Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.mft
File:                     aO6F9MJ9S6k-DWtqPpJlnhDWiV4.mft (raw, json)
Hash identifier:          Po+cjXzuI/5nOgZCVY1mVB0lT2vHruz2eA8hDislMKE=
Subject key identifier:   AC:F6:02:77:33:2D:E0:5E:20:50:FE:81:C4:23:B0:1C:F3:39:51:04
Authority key identifier: 68:EE:85:F4:C2:7D:4B:A9:3E:0D:6B:6A:3E:92:65:9E:10:D6:89:5E
Certificate issuer:       /CN=A916A0AF/serialNumber=68EE85F4C27D4BA93E0D6B6A3E92659E10D6895E
Certificate serial:       CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.mft
Manifest number:          0715
Signing time:             Thu 20 Aug 2026 22:34:24 +0000
Manifest this update:     Thu 20 Aug 2026 22:34:24 +0000
Manifest next update:     Thu 27 Aug 2026 22:34:24 +0000
Files and hashes:         1: aO6F9MJ9S6k-DWtqPpJlnhDWiV4.crl (hash: p69h5fX/0Jq5+yBDv3J3T5nT60H475xDFFZrznvR8xM=)
                          2: 8F3586B40DF511F18DE23E02043D8C67.roa (hash: ncVMvzPJ7BKlb60UcgyZrrfn0WZQ6WrxuL1LEKNyyZU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.crl
                          rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 205 (0xcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A0AF, serialNumber=68EE85F4C27D4BA93E0D6B6A3E92659E10D6895E
        Validity
            Not Before: Aug 20 22:34:24 2026 GMT
            Not After : Aug 27 22:34:24 2026 GMT
        Subject: CN=6a8780f0-67d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:47:c4:c9:1e:a9:a7:dd:b3:77:d3:06:98:e0:
                    24:a8:10:5d:90:af:5d:b7:dd:76:1e:8c:37:a3:dc:
                    d1:a3:d1:95:65:d8:4d:fb:b4:0a:c8:4e:a3:dc:94:
                    8f:1e:cb:16:d3:51:1d:e2:a9:0c:4a:58:ee:54:72:
                    c2:a7:0c:d4:57:eb:3d:13:4c:e8:20:72:a9:38:98:
                    3d:d6:8f:32:df:22:fd:76:4d:7f:61:b0:95:63:bf:
                    00:83:15:3f:03:e7:40:9a:cf:ff:17:e5:97:0d:60:
                    14:e6:fd:0b:f8:2e:c0:b4:d4:b7:e3:88:dd:41:d7:
                    36:98:71:34:bb:d7:a5:8b:0e:2b:e8:27:31:4a:82:
                    98:f0:98:41:a4:84:bd:1b:27:7a:c1:7d:a3:48:11:
                    0e:d3:b5:fa:99:28:d4:41:6a:11:80:c7:e5:49:8e:
                    49:f4:77:a3:84:59:f3:49:d0:4b:c5:2f:35:16:09:
                    44:c3:b7:29:f5:61:7f:6b:c6:45:16:5a:5c:2c:c1:
                    e8:e3:8a:65:f3:97:3e:e4:e4:60:9d:56:c4:1a:0f:
                    1b:bf:d8:85:46:d4:46:b5:04:eb:ab:90:73:7d:94:
                    64:e5:34:0f:30:1d:36:11:2b:5e:ef:51:59:6d:a4:
                    9f:ad:0a:88:f7:2e:8a:20:77:ff:af:71:63:5f:ce:
                    0f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:F6:02:77:33:2D:E0:5E:20:50:FE:81:C4:23:B0:1C:F3:39:51:04
            X509v3 Authority Key Identifier:
                keyid:68:EE:85:F4:C2:7D:4B:A9:3E:0D:6B:6A:3E:92:65:9E:10:D6:89:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:41:7d:d2:3a:d4:d5:df:73:2b:73:92:f7:78:88:b2:e6:8c:
         e3:94:9f:fc:65:59:fe:6e:89:84:42:ba:88:23:9d:2f:ff:c6:
         7f:21:aa:85:02:7e:75:11:7c:bf:76:1e:ef:3f:e5:e6:f7:fc:
         d4:39:9b:09:5a:5e:14:3b:68:cb:da:fb:fd:1a:22:70:cf:22:
         b8:be:a8:68:5b:6e:68:71:5e:de:cc:3c:4b:f3:25:b2:b8:12:
         7a:d2:7e:51:89:19:cf:bb:70:20:ee:5f:73:a9:58:22:1b:8c:
         57:53:47:a6:57:6d:cf:a2:04:f8:d1:5e:55:5c:20:3e:44:d3:
         68:41:db:5d:bc:97:94:02:ad:f4:b9:8f:62:81:52:53:74:48:
         b2:5c:b5:f0:36:a3:c1:bd:ef:18:e6:6b:1c:2c:49:bc:09:ce:
         71:3e:db:96:b5:fd:7d:c5:79:07:fa:d9:75:2a:df:20:84:d2:
         a0:05:27:74:cb:4e:51:ce:10:f2:b3:2c:fe:72:d8:e2:69:2d:
         9e:37:22:c8:8a:c3:bb:80:c0:dc:f0:0f:cb:8c:74:63:e5:3d:
         a1:3f:ec:15:de:88:e3:aa:db:17:7a:f3:30:9f:a9:21:bc:de:
         bb:54:60:b6:ad:b7:26:7e:7f:90:3d:9f:0a:86:7b:c4:0a:7e:
         af:06:4b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 00:04:45 2026 by rpki-client