Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.mft
File:                     G0PzVWVtEI4w0YQ03rV5PPagGjA.mft (raw, json)
Hash identifier:          tSuKjnnulW4FmQz1Tu8cYR601pfespxa/AP85RsYGRY=
Subject key identifier:   7A:6E:9B:3C:49:68:29:E7:6B:E6:C5:D0:20:EA:DB:09:9F:58:BE:23
Authority key identifier: 1B:43:F3:55:65:6D:10:8E:30:D1:84:34:DE:B5:79:3C:F6:A0:1A:30
Certificate issuer:       /CN=A916B0EA/serialNumber=1B43F355656D108E30D18434DEB5793CF6A01A30
Certificate serial:       0D1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0PzVWVtEI4w0YQ03rV5PPagGjA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.mft
Manifest number:          1610
Signing time:             Tue 18 Aug 2026 18:34:45 +0000
Manifest this update:     Tue 18 Aug 2026 18:34:45 +0000
Manifest next update:     Tue 25 Aug 2026 18:34:45 +0000
Files and hashes:         1: G0PzVWVtEI4w0YQ03rV5PPagGjA.crl (hash: L8pAGfcxvuuIxPd5ST2ef4AzMLVtMsTKXnZoCY5KMBk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.crl
                          rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0PzVWVtEI4w0YQ03rV5PPagGjA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 18:34:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3356 (0xd1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B0EA, serialNumber=1B43F355656D108E30D18434DEB5793CF6A01A30
        Validity
            Not Before: Aug 18 18:34:45 2026 GMT
            Not After : Aug 25 18:34:45 2026 GMT
        Subject: CN=6a84a5c5-97f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:41:ba:34:8d:de:17:50:d0:ac:21:ed:eb:d0:
                    82:15:0e:ba:08:20:c8:98:29:80:c7:93:12:c9:b5:
                    f7:33:5e:be:cc:55:d5:1b:da:a0:14:20:1a:4d:55:
                    41:35:02:2d:df:15:cc:ed:db:9c:f6:de:69:25:52:
                    f2:ca:5c:c7:1c:73:b7:4c:66:f2:19:a5:02:f7:e0:
                    4e:b2:86:8c:db:7c:20:89:84:7f:ab:8f:a1:96:0d:
                    85:59:53:ce:a1:9f:42:fe:f1:fe:f6:28:d6:3d:c7:
                    6e:82:d9:3e:91:2d:d7:65:b7:59:c3:3a:8c:a7:b3:
                    bb:70:e5:b2:47:f7:fe:55:92:0d:a3:7b:ee:88:a4:
                    2f:26:6c:30:c5:6b:6d:74:ad:ce:74:72:cc:b5:96:
                    60:ed:9e:bf:0d:36:d9:54:f4:82:b8:3d:86:1f:3c:
                    2b:95:29:83:40:81:47:d9:64:df:81:f3:e5:a1:af:
                    96:5a:21:6e:f5:4b:c5:23:c6:4d:97:4d:6f:dc:f4:
                    52:fa:c7:ad:06:a0:ba:ef:e3:28:f3:40:32:ca:4a:
                    07:0f:0c:93:ca:be:e3:60:3e:98:f1:63:97:a6:3d:
                    1c:ea:af:4c:1d:32:77:72:f3:69:cd:6d:6f:9f:bb:
                    dd:a3:56:23:9d:68:98:3e:df:b2:18:60:a6:f3:5d:
                    42:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:6E:9B:3C:49:68:29:E7:6B:E6:C5:D0:20:EA:DB:09:9F:58:BE:23
            X509v3 Authority Key Identifier:
                keyid:1B:43:F3:55:65:6D:10:8E:30:D1:84:34:DE:B5:79:3C:F6:A0:1A:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0PzVWVtEI4w0YQ03rV5PPagGjA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:55:44:26:ec:d0:3c:13:32:c2:f4:7a:5e:0e:3d:35:a2:f1:
         ff:a0:fb:7a:40:c1:a3:02:01:58:80:cb:06:28:4f:8f:f7:4c:
         7f:26:7d:1e:4b:4a:db:08:e5:9f:58:8f:ee:76:f2:c3:2b:c1:
         3a:3e:a5:31:63:09:ae:58:06:c8:93:6a:0b:b4:96:b8:39:44:
         9e:fd:66:0f:21:15:f2:26:f1:fc:1b:83:c8:58:6d:74:d6:98:
         db:ff:2a:0f:0b:19:f2:3c:90:86:56:9c:e7:dd:4d:6d:3c:ef:
         b9:47:23:0b:a4:a0:6d:b5:0a:e7:b0:91:ee:cd:4b:c1:f5:8c:
         70:6f:84:51:87:be:70:35:0d:8d:88:bc:84:d5:26:f5:76:f9:
         22:5b:01:28:55:c3:8b:f4:a3:d9:1d:00:71:fc:86:76:b9:fa:
         64:4d:5d:7c:b6:a5:2d:1d:62:7f:37:ec:e3:06:9c:86:77:5a:
         85:a1:6a:3a:d3:14:cf:16:47:a7:3c:58:b2:53:8b:07:61:b3:
         15:d5:90:30:af:3a:70:33:6f:d8:b7:1b:de:4f:a5:31:0a:4c:
         47:a1:fa:d4:7e:44:ac:92:30:47:89:b6:c9:17:51:19:22:0a:
         03:53:67:93:9e:b0:a7:65:47:51:65:95:46:44:76:3e:ae:a9:
         1c:58:e7:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:56:43 2026 by rpki-client