Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft
File:                     jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft (raw, json)
Hash identifier:          Gd8Ks+Z1lqcrVjFezBhrIGTLcNTjRbcTmZpOmU84TfU=
Subject key identifier:   9A:36:92:9D:61:B0:51:60:63:50:9D:73:3E:A6:C9:EA:92:1C:AA:38
Authority key identifier: 8E:52:61:23:EF:52:CF:84:95:58:26:A2:72:8A:33:07:57:F1:E8:0C
Certificate issuer:       /CN=A917A2D1/serialNumber=8E526123EF52CF84955826A2728A330757F1E80C
Certificate serial:       018E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft
Manifest number:          0188
Signing time:             Wed 19 Aug 2026 05:06:25 +0000
Manifest this update:     Wed 19 Aug 2026 05:06:25 +0000
Manifest next update:     Wed 26 Aug 2026 05:06:25 +0000
Files and hashes:         1: jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl (hash: kMEsdDpLsVYNchHES3kdhAvrKaLjmPC6zVKJDenm3V8=)
                          2: 29703A0645A911EF965B5A37C4F9AE02.roa (hash: 9bbDY8F7VTJe7fWMHNRwEy390EAPlvg4QCMeRuahlMA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl
                          rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 05:06:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 398 (0x18e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A2D1, serialNumber=8E526123EF52CF84955826A2728A330757F1E80C
        Validity
            Not Before: Aug 19 05:06:25 2026 GMT
            Not After : Aug 26 05:06:25 2026 GMT
        Subject: CN=6a8539d1-e997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:eb:20:1c:b4:2f:4e:41:47:4d:14:06:a5:d9:
                    79:e3:5b:9a:20:9e:b5:05:56:38:98:53:d0:5e:5a:
                    e6:04:c2:f8:49:44:72:d3:3d:d0:59:1d:5d:94:69:
                    49:ea:05:71:32:2d:9e:a7:0f:64:bf:73:8b:7d:cd:
                    95:09:92:59:8f:f6:d3:35:ed:c5:72:8d:fd:f4:d4:
                    dc:cb:df:97:ed:5c:69:63:a0:01:e0:0d:53:78:e7:
                    01:96:b2:ef:d4:fb:86:83:8c:24:4e:41:b3:b5:61:
                    e5:0f:27:a2:36:86:f3:90:50:30:c2:f9:bd:f0:68:
                    0d:8e:c3:46:dc:43:17:1b:ae:ed:fe:8d:fe:3a:42:
                    ae:53:8c:19:a2:78:fb:ce:c7:45:af:7b:8f:d7:35:
                    78:c8:1f:0e:92:54:85:d8:ec:91:00:b6:03:a9:66:
                    f0:ec:c7:06:47:61:19:66:ee:71:60:42:35:d9:12:
                    0c:3d:24:47:99:45:13:26:32:90:53:9d:9d:a6:6c:
                    c4:d4:db:5c:ad:02:f5:1b:17:ee:ab:81:61:df:10:
                    9a:10:3c:6c:bf:fb:e6:b0:6e:01:21:5f:90:6b:de:
                    51:88:f8:54:54:ac:ba:69:62:c5:64:7b:ac:d2:44:
                    c3:26:b0:0e:2c:ca:d3:59:fb:91:96:1b:9a:e2:11:
                    1d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:36:92:9D:61:B0:51:60:63:50:9D:73:3E:A6:C9:EA:92:1C:AA:38
            X509v3 Authority Key Identifier:
                keyid:8E:52:61:23:EF:52:CF:84:95:58:26:A2:72:8A:33:07:57:F1:E8:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:db:04:62:b1:01:fb:2b:30:93:55:d0:00:d2:c5:8f:89:2a:
         fe:d7:90:a1:e5:ed:9a:9d:d4:79:49:31:04:e2:a8:9b:c4:e4:
         37:d5:20:35:00:a5:8a:f5:1d:93:15:7d:dd:55:dd:8d:06:48:
         b7:bb:12:47:9c:e1:d8:d7:42:eb:c1:37:88:b1:c9:b2:be:60:
         4b:2e:eb:07:e7:70:aa:2b:5b:4b:ee:19:83:30:53:0f:60:69:
         0e:00:3b:5d:69:64:18:6f:29:7b:1e:8d:a5:22:40:f1:cc:db:
         62:3a:8b:58:04:bd:d5:90:b9:05:49:75:f6:50:b9:ab:26:d2:
         c3:3d:c5:dc:06:f1:73:cf:cf:86:10:80:43:1f:17:3f:48:ae:
         eb:46:69:55:b1:ac:27:df:43:71:fc:62:b3:e2:3b:89:9f:99:
         11:b5:48:f8:9b:72:07:38:56:eb:fa:46:53:4e:b6:46:8c:09:
         f3:cc:51:9a:df:08:7c:c8:c9:08:82:2d:c9:b4:82:0b:11:65:
         00:b3:e6:bb:8a:67:80:a9:80:53:7c:f2:57:36:34:75:87:aa:
         e2:bd:28:74:e6:0d:e9:24:3c:58:25:2f:d1:a4:7d:56:7f:93:
         4e:c2:c7:cb:71:92:a0:03:59:e3:a4:c1:5a:1c:b2:00:5e:b6:
         71:fc:0c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:40:17 2026 by rpki-client