Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft
File:                     cXp42D7DjxcRAnMoE5hEns3RBQA.mft (raw, json)
Hash identifier:          IvLEozQRRTCa7nCqpcvbcQAXt1Cup2+E+hHGGM9imsE=
Subject key identifier:   C2:EB:A4:98:EF:4B:8B:A2:29:99:73:44:67:7D:FD:F4:58:B5:B3:2E
Authority key identifier: 71:7A:78:D8:3E:C3:8F:17:11:02:73:28:13:98:44:9E:CD:D1:05:00
Certificate issuer:       /CN=A9168D20/serialNumber=717A78D83EC38F17110273281398449ECDD10500
Certificate serial:       0736
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXp42D7DjxcRAnMoE5hEns3RBQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft
Manifest number:          0726
Signing time:             Tue 18 Aug 2026 22:22:32 +0000
Manifest this update:     Tue 18 Aug 2026 22:22:31 +0000
Manifest next update:     Tue 25 Aug 2026 22:22:31 +0000
Files and hashes:         1: cXp42D7DjxcRAnMoE5hEns3RBQA.crl (hash: cbKn8oIKld4wMnIkurmTLb3dCSZi4cht4VIe9i25qLg=)
                          2: B9D0CC00D67311EEAD5F8B0FC4F9AE02.roa (hash: HmEJSmIlnqMRSQIFroiM2sK+BrSWqRLqcDK06fh9sgw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.crl
                          rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXp42D7DjxcRAnMoE5hEns3RBQA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 22:22:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1846 (0x736)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168D20, serialNumber=717A78D83EC38F17110273281398449ECDD10500
        Validity
            Not Before: Aug 18 22:22:31 2026 GMT
            Not After : Aug 25 22:22:31 2026 GMT
        Subject: CN=6a84db28-8f2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6f:f2:53:e4:78:13:9e:05:7a:cb:62:ed:ca:
                    a8:0e:c2:cd:98:e5:3f:b0:0d:d2:79:03:9b:c9:c8:
                    e1:ad:92:70:f8:c8:27:ae:c8:e8:e4:10:64:6c:7d:
                    4d:18:b3:93:70:ad:25:5f:95:a8:67:56:03:ab:da:
                    f3:47:f1:45:6c:f7:3c:dc:62:50:df:6f:fd:50:81:
                    fb:7e:5d:62:9a:50:27:f4:f0:9b:53:04:41:86:59:
                    3e:51:7a:6a:09:c5:c6:00:54:ab:ce:43:22:5c:f3:
                    ac:39:70:37:69:c8:23:5a:fe:f4:70:69:73:0c:e0:
                    41:33:4a:35:03:c4:ad:2a:0f:75:cd:dd:95:1b:99:
                    d7:f7:fb:4d:0a:6b:ea:21:9b:01:8f:9f:2a:9f:e5:
                    49:e6:f3:2b:83:97:4d:00:f2:5f:28:37:40:da:71:
                    39:73:8e:0c:b5:fa:0e:22:58:f3:1c:e6:f7:c4:78:
                    c7:ca:38:c2:a9:99:b8:81:48:00:62:01:25:38:64:
                    50:e6:1b:dd:ba:a2:3a:9d:18:48:5b:c3:7f:e9:92:
                    29:9c:c2:9e:c7:29:4a:89:6b:71:c0:88:03:a9:7c:
                    39:6c:15:9f:b1:05:6d:26:74:e3:6c:a5:1b:ef:bb:
                    5a:21:98:3f:e4:f1:e5:76:92:69:65:fc:7b:e2:02:
                    9e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:EB:A4:98:EF:4B:8B:A2:29:99:73:44:67:7D:FD:F4:58:B5:B3:2E
            X509v3 Authority Key Identifier:
                keyid:71:7A:78:D8:3E:C3:8F:17:11:02:73:28:13:98:44:9E:CD:D1:05:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXp42D7DjxcRAnMoE5hEns3RBQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:8d:4d:41:e4:eb:a7:64:27:5b:c8:c7:9a:f7:32:82:07:10:
         fc:0d:15:d5:11:c4:cd:0c:40:07:00:1a:76:22:59:3c:40:9e:
         90:1e:5a:a9:94:95:01:e2:11:2e:a8:4b:2a:f9:29:de:00:b6:
         7a:4f:14:24:da:b4:6f:4b:e2:d0:88:a5:68:eb:91:58:9b:e4:
         f1:0b:69:7f:c3:8e:ad:e5:83:c4:af:01:71:e3:7a:b9:5b:aa:
         7b:60:42:85:f7:a7:d2:67:bf:35:98:71:39:62:45:bd:46:d2:
         8f:f8:3a:f8:c9:74:3c:5d:f9:96:02:f5:8d:e5:44:1b:5b:30:
         19:03:99:25:5f:8a:e3:30:97:9d:81:e5:b2:47:4a:7b:5d:e3:
         b9:69:ed:dd:55:47:75:79:04:95:c0:36:53:38:64:da:e0:c1:
         fe:b6:b7:da:47:6f:b8:7c:3d:06:58:8e:7d:76:ee:42:50:03:
         a6:1d:f1:8a:86:f3:b3:41:bf:58:6a:8c:7f:0f:31:0c:0a:07:
         95:b9:cd:21:eb:9f:86:bc:52:70:61:58:24:35:a7:b0:ec:fb:
         c9:64:73:88:1b:a9:c3:b9:f8:d3:1f:62:df:97:cc:b4:26:67:
         d2:ea:49:5b:46:7f:21:e8:20:f4:d5:7e:5b:3c:2d:41:22:53:
         15:49:82:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:51:14 2026 by rpki-client