Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.mft
File:                     d6E036eiOU7SRHU58T_kqNHgVsk.mft (raw, json)
Hash identifier:          kv+0/4EXpmoG6FwSiUYgjos9/0BBlCkXeN19aQgV+FI=
Subject key identifier:   FF:7A:2C:17:E6:15:9E:11:A7:5E:58:8A:4A:59:B4:5F:3E:17:14:A0
Authority key identifier: 77:A1:34:DF:A7:A2:39:4E:D2:44:75:39:F1:3F:E4:A8:D1:E0:56:C9
Certificate issuer:       /CN=A915A821/serialNumber=77A134DFA7A2394ED2447539F13FE4A8D1E056C9
Certificate serial:       0B40
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6E036eiOU7SRHU58T_kqNHgVsk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.mft
Manifest number:          0B38
Signing time:             Tue 18 Aug 2026 19:32:13 +0000
Manifest this update:     Tue 18 Aug 2026 19:32:13 +0000
Manifest next update:     Tue 25 Aug 2026 19:32:13 +0000
Files and hashes:         1: d6E036eiOU7SRHU58T_kqNHgVsk.crl (hash: 4fZmqd6L9bCdMDstTYgKDOihg4SMTQOxNGXBs3/Vh1U=)
                          2: 4B2AAC20660211EA83A76342C4F9AE02.roa (hash: 322XVqOLE3OieFkM18c/LERTcsvygzFaUN+l9LxOXaE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.crl
                          rsync://rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6E036eiOU7SRHU58T_kqNHgVsk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 19:32:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2880 (0xb40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A821, serialNumber=77A134DFA7A2394ED2447539F13FE4A8D1E056C9
        Validity
            Not Before: Aug 18 19:32:13 2026 GMT
            Not After : Aug 25 19:32:13 2026 GMT
        Subject: CN=6a84b33d-43a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8b:9b:c8:61:d8:96:90:ae:04:d5:8d:2a:38:
                    c1:08:83:9c:12:ff:29:de:21:56:e4:e2:8e:19:cf:
                    2d:f5:2c:8f:35:18:0d:a1:35:99:59:48:91:08:65:
                    2c:b6:69:c4:c7:82:16:67:9b:d9:f4:d8:59:8e:b1:
                    d8:f9:82:ef:40:61:41:8b:f7:54:a4:a4:7a:f1:01:
                    67:43:d0:8d:72:80:6b:bf:17:5a:77:ae:4f:56:f4:
                    d6:8b:ae:24:96:a8:69:c2:8d:c1:28:7c:23:38:e8:
                    66:fb:91:dd:af:e7:73:28:c7:a7:17:03:49:b9:d5:
                    98:61:0d:3f:fd:1c:58:e9:fb:5d:93:c4:20:7f:ef:
                    27:79:b7:07:ef:f8:2c:f7:57:72:45:48:f8:cb:ba:
                    f7:e5:30:6e:f8:d5:a1:10:93:cd:d5:7f:3e:9b:0c:
                    64:64:43:eb:6a:20:98:74:83:0f:75:0a:1f:4c:31:
                    54:55:d5:03:76:10:20:52:01:83:41:59:09:18:fe:
                    96:9a:ce:70:e0:49:a2:dc:b5:94:0e:b8:a0:09:d9:
                    7d:da:69:db:e0:b5:6b:6d:c2:37:cb:27:3a:19:2d:
                    cb:4c:95:7e:5f:29:27:93:27:08:9a:1f:21:82:74:
                    a1:77:b0:c4:f5:fc:7e:c8:c5:d0:ca:ee:bd:09:d3:
                    17:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:7A:2C:17:E6:15:9E:11:A7:5E:58:8A:4A:59:B4:5F:3E:17:14:A0
            X509v3 Authority Key Identifier:
                keyid:77:A1:34:DF:A7:A2:39:4E:D2:44:75:39:F1:3F:E4:A8:D1:E0:56:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6E036eiOU7SRHU58T_kqNHgVsk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:cf:b7:61:1b:05:5a:26:cf:d2:84:8e:71:35:2f:1f:67:b7:
         e7:58:14:49:31:f3:79:52:55:c8:a4:a1:95:89:f0:4a:4e:2a:
         a6:b2:38:3c:d0:cd:81:3e:c2:c4:f5:0d:93:7d:47:27:26:ac:
         3e:70:68:6b:4e:0b:e6:6f:27:ff:44:c8:e3:fc:96:3f:d6:12:
         a5:bb:ee:ac:41:23:db:8c:50:aa:d6:af:d9:ed:1b:00:2c:4c:
         97:65:a6:64:c0:24:2a:ee:44:82:0b:c8:73:70:b8:39:ae:9b:
         66:4b:65:9b:25:12:f9:0f:44:77:59:9b:f8:ac:6e:89:c5:5c:
         f0:df:74:f1:e5:4c:76:64:bf:e2:23:48:e8:8b:cf:a3:89:06:
         6d:0e:c0:fd:0a:7f:45:cc:8c:fa:64:45:1a:8e:67:4f:45:b4:
         fd:10:fb:e1:6f:bf:0b:f8:a1:d8:c2:e8:d8:04:06:c0:bf:48:
         61:f0:52:2a:1f:f9:bc:01:87:c6:88:c8:84:15:a0:13:20:d5:
         c5:fb:f3:d8:f2:19:dc:9d:20:38:1d:20:d5:2e:7b:21:87:e8:
         20:2e:eb:05:fe:76:0d:59:19:96:60:35:ff:82:1c:25:0f:e6:
         05:ad:64:5b:da:b6:53:db:04:b1:81:71:85:b1:71:03:94:e1:
         38:8f:20:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:44:26 2026 by rpki-client