Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft
File:                     A3uPBfSQLZ2otCTDk0CGXz2smyY.mft (raw, json)
Hash identifier:          jmv+0SAyaLEiWhmEq7BsJKV6srjoX4hwPx70b+iFsQ4=
Subject key identifier:   CE:80:0A:F5:1D:FB:F8:F9:0E:E8:25:47:A8:2E:61:DC:79:30:A4:A6
Authority key identifier: 03:7B:8F:05:F4:90:2D:9D:A8:B4:24:C3:93:40:86:5F:3D:AC:9B:26
Certificate issuer:       /CN=A9167D07/serialNumber=037B8F05F4902D9DA8B424C39340865F3DAC9B26
Certificate serial:       1717
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3uPBfSQLZ2otCTDk0CGXz2smyY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft
Manifest number:          16FF
Signing time:             Tue 18 Aug 2026 16:49:55 +0000
Manifest this update:     Tue 18 Aug 2026 16:49:55 +0000
Manifest next update:     Tue 25 Aug 2026 16:49:55 +0000
Files and hashes:         1: A3uPBfSQLZ2otCTDk0CGXz2smyY.crl (hash: szct15fEnt8Ai64qDueLs4xcPlXlbZ7rJxcV2S0m8P8=)
                          2: EFE8CDF6C8D111EE95249F25C4F9AE02.roa (hash: vxWTeDCOHWuEhOaJAF4VGFM0DqtGWr26nr5q8brIPcM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.crl
                          rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3uPBfSQLZ2otCTDk0CGXz2smyY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 16:49:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5911 (0x1717)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167D07, serialNumber=037B8F05F4902D9DA8B424C39340865F3DAC9B26
        Validity
            Not Before: Aug 18 16:49:55 2026 GMT
            Not After : Aug 25 16:49:55 2026 GMT
        Subject: CN=6a848d33-0bf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:80:6a:be:10:6e:c3:13:22:53:f9:f7:df:78:
                    64:42:be:fa:8b:33:3b:b1:0a:39:94:6a:5e:58:65:
                    2c:6a:ff:60:51:5b:ae:70:e1:87:f0:e2:a3:23:3d:
                    10:b6:69:a1:f9:cb:be:a1:18:81:a8:ca:e9:4e:b9:
                    f7:a3:48:66:f5:ff:01:0d:c4:d0:61:8e:56:7f:77:
                    a2:f0:c6:fc:f6:ac:ec:ab:6c:b1:43:97:5b:e5:73:
                    23:04:35:40:56:54:70:f2:ad:f0:bd:cf:e3:2c:db:
                    fa:17:1a:8a:8b:18:b4:85:31:da:64:77:d7:b0:63:
                    5f:35:c2:64:d2:89:a6:0d:98:e0:6f:8e:34:43:1b:
                    e0:3e:4c:df:07:0d:d1:86:2e:92:1f:f8:02:05:07:
                    65:0e:d1:50:f3:25:b5:19:c5:7a:90:b5:be:30:41:
                    5d:bb:ad:8e:02:74:4e:9c:5f:be:2b:7b:6d:5a:26:
                    b1:fe:77:60:97:9a:ea:d2:d3:06:4a:15:b0:f6:b6:
                    da:38:f5:66:9d:f7:0d:29:ff:6f:7f:61:86:2b:f4:
                    8c:df:a6:d2:7a:23:eb:f0:1a:d9:4f:bc:c5:ba:81:
                    9d:58:c0:71:19:3a:d3:5f:41:e1:e1:62:14:5b:e7:
                    03:b4:c8:42:fc:f2:ef:82:ef:d9:56:4c:ee:a6:6b:
                    71:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:80:0A:F5:1D:FB:F8:F9:0E:E8:25:47:A8:2E:61:DC:79:30:A4:A6
            X509v3 Authority Key Identifier:
                keyid:03:7B:8F:05:F4:90:2D:9D:A8:B4:24:C3:93:40:86:5F:3D:AC:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3uPBfSQLZ2otCTDk0CGXz2smyY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:eb:2e:55:65:99:09:50:6e:04:4e:93:ec:5c:6d:4c:6d:41:
         f4:29:ee:83:bd:8b:b3:ed:57:00:ad:20:65:82:58:73:5c:4f:
         ae:17:e0:9b:ca:04:a1:5e:cd:d2:c4:34:15:a4:c8:73:2b:32:
         b1:ba:f5:63:b6:6c:81:44:89:f4:bb:5c:4c:55:da:25:c9:dd:
         3d:d4:2e:04:d1:ca:b9:f3:66:12:55:da:ce:9d:80:ea:ed:f1:
         a9:de:65:13:bd:aa:8f:40:2f:26:18:3a:df:9d:ad:47:c7:55:
         55:a4:6a:8f:bf:48:d6:f0:f9:d4:2b:a4:37:66:6f:63:8a:b3:
         10:df:42:62:44:98:dd:13:bd:58:e6:96:4e:83:6d:75:af:a9:
         ec:d8:29:55:8d:43:6a:bd:47:94:6a:15:78:3e:0e:4b:b5:02:
         9a:81:4f:a0:9c:04:fe:66:d0:bb:cc:7f:f5:3c:d8:58:ab:13:
         3e:dd:f2:5d:7f:84:a0:99:43:d8:62:c5:14:a6:45:27:06:33:
         a4:0d:4b:ba:34:b5:aa:bf:51:cd:75:49:13:43:d7:1c:c4:24:
         20:29:39:d0:6f:5c:b6:8a:b8:51:f8:02:0a:0a:43:fa:7d:19:
         b8:e6:73:9c:76:3b:f3:61:53:2e:40:4b:8b:6c:92:fe:91:41:
         0a:c7:fb:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:47:05 2026 by rpki-client