Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.mft
File:                     XEFCLE7PHfpomnDePAORsdR-Vew.mft (raw, json)
Hash identifier:          X2TLMbrFo+SvHsnnwzZVAMB5diPX9SwNDH5uyOmjt94=
Subject key identifier:   75:E5:5E:F9:6B:CC:B6:7A:AC:55:AA:33:DC:64:AA:CD:58:2B:1D:92
Authority key identifier: 5C:41:42:2C:4E:CF:1D:FA:68:9A:70:DE:3C:03:91:B1:D4:7E:55:EC
Certificate issuer:       /CN=A916B19D/serialNumber=5C41422C4ECF1DFA689A70DE3C0391B1D47E55EC
Certificate serial:       035E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEFCLE7PHfpomnDePAORsdR-Vew.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.mft
Manifest number:          0356
Signing time:             Wed 19 Aug 2026 01:19:07 +0000
Manifest this update:     Wed 19 Aug 2026 01:19:06 +0000
Manifest next update:     Wed 26 Aug 2026 01:19:06 +0000
Files and hashes:         1: XEFCLE7PHfpomnDePAORsdR-Vew.crl (hash: TW1F6Gn/aTLvVwzqNseS9PI6nxu1N+FkRx360SfjR+w=)
                          2: D11B9044112011EDAC1D3B15C4F9AE02.roa (hash: kypD0HNpdZMUft2CKjrM9l4+dpJKPDYyDTu1PYOEbrs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.crl
                          rsync://rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEFCLE7PHfpomnDePAORsdR-Vew.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 01:19:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 862 (0x35e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B19D, serialNumber=5C41422C4ECF1DFA689A70DE3C0391B1D47E55EC
        Validity
            Not Before: Aug 19 01:19:06 2026 GMT
            Not After : Aug 26 01:19:06 2026 GMT
        Subject: CN=6a85048b-2a1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d3:5a:3b:df:aa:74:dc:85:25:80:ff:7f:59:
                    29:5b:2f:75:60:14:c3:23:76:ab:ea:2c:e0:39:3b:
                    3f:88:a7:dd:63:5a:02:34:df:c9:e3:9c:6e:ff:be:
                    f4:0b:3e:81:51:3e:03:49:df:06:ac:69:25:94:3d:
                    dc:63:50:c7:00:43:59:3c:e6:ec:0a:45:f1:e9:e3:
                    7d:d8:b6:9a:5d:e0:6e:56:59:78:bd:e5:04:87:8e:
                    59:29:96:75:d6:94:bd:52:21:9b:64:ef:f9:9a:4a:
                    75:3d:6c:eb:29:36:0e:5a:b4:de:0b:c3:45:a9:58:
                    5e:1e:75:73:26:56:bf:a0:99:f0:78:85:bf:99:16:
                    99:32:08:e7:eb:7b:7b:8a:e1:38:54:31:b5:02:11:
                    53:85:56:3b:f8:2c:d4:55:3c:2b:ff:ff:46:73:fc:
                    04:c8:be:28:83:b4:f6:01:e9:da:0f:9a:f2:3c:88:
                    24:3d:74:cb:4a:d3:93:e0:ae:c8:ef:6c:5e:24:21:
                    1c:59:c4:b3:ae:35:7c:34:4c:32:81:e3:14:4f:e0:
                    cd:57:b1:ed:bd:d0:f4:26:c2:f9:a1:4b:1f:8b:79:
                    34:e1:06:4a:4e:07:75:5b:d7:7a:2a:bf:35:0f:72:
                    bb:60:c7:8e:7a:cc:fc:0a:cb:c1:7c:01:d7:af:87:
                    82:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E5:5E:F9:6B:CC:B6:7A:AC:55:AA:33:DC:64:AA:CD:58:2B:1D:92
            X509v3 Authority Key Identifier:
                keyid:5C:41:42:2C:4E:CF:1D:FA:68:9A:70:DE:3C:03:91:B1:D4:7E:55:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEFCLE7PHfpomnDePAORsdR-Vew.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:6b:ae:b9:eb:c0:c4:c3:72:4f:2b:f9:3f:8f:e2:a0:c8:51:
         0d:45:bb:e2:65:51:b6:d7:ff:f1:24:dd:e1:84:80:45:f5:9c:
         c1:8d:90:99:7a:e9:f6:60:84:43:57:92:a9:88:35:ae:98:19:
         dc:f4:24:3e:18:24:55:21:34:10:ba:b8:dd:09:29:77:57:6d:
         16:99:d2:e6:81:cd:d7:6d:98:03:29:fc:41:9f:cd:36:39:cf:
         13:aa:e0:ae:95:df:c4:1b:0b:9a:f8:56:33:09:40:63:2f:c3:
         11:49:ec:fc:b2:06:f6:90:50:26:2a:ff:73:d4:dc:da:16:34:
         88:d5:8f:f0:73:3f:d2:68:59:dc:15:e7:fa:f3:56:01:c7:0b:
         04:5e:ac:3a:e7:93:43:15:ec:b4:d7:64:74:3a:16:04:ee:2f:
         fa:ba:c9:61:a9:b2:b5:b7:08:22:b6:15:3a:99:66:3d:2c:f7:
         2e:5e:29:22:9d:57:0b:40:ce:7e:bb:d9:60:92:86:c5:76:64:
         5e:98:00:52:89:4d:18:2c:58:24:52:25:d7:e8:ad:5e:6d:c0:
         4e:9d:58:3c:c4:d8:29:95:63:b5:71:3d:be:91:b3:0c:e1:22:
         a3:1d:52:54:aa:28:ff:67:d8:de:62:aa:d9:76:8a:15:5d:a1:
         7e:92:fa:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:39:16 2026 by rpki-client