Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/G395gdniwsMPbyw0hxophthfiQ4.mft
File:                     G395gdniwsMPbyw0hxophthfiQ4.mft (raw, json)
Hash identifier:          TY8xezZYRApt6V2Rp0f5povP9zjdt0VAnepJzIGgRiw=
Subject key identifier:   2B:AE:B7:3B:BE:8F:E7:F0:64:33:08:76:CF:3E:9A:4E:40:97:F6:F7
Authority key identifier: 1B:7F:79:81:D9:E2:C2:C3:0F:6F:2C:34:87:1A:29:86:D8:5F:89:0E
Certificate issuer:       /CN=A9170AE9/serialNumber=1B7F7981D9E2C2C30F6F2C34871A2986D85F890E
Certificate serial:       05E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G395gdniwsMPbyw0hxophthfiQ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/G395gdniwsMPbyw0hxophthfiQ4.mft
Manifest number:          05DF
Signing time:             Tue 18 Aug 2026 23:20:46 +0000
Manifest this update:     Tue 18 Aug 2026 23:20:46 +0000
Manifest next update:     Tue 25 Aug 2026 23:20:46 +0000
Files and hashes:         1: G395gdniwsMPbyw0hxophthfiQ4.crl (hash: m4veky5cqvD3ZrQfiq7i5K2AHWEXTQy0qOO1c+P1kvA=)
                          2: 5D7779A6108A11EC9E1F3D49C4F9AE02.roa (hash: MARAw22DhIJFp/wfG19G5Gz01JcFPueQuJN4T376eTY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/G395gdniwsMPbyw0hxophthfiQ4.crl
                          rsync://rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/G395gdniwsMPbyw0hxophthfiQ4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G395gdniwsMPbyw0hxophthfiQ4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 23:20:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1510 (0x5e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170AE9, serialNumber=1B7F7981D9E2C2C30F6F2C34871A2986D85F890E
        Validity
            Not Before: Aug 18 23:20:46 2026 GMT
            Not After : Aug 25 23:20:46 2026 GMT
        Subject: CN=6a84e8ce-15fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8a:cf:0c:19:5b:6a:c1:9d:d6:50:8c:8f:06:
                    c0:0b:3a:71:d1:e6:6d:5b:1c:88:14:24:64:ad:8f:
                    89:48:21:5c:ce:a6:15:9a:c0:22:19:8d:aa:78:c4:
                    56:bc:bd:89:7e:11:9f:b7:0e:25:57:95:cc:a2:9e:
                    d8:0d:11:27:67:82:87:a4:2c:e4:1c:c2:b2:6b:fe:
                    61:15:33:2e:40:73:00:5e:b0:e9:88:d8:ed:09:1f:
                    1a:58:8b:b9:ef:9e:bb:ec:82:fe:69:f4:3f:19:0d:
                    03:29:6b:35:5f:3d:a9:ac:40:a9:ad:f8:45:9b:e6:
                    49:aa:f4:f4:69:cb:01:88:d8:96:c1:15:1d:69:e0:
                    f6:ef:ba:e6:96:52:b1:43:69:e3:66:39:1e:db:2c:
                    28:c4:08:32:91:fd:d1:00:a6:c4:94:29:90:67:93:
                    c9:ea:df:ab:25:02:49:4c:7d:5f:58:1a:68:6a:8d:
                    c9:c0:71:7a:27:cd:c0:1e:43:f1:9a:85:a4:d8:06:
                    11:ef:44:d0:8f:cd:0c:b4:68:7e:de:fb:e4:3e:4a:
                    ae:a6:86:b2:62:fd:b3:91:71:67:5a:40:2e:a1:04:
                    b3:a1:ec:a8:60:ea:c4:24:f5:ad:56:19:25:31:d7:
                    b3:83:c7:a4:0e:9c:c8:c8:bf:45:60:16:bb:be:25:
                    2a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:AE:B7:3B:BE:8F:E7:F0:64:33:08:76:CF:3E:9A:4E:40:97:F6:F7
            X509v3 Authority Key Identifier:
                keyid:1B:7F:79:81:D9:E2:C2:C3:0F:6F:2C:34:87:1A:29:86:D8:5F:89:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/G395gdniwsMPbyw0hxophthfiQ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G395gdniwsMPbyw0hxophthfiQ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/G395gdniwsMPbyw0hxophthfiQ4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:a6:e6:0e:97:35:31:0b:17:d6:a1:ea:b0:57:f4:8c:4f:2d:
         84:1b:1c:8f:75:13:65:b1:10:e3:7d:3f:8e:cf:86:d8:02:dc:
         28:88:f2:4c:22:b1:cd:ff:c6:3b:ed:f5:02:6c:5b:17:f8:2e:
         c2:e8:75:76:aa:16:36:dc:ba:32:05:25:15:ac:59:2c:62:d0:
         14:d2:23:83:fd:66:77:3f:e9:67:ef:ab:ad:6a:ad:c7:19:69:
         a0:98:f2:78:1b:16:58:33:3b:5c:87:dc:2a:b7:91:21:62:db:
         bb:2a:d5:60:63:26:f9:30:a6:ee:3e:e7:e5:dc:79:de:99:1a:
         5c:58:43:01:05:3d:36:cf:fd:63:d1:84:ca:18:0f:94:f2:f3:
         fb:e9:d4:e6:87:14:73:90:57:1f:2f:17:2d:01:b3:b0:27:a0:
         c3:c5:32:c1:ce:db:c3:98:e3:4b:3a:86:f9:b2:46:29:df:19:
         44:3d:35:d1:60:99:20:36:04:45:4c:5d:c6:86:15:9d:77:3b:
         86:97:7c:90:18:16:e5:75:73:8c:f2:3d:3c:68:63:c0:8f:6a:
         be:b5:48:44:6c:94:55:94:46:46:d7:21:2b:cc:b8:f4:ad:86:
         c5:4a:35:b0:9a:a0:f0:a4:c8:9c:25:b4:b8:67:10:74:cc:20:
         6f:d8:aa:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:46:59 2026 by rpki-client