d:7a:4b:95:4f:97:7a:fd:
         40:70:b8:08:ec:58:a3:52:29:57:69:db:80:69:9b:9b:26:02:
         29:e5:ba:b7:3b:21:0a:10:86:ed:1b:df:e6:27:f7:6d:40:43:
         72:cc:78:aa:b7:68:53:35:35:c8:6e:45:57:8e:d9:2c:82:26:
         02:da:f3:d8:ba:31:01:80:f4:91:84:fb:5c:b8:d2:41:76:fa:
         74:2e:d7:0e:66:ce:65:e9:a3:9f:30:73:5b:5f:d0:a7:c5:aa:
         c9:9a:7a:f5:ba:ec:9e:6f:e1:2e:e1:89:56:80:b8:31:53:14:
         6e:65:9a:9e:90:80:9a:fe:da:62:b0:99:32:0b:27:ec:fe:5e:
         a1:d8:5d:c9:45:64:62:9a:a5:0f:cb:a8:d7:1e:14:49:d8:62:
         c1:d4:aa:5a:8f:e0:60:13:ee:b8:31:dd:10:3a:33:c0:25:02:
         1b:1a:91:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:56:30 2026 by rpki-client