Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft
File:                     9TkpGRnN4USwNO8oiwpjR4PoLH8.mft (raw, json)
Hash identifier:          1BprtDxpeP9kBN+D3wZ/6tqgLnK69SDzaW/2VKjPQtc=
Subject key identifier:   BD:37:CA:70:2D:43:F5:39:A2:9C:9F:E9:E9:E6:77:03:C6:16:2E:0E
Authority key identifier: F5:39:29:19:19:CD:E1:44:B0:34:EF:28:8B:0A:63:47:83:E8:2C:7F
Certificate issuer:       /CN=A916C61B/serialNumber=F539291919CDE144B034EF288B0A634783E82C7F
Certificate serial:       0570
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft
Manifest number:          0523
Signing time:             Mon 24 Aug 2026 23:41:13 +0000
Manifest this update:     Mon 24 Aug 2026 23:41:13 +0000
Manifest next update:     Mon 31 Aug 2026 23:41:13 +0000
Files and hashes:         1: 9TkpGRnN4USwNO8oiwpjR4PoLH8.crl (hash: Xnz8KUA3BtcLQmfZYAHWqT1A9v4s8kgNmKW21frtXoM=)
                          2: C6856EE29AF711F195C781C55811F970.roa (hash: 8P5MvFhnnZ5D3PPJut60FkX7BxkqwS/H/o8JDXdmUzg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.crl
                          rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 23:41:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1392 (0x570)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C61B, serialNumber=F539291919CDE144B034EF288B0A634783E82C7F
        Validity
            Not Before: Aug 24 23:41:13 2026 GMT
            Not After : Aug 31 23:41:13 2026 GMT
        Subject: CN=6a8cd699-eb95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:9a:1b:8d:42:36:8c:a3:e0:be:f3:3f:16:11:
                    09:06:cd:4d:f8:cd:65:e6:58:47:77:01:46:c5:d1:
                    d1:40:5e:39:67:4e:06:64:09:f2:6c:85:5c:1a:1b:
                    74:0d:f7:60:0f:5d:bf:63:7b:5c:30:ac:eb:7e:d5:
                    a1:e8:5d:3d:60:f3:b0:2d:d4:e2:86:61:42:c1:39:
                    98:d1:9d:e6:6a:c2:04:28:8e:36:ba:7a:1a:90:21:
                    7e:4d:0a:80:88:50:fb:1a:37:f9:ed:24:54:5a:ca:
                    cb:ac:1d:2f:5b:97:96:5d:3f:e2:be:54:7b:89:72:
                    86:24:c8:d6:c2:2c:c2:b9:9f:f1:ad:2e:f2:a7:ea:
                    39:99:eb:d3:9d:3c:9f:c8:6f:ee:64:c1:bb:2f:30:
                    c3:41:35:a0:b8:2a:8b:72:2f:58:e9:37:d7:10:86:
                    a8:6c:6d:90:b8:6e:cf:ac:a3:73:0b:fd:f4:2f:ea:
                    47:69:a0:c9:fc:cc:ca:22:38:ab:9b:3a:d7:a9:63:
                    23:b0:af:98:c0:02:e0:7b:54:a9:61:68:18:11:a0:
                    0e:7a:0e:75:f4:ba:31:72:62:cb:87:0c:e5:26:f3:
                    7f:a0:30:b8:f7:87:55:c9:aa:48:8c:58:b9:eb:3d:
                    1b:26:f8:61:1f:bb:ae:4c:ac:37:87:2d:f7:e8:79:
                    48:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:37:CA:70:2D:43:F5:39:A2:9C:9F:E9:E9:E6:77:03:C6:16:2E:0E
            X509v3 Authority Key Identifier:
                keyid:F5:39:29:19:19:CD:E1:44:B0:34:EF:28:8B:0A:63:47:83:E8:2C:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:ab:9a:0d:d8:72:91:38:b0:b9:5f:92:9e:c7:0f:3d:7f:ce:
         8d:89:55:1b:92:db:fa:b3:9b:52:e3:99:a3:77:05:c7:f2:3f:
         2f:fb:75:6c:82:72:b9:25:b3:f4:0e:18:32:c5:25:a6:77:03:
         c0:2c:90:3d:40:f8:63:4c:50:55:d8:b1:c0:4e:41:c9:b8:6d:
         79:c5:20:af:9b:e3:3e:eb:88:bd:a5:d5:d5:f6:d4:a8:ae:cc:
         55:19:66:58:2d:f4:0a:17:ea:3c:b9:68:3c:4f:4f:13:7a:f4:
         a6:32:cc:c8:87:90:f1:58:12:c7:be:88:5d:13:b8:8e:13:e7:
         fd:38:a4:f8:08:c4:9c:be:fe:4d:17:84:ae:45:9f:27:ae:bb:
         33:fa:5d:f2:27:34:3d:58:7d:b1:77:eb:4d:39:f7:2b:e3:1f:
         a7:f0:33:c1:68:c4:f0:a4:31:54:f6:01:b6:d6:d1:60:cd:7a:
         6a:1e:b0:1f:12:df:0b:50:5b:31:a4:34:ed:2a:09:51:47:c3:
         5d:44:84:0a:44:4a:d7:d6:1f:68:03:c8:37:2d:13:0c:1b:82:
         4f:e2:9a:39:4f:9b:0e:12:f7:3e:d3:2b:64:0c:ac:23:04:07:
         bb:43:5c:61:f7:1d:2c:50:f9:f7:e8:ce:1e:37:90:84:bc:c4:
         be:39:99:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 23:45:25 2026 by rpki-client