Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft
File:                     jZcXcn1ujusjgHsxPAWNA1b_4WI.mft (raw, json)
Hash identifier:          kTl95LZaeOs4+oxmJ7LXSeL+wA3PAazJkko/NWxDmeg=
Subject key identifier:   89:70:94:12:BE:C0:19:4C:ED:87:C7:A1:1B:B6:BD:DF:51:DE:9C:9D
Authority key identifier: 8D:97:17:72:7D:6E:8E:EB:23:80:7B:31:3C:05:8D:03:56:FF:E1:62
Certificate issuer:       /CN=A916B53B/serialNumber=8D9717727D6E8EEB23807B313C058D0356FFE162
Certificate serial:       0186
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft
Manifest number:          017F
Signing time:             Wed 19 Aug 2026 05:13:34 +0000
Manifest this update:     Wed 19 Aug 2026 05:13:33 +0000
Manifest next update:     Wed 26 Aug 2026 05:13:33 +0000
Files and hashes:         1: jZcXcn1ujusjgHsxPAWNA1b_4WI.crl (hash: gADzDGbuSnMlUkvbIXfC41hGoUe7dxJQEvra/iqfYTk=)
                          2: A7E24C00ABF411F0A0B37937C4F9AE02.roa (hash: LbBS+EYlpmA67fkMLKgg4SD3EO+91MGCCTOWRrb0obs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.crl
                          rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 05:13:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 390 (0x186)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B53B, serialNumber=8D9717727D6E8EEB23807B313C058D0356FFE162
        Validity
            Not Before: Aug 19 05:13:33 2026 GMT
            Not After : Aug 26 05:13:33 2026 GMT
        Subject: CN=6a853b7e-bbe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:78:a4:49:05:c9:9e:6f:5b:d5:1b:b6:1a:35:
                    50:02:71:6d:99:fd:03:ca:0c:45:41:b6:c8:b6:b2:
                    f7:ac:bc:cf:f4:16:25:b9:12:71:ea:c7:eb:9d:a7:
                    b0:93:cb:63:da:ff:3c:a6:c3:62:bf:eb:ba:d2:a5:
                    88:b2:05:8d:aa:ca:a7:ec:00:d7:de:57:59:bd:02:
                    37:bb:ab:1b:17:d2:a1:ec:3f:a4:6e:f3:83:04:59:
                    77:7b:ff:41:40:25:d5:54:88:59:1e:ac:32:90:61:
                    22:ee:db:50:da:74:3c:79:12:c4:63:08:de:85:40:
                    32:d9:4e:14:a5:89:6c:51:83:79:0d:af:ba:19:52:
                    fd:38:6f:85:4c:16:f4:3e:de:dc:a1:ec:37:ff:2f:
                    01:74:73:8d:cf:e3:4d:fd:0f:d3:61:2a:a3:fc:13:
                    1e:35:9c:8e:12:d2:27:71:31:0e:22:01:b5:23:76:
                    d3:b1:51:ff:57:f0:11:d0:4e:48:c1:fc:3a:f2:72:
                    0d:8a:05:f2:e8:9a:88:1e:bb:73:44:47:bf:54:72:
                    a2:22:bb:5f:fc:c7:0d:c6:8e:88:9e:60:45:8e:15:
                    bc:49:45:05:d8:86:a3:2f:38:f7:b9:e9:18:5b:e5:
                    fb:3a:a2:32:29:65:02:44:3f:2b:9c:fa:34:a9:d5:
                    4a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:70:94:12:BE:C0:19:4C:ED:87:C7:A1:1B:B6:BD:DF:51:DE:9C:9D
            X509v3 Authority Key Identifier:
                keyid:8D:97:17:72:7D:6E:8E:EB:23:80:7B:31:3C:05:8D:03:56:FF:E1:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:6b:08:33:71:46:54:37:0c:0c:eb:c7:a1:94:aa:23:9b:3c:
         70:1d:0e:ca:68:85:03:bc:ba:f0:f5:1f:b9:2d:5d:0c:b7:b5:
         39:0b:2e:b1:1b:58:91:75:85:c5:a7:b4:2b:92:f4:24:40:a5:
         90:41:ad:61:f0:e9:a6:78:71:bf:55:8f:c7:ca:fb:ff:89:88:
         b0:33:d3:71:9b:49:60:17:ca:1a:fb:83:6e:97:f2:e6:90:87:
         82:36:12:22:b7:fe:fa:ad:d3:b4:9d:8d:42:78:a1:94:68:a7:
         80:3d:b4:e4:d4:d5:15:50:17:06:2c:6a:3b:29:df:7d:02:d3:
         f5:3e:e0:bd:f0:a7:c7:66:74:90:e4:fb:7f:01:df:70:73:1d:
         01:a2:ff:0b:cf:e4:60:91:e5:5c:ec:d9:8a:44:e9:99:64:d3:
         17:2f:a9:90:4a:b3:47:5f:57:20:66:f8:0d:4a:09:fb:43:94:
         6b:aa:a8:7e:f0:e2:09:11:40:4e:43:3c:36:03:5b:46:c5:32:
         48:54:75:f2:58:ad:67:fc:a0:ff:21:4b:d1:3c:2b:83:da:65:
         01:3a:03:67:19:c9:62:7d:38:01:5f:2c:50:0a:18:7c:5b:17:
         25:43:d1:79:01:57:79:06:b0:8c:c3:64:6e:0f:8a:44:8d:72:
         a4:6c:53:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:29:11 2026 by rpki-client