Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.mft
File:                     PcXSlD7UrPqSa3dnapi-yLPJea4.mft (raw, json)
Hash identifier:          ALtbGbdxaEnjpvahp1gvCwBPpG7b2EMDiqWCUfL9w98=
Subject key identifier:   8A:E5:EA:55:56:24:D0:0A:4A:94:3A:F2:6F:60:64:92:02:59:A1:9A
Authority key identifier: 3D:C5:D2:94:3E:D4:AC:FA:92:6B:77:67:6A:98:BE:C8:B3:C9:79:AE
Certificate issuer:       /CN=A916AF8E/serialNumber=3DC5D2943ED4ACFA926B77676A98BEC8B3C979AE
Certificate serial:       085C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PcXSlD7UrPqSa3dnapi-yLPJea4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.mft
Manifest number:          0850
Signing time:             Tue 18 Aug 2026 21:19:21 +0000
Manifest this update:     Tue 18 Aug 2026 21:19:21 +0000
Manifest next update:     Tue 25 Aug 2026 21:19:21 +0000
Files and hashes:         1: PcXSlD7UrPqSa3dnapi-yLPJea4.crl (hash: rbXSmYCHa0RVgJJkKTAbgQRf0tvkOoXk1IV6MwluNPY=)
                          2: 499DE3FC1C1611EB8BD35065C4F9AE02.roa (hash: q90sQnxzbRSHPH85xcHWMaHvdjo+QzvVXmS+pu++tZI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.crl
                          rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PcXSlD7UrPqSa3dnapi-yLPJea4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 21:19:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2140 (0x85c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916AF8E, serialNumber=3DC5D2943ED4ACFA926B77676A98BEC8B3C979AE
        Validity
            Not Before: Aug 18 21:19:21 2026 GMT
            Not After : Aug 25 21:19:21 2026 GMT
        Subject: CN=6a84cc59-dfbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:be:a2:09:6e:8b:54:b7:06:fb:a8:c1:da:31:
                    81:84:2b:dc:41:e3:4f:88:a3:7a:1a:43:05:13:d4:
                    cd:87:3e:3b:f3:9d:3b:87:a2:40:69:2a:35:90:5a:
                    e5:d1:37:05:34:44:39:d8:55:5e:4d:be:65:44:09:
                    8c:d3:9c:cc:93:39:fb:45:65:e1:8e:3c:f3:e3:a3:
                    3f:d5:ab:ee:9b:e1:f9:91:04:e8:af:75:4e:eb:fe:
                    75:db:3d:d6:72:0d:6f:88:d1:76:6a:09:3f:24:b4:
                    aa:4e:eb:c4:9c:02:01:cf:d0:12:4e:99:c1:bd:c6:
                    13:82:ff:29:ca:b9:bc:3b:a7:d4:83:8d:a1:f5:85:
                    2d:2f:60:49:71:24:53:b2:cd:25:96:ed:69:2b:c2:
                    2d:16:ba:5e:0c:f3:55:8f:ef:fc:e2:1c:62:49:ab:
                    e3:c8:92:a1:21:48:21:4d:99:54:0f:9b:bc:b8:4d:
                    e7:e7:22:bd:bb:81:db:08:8f:50:e1:5f:2e:50:61:
                    bb:be:ab:78:0e:ff:f8:eb:6c:2a:4f:d7:a7:37:71:
                    fd:f1:4e:f2:31:2f:cb:0b:b9:4a:9a:30:65:bc:4b:
                    14:89:9a:19:ce:43:02:5a:ac:cd:b3:fd:04:7c:bf:
                    ca:cc:5e:21:1f:77:b7:0a:4c:56:ec:49:d9:52:e1:
                    03:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:E5:EA:55:56:24:D0:0A:4A:94:3A:F2:6F:60:64:92:02:59:A1:9A
            X509v3 Authority Key Identifier:
                keyid:3D:C5:D2:94:3E:D4:AC:FA:92:6B:77:67:6A:98:BE:C8:B3:C9:79:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PcXSlD7UrPqSa3dnapi-yLPJea4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:3f:ac:65:ad:78:2a:8e:e9:c8:53:d6:c0:55:71:3e:8d:54:
         b6:1f:f8:28:c8:ff:d7:89:3d:d7:ad:50:64:d4:40:d9:b3:e7:
         9a:3d:0d:8c:b3:1a:e0:97:b9:7c:25:4b:89:cc:ea:ed:5f:49:
         c1:d3:22:e2:15:04:76:71:1d:ec:01:28:3e:04:5e:e3:8d:48:
         59:6f:72:c7:5c:1d:cc:36:5e:41:51:04:2b:8b:47:f4:fc:8a:
         36:7c:f8:9d:35:c4:84:b4:16:34:8a:2b:9a:b8:ec:63:36:ed:
         37:fd:6c:94:67:cc:9e:d7:a4:35:2f:3b:7e:7a:8c:0f:ab:ee:
         ee:bd:9f:fe:2a:5a:15:33:45:91:89:f5:73:7d:ba:d5:df:87:
         79:12:cb:b4:03:da:d5:25:80:54:08:e9:fd:56:f4:d4:67:b7:
         00:5d:a1:45:bd:61:67:e3:67:b7:8f:de:0c:35:bb:fa:79:e3:
         3f:0a:eb:52:a3:73:a8:09:d5:3f:a6:31:e5:37:12:c7:a7:94:
         e0:10:a5:9d:02:e0:56:9c:40:33:20:ad:42:49:c1:6d:64:15:
         27:ea:4d:4c:4b:5f:fb:c9:b9:29:19:60:6d:88:7d:39:b9:42:
         19:96:98:02:61:a2:e6:c1:4c:08:13:9f:e7:aa:59:a8:f3:af:
         f9:b3:9d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:47:05 2026 by rpki-client