Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft
File:                     hobJK4fdXdLuKrtA7HPxePYEWjQ.mft (raw, json)
Hash identifier:          c0dz/4YpO4vqPZivKe+9UUmwVLKhWEkad34QLMS0Fes=
Subject key identifier:   67:09:F6:60:67:3B:FF:79:64:F7:1C:38:6F:5E:C3:A4:50:8C:1D:13
Authority key identifier: 86:86:C9:2B:87:DD:5D:D2:EE:2A:BB:40:EC:73:F1:78:F6:04:5A:34
Certificate issuer:       /CN=A9165DB1/serialNumber=8686C92B87DD5DD2EE2ABB40EC73F178F6045A34
Certificate serial:       0366
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft
Manifest number:          035C
Signing time:             Wed 19 Aug 2026 01:17:13 +0000
Manifest this update:     Wed 19 Aug 2026 01:17:13 +0000
Manifest next update:     Wed 26 Aug 2026 01:17:13 +0000
Files and hashes:         1: hobJK4fdXdLuKrtA7HPxePYEWjQ.crl (hash: axauSEq1Lb/kF299b2/ruAV/errCrXDbNW2U2bTM/Nw=)
                          2: 7CA593102A2811F0819D8C13C4F9AE02.roa (hash: 6HsKuqL5S8uKAR1j1etyr6JU/lQn3ubk+2w56Dk0K+A=)
                          3: 7D164B822A2811F0819D8C13C4F9AE02.roa (hash: dfXE23weJbeF3Q0ekQ196ZT9XngXBchYp3WwEpVjFic=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.crl
                          rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 01:17:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 870 (0x366)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165DB1, serialNumber=8686C92B87DD5DD2EE2ABB40EC73F178F6045A34
        Validity
            Not Before: Aug 19 01:17:13 2026 GMT
            Not After : Aug 26 01:17:13 2026 GMT
        Subject: CN=6a850419-34de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cd:14:05:8f:e8:b2:97:34:a0:26:6e:09:4f:
                    f7:af:7c:03:af:eb:6c:90:1f:58:d3:41:c3:43:15:
                    63:b2:45:3d:ea:8e:4a:f3:97:ea:5b:89:32:4d:7b:
                    d4:b2:89:dc:ed:7d:2b:b7:78:b0:c7:f9:6d:db:6b:
                    50:c8:d2:73:e8:a1:87:64:b7:68:4d:0e:a4:b4:fa:
                    7b:59:94:41:30:da:a7:1f:f2:67:0e:7b:cb:49:a8:
                    da:10:78:b7:d3:81:03:a9:f9:8b:06:ae:b7:88:b4:
                    05:5e:7b:2b:c6:bc:db:a8:56:04:75:90:03:a2:a1:
                    6a:0e:73:00:6e:95:fe:ef:48:07:15:d3:d7:ed:33:
                    11:ac:b7:bf:2a:e4:9f:7a:84:fb:6b:62:31:5e:dd:
                    b5:8a:bb:82:5d:bd:46:ca:1c:be:ca:6b:be:36:4e:
                    ef:6a:ce:ee:fb:7c:a0:4f:85:b6:c0:14:06:45:df:
                    9e:95:26:c4:0c:9d:0b:c1:92:9e:86:50:b6:49:4b:
                    03:a2:88:a5:01:c4:4d:e8:de:24:48:4c:a1:fb:21:
                    30:d9:1c:93:08:67:db:e5:8a:0b:8d:06:18:da:10:
                    75:d7:9c:8a:12:81:7a:ab:86:3c:12:bd:eb:00:a8:
                    83:e1:41:3a:11:13:86:28:55:de:f1:ac:56:d5:4a:
                    6f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:09:F6:60:67:3B:FF:79:64:F7:1C:38:6F:5E:C3:A4:50:8C:1D:13
            X509v3 Authority Key Identifier:
                keyid:86:86:C9:2B:87:DD:5D:D2:EE:2A:BB:40:EC:73:F1:78:F6:04:5A:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:01:35:05:a3:d9:f7:59:1d:cd:f4:2e:c4:81:43:01:6a:0e:
         43:34:35:4d:78:e3:8d:fa:fe:6d:a1:f2:01:31:d5:95:2a:bf:
         a4:d8:ee:50:1e:1b:7a:17:3c:9d:eb:03:55:f8:8d:32:2e:30:
         aa:dc:5a:11:fb:07:b2:02:4e:17:e2:72:7d:bc:f3:34:57:ab:
         95:94:b7:6c:31:3e:89:4b:17:6c:72:14:a7:4a:07:b4:49:d5:
         89:db:c2:af:ee:f7:62:8b:51:30:21:8b:ad:b8:5c:7f:ff:76:
         85:6a:24:de:62:ae:b7:10:f5:5c:e6:62:78:63:8b:d4:b8:7f:
         ee:76:58:22:8d:4a:08:3a:96:4d:41:49:1f:fd:1a:13:c4:10:
         63:70:3d:d0:d5:f5:a1:d6:32:d7:04:b9:1d:13:55:7d:03:04:
         3b:d9:8b:0f:0b:59:53:34:a7:e3:52:62:5a:13:bd:a3:81:1c:
         82:80:03:58:18:7b:76:e3:9e:45:d7:25:c1:af:65:91:12:40:
         fb:55:a7:c7:ab:cb:f1:79:c6:78:04:62:3b:ee:62:aa:09:3a:
         99:11:49:2a:79:de:df:b6:ba:a7:97:f1:d4:e4:65:8f:a5:41:
         6e:f7:22:87:79:5c:da:2d:36:7e:84:51:6a:40:68:16:92:a8:
         9d:65:dc:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:54:36 2026 by rpki-client