Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft
File:                     xkM8SeY82SA1swfo95Y3YI_q2_U.mft (raw, json)
Hash identifier:          TPUzLdEzutyzvYGGpi1b2P1srDz7uqLTXhMzJoA2AiQ=
Subject key identifier:   04:D7:65:02:11:56:DA:3E:9F:4A:88:88:35:39:08:2D:0D:AA:1F:AB
Authority key identifier: C6:43:3C:49:E6:3C:D9:20:35:B3:07:E8:F7:96:37:60:8F:EA:DB:F5
Certificate issuer:       /CN=A9164390/serialNumber=C6433C49E63CD92035B307E8F79637608FEADBF5
Certificate serial:       1DC4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkM8SeY82SA1swfo95Y3YI_q2_U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft
Manifest number:          1D77
Signing time:             Tue 18 Aug 2026 16:14:04 +0000
Manifest this update:     Tue 18 Aug 2026 16:14:03 +0000
Manifest next update:     Tue 25 Aug 2026 16:14:03 +0000
Files and hashes:         1: xkM8SeY82SA1swfo95Y3YI_q2_U.crl (hash: UnCBSGhpocD4YTuwiWRkraXs1BvTrLHRUpLcEMuTPG4=)
                          2: 35D40EDE9F8511ECBE806D30C4F9AE02.roa (hash: UeYjCbhpLlJLJlqOXzDkcK+yw3hLZ56FWNkCBB4H+Ew=)
                          3: BA1F21AC731111F0BD7FF574C4F9AE02.roa (hash: g2jj8mn9LFOljq/IXPylv88pR/h/lq28tfggQGOYjsw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.crl
                          rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkM8SeY82SA1swfo95Y3YI_q2_U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 16:14:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7620 (0x1dc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164390, serialNumber=C6433C49E63CD92035B307E8F79637608FEADBF5
        Validity
            Not Before: Aug 18 16:14:03 2026 GMT
            Not After : Aug 25 16:14:03 2026 GMT
        Subject: CN=6a8484cc-6963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:04:77:12:51:1b:f1:5f:33:01:f2:28:13:01:
                    ec:69:a1:de:56:25:8a:b9:2e:fc:41:e9:9f:91:91:
                    a7:d7:ee:fe:62:a7:5f:ed:f9:80:0a:c9:b3:10:7f:
                    ef:78:9c:25:a2:d9:da:e6:68:c2:c9:2f:7b:60:6c:
                    23:aa:41:16:38:d0:3a:96:dd:06:8b:d6:c3:3d:59:
                    83:a8:57:4c:9e:44:c7:10:69:2a:6d:73:db:18:d8:
                    77:66:2e:c0:2b:55:da:35:ab:17:05:d3:27:1e:9d:
                    8a:f1:38:df:b1:e6:03:ed:a3:2b:90:8e:e3:0e:5e:
                    1f:b7:98:41:44:1d:ee:77:c9:10:d3:f5:af:e7:0d:
                    fa:86:aa:9b:4d:8d:43:cf:ef:4c:47:01:ee:34:1b:
                    04:d0:20:7b:b0:d8:96:69:a3:8a:cf:b4:87:30:71:
                    e9:9f:20:e5:3a:f0:28:63:9c:c3:e5:a2:9f:e4:23:
                    ff:3a:e1:92:ed:eb:54:2f:11:8f:3f:05:65:3d:b9:
                    22:8c:05:dd:b3:47:49:46:9a:f5:56:06:54:46:3e:
                    f0:c6:41:9d:7c:50:99:4b:d4:a4:14:61:42:05:38:
                    af:da:a1:82:a1:f7:d0:63:d4:da:b8:62:3d:ef:65:
                    3d:a1:fb:cd:46:3c:0c:72:ca:95:27:07:84:74:db:
                    63:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:D7:65:02:11:56:DA:3E:9F:4A:88:88:35:39:08:2D:0D:AA:1F:AB
            X509v3 Authority Key Identifier:
                keyid:C6:43:3C:49:E6:3C:D9:20:35:B3:07:E8:F7:96:37:60:8F:EA:DB:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkM8SeY82SA1swfo95Y3YI_q2_U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:c2:bb:9b:09:db:39:52:d9:f9:cc:15:3d:9d:e6:89:69:ca:
         f2:53:96:32:17:d0:df:fe:c9:6e:86:25:b6:b3:48:92:29:63:
         27:22:aa:d2:32:f5:f0:98:2a:d0:1b:c1:dc:b8:e0:94:f4:89:
         4f:8b:04:d6:f4:6c:5b:a1:0d:b4:14:32:6a:cb:6a:70:02:c2:
         9c:95:dc:1d:a4:6b:2c:e6:ac:d5:65:29:71:68:77:e7:43:92:
         25:35:90:69:c4:24:94:f7:e0:cf:51:1b:fb:e3:15:6c:b8:6f:
         ef:d7:b3:06:c8:36:f0:a1:60:fd:78:13:22:67:fd:5c:bd:77:
         b7:49:3f:3a:11:2c:ce:3a:e0:aa:de:a7:e1:0a:3b:c6:ca:9a:
         c8:b3:c5:93:6b:47:06:00:4d:7d:af:3d:b2:69:05:e6:04:7b:
         12:99:89:c8:26:51:ed:cc:5e:51:e7:2d:22:d8:2f:90:a3:0a:
         81:3f:ae:fe:ed:17:2a:bc:53:f3:69:60:34:f0:de:5d:c0:12:
         63:61:17:2c:55:ff:ea:64:9c:e4:08:40:96:e1:37:e2:bf:cb:
         d1:3b:14:1c:ed:4f:32:03:bc:19:90:15:23:78:61:9f:ca:ac:
         c8:9d:22:0a:cf:96:6c:e2:9f:41:36:71:90:19:bb:1a:ce:88:
         5d:fc:0b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:52:49 2026 by rpki-client