Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft
File:                     agzMvwk_8QNvugMspR3gE6ZLS4s.mft (raw, json)
Hash identifier:          D5y3Ty4WJAKzzRlmlgb3Zf/xZOxGPpxTCV/bGcffIb8=
Subject key identifier:   C5:A6:11:84:75:C2:AE:98:B7:85:97:DE:EE:82:25:CA:B0:8B:29:2E
Authority key identifier: 6A:0C:CC:BF:09:3F:F1:03:6F:BA:03:2C:A5:1D:E0:13:A6:4B:4B:8B
Certificate issuer:       /CN=A917275D/serialNumber=6A0CCCBF093FF1036FBA032CA51DE013A64B4B8B
Certificate serial:       044C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agzMvwk_8QNvugMspR3gE6ZLS4s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft
Manifest number:          0444
Signing time:             Thu 27 Aug 2026 00:00:40 +0000
Manifest this update:     Thu 27 Aug 2026 00:00:39 +0000
Manifest next update:     Thu 03 Sep 2026 00:00:39 +0000
Files and hashes:         1: agzMvwk_8QNvugMspR3gE6ZLS4s.crl (hash: 6b+WBp/ff8BFUoRpTInYJJqHSV8ZS/8A0jBCiwYkeik=)
                          2: 9CAFFE72B58F11ECBCF10934C4F9AE02.roa (hash: lAdm3PajVfH/BvXzc6EjbVcxH1i9/ea4wQd516Yt3/w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.crl
                          rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agzMvwk_8QNvugMspR3gE6ZLS4s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 03 Sep 2026 00:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1100 (0x44c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917275D, serialNumber=6A0CCCBF093FF1036FBA032CA51DE013A64B4B8B
        Validity
            Not Before: Aug 27 00:00:39 2026 GMT
            Not After : Sep  3 00:00:39 2026 GMT
        Subject: CN=6a8f7e28-e041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4f:b5:58:a6:24:8f:3a:68:41:e1:fc:9d:10:
                    88:02:c3:3e:0a:ac:c7:43:1b:36:51:c0:24:3b:5b:
                    27:44:d3:40:e7:63:2b:e9:9d:96:2a:a9:b4:06:05:
                    c1:b5:08:4f:9c:61:2d:36:a7:b8:75:6f:74:73:05:
                    34:6e:1c:90:dc:2c:26:f9:81:2e:3b:65:02:6f:72:
                    11:b5:a3:d2:96:87:33:79:75:a5:d5:95:be:5a:b4:
                    6f:c6:e9:7a:fb:0f:be:a4:dc:50:26:c7:85:88:ea:
                    d8:29:07:ff:b6:e5:ca:dd:68:17:f8:5a:ce:63:f7:
                    7e:cb:67:49:f7:68:7d:58:12:86:df:1f:de:b2:db:
                    d7:c9:f5:18:36:35:be:fb:12:5d:54:98:a2:df:3b:
                    50:73:db:81:b5:c5:b9:c9:7e:67:db:88:98:e2:34:
                    83:5c:53:d2:7f:f7:82:a3:9e:e1:f2:86:c6:b1:5e:
                    c2:ff:15:4a:96:b7:24:c4:be:dc:f3:9d:be:af:63:
                    2c:28:9d:2e:ed:48:14:a3:7e:84:bd:ea:e2:65:37:
                    cd:e4:8a:81:03:22:bd:1c:b3:bb:35:bb:ae:08:01:
                    18:c3:c8:5b:31:73:a4:b2:70:b6:6c:44:7a:5a:94:
                    a3:75:aa:e9:48:72:3a:58:eb:25:d2:52:be:1c:13:
                    be:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:A6:11:84:75:C2:AE:98:B7:85:97:DE:EE:82:25:CA:B0:8B:29:2E
            X509v3 Authority Key Identifier:
                keyid:6A:0C:CC:BF:09:3F:F1:03:6F:BA:03:2C:A5:1D:E0:13:A6:4B:4B:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agzMvwk_8QNvugMspR3gE6ZLS4s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:23:08:ec:ed:89:c3:69:9c:d7:1a:42:89:22:64:f8:95:f7:
         14:fe:1f:61:f4:e6:18:bc:e1:3b:d1:51:39:1d:a1:b0:05:ac:
         16:df:61:68:32:10:eb:ab:15:64:4b:1f:e1:d2:65:48:6b:b7:
         c5:74:02:3c:ff:5c:6c:83:a5:d7:8a:9e:ed:87:55:e4:62:f8:
         92:47:1b:bd:0d:6b:2f:0b:b0:51:dc:1d:19:07:e0:f1:03:45:
         8c:b5:fd:8b:96:f3:37:a7:fc:70:fa:ac:8a:db:b4:68:3b:95:
         3c:f2:e5:ad:52:fa:43:8b:34:fe:c2:1b:63:42:1f:7d:71:e8:
         69:8b:7e:37:18:ff:4b:99:38:79:08:6d:58:b9:90:b4:b7:54:
         0f:96:5c:10:e6:3e:05:cd:00:45:98:8f:f6:12:eb:75:81:d9:
         6a:3a:8b:72:6a:3e:bc:e8:2c:ff:f1:80:1d:ab:eb:1a:69:2f:
         32:30:1e:6c:db:87:ab:de:5c:80:31:60:fd:b0:cc:fe:36:51:
         41:a2:2e:a5:a5:08:86:4e:2e:eb:1b:2e:c7:7b:44:ec:df:7c:
         d0:5f:17:b1:93:34:f0:8b:3e:4e:f8:6b:18:d1:ea:21:cb:d4:
         41:98:9f:65:f4:cc:57:be:cb:47:8c:5d:00:9d:09:d1:de:4c:
         d0:02:8e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 08:52:29 2026 by rpki-client