Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft
File:                     cqUfTuqiGLczbu_3p6WMsa5UQjk.mft (raw, json)
Hash identifier:          lp2UWSZxgsAkXjgYYAjHAAZ40fIAsAcLMr4xhAqY++0=
Subject key identifier:   16:46:C6:70:03:8E:BD:9B:AD:34:3F:3A:F3:C0:27:E0:42:FF:EB:8A
Authority key identifier: 72:A5:1F:4E:EA:A2:18:B7:33:6E:EF:F7:A7:A5:8C:B1:AE:54:42:39
Certificate issuer:       /CN=A917D121/serialNumber=72A51F4EEAA218B7336EEFF7A7A58CB1AE544239
Certificate serial:       087B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft
Manifest number:          0871
Signing time:             Tue 18 Aug 2026 21:10:26 +0000
Manifest this update:     Tue 18 Aug 2026 21:10:25 +0000
Manifest next update:     Tue 25 Aug 2026 21:10:25 +0000
Files and hashes:         1: cqUfTuqiGLczbu_3p6WMsa5UQjk.crl (hash: sQq1qHCO+LFlk1GWsqFwsEfBrIjZh1+iCJrm/L1rpmE=)
                          2: DAAB94840EC911EBA913852BC4F9AE02.roa (hash: oupCMhc1zc9sogDQvnnOtMORHUovshDacTpdu7VPrAE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.crl
                          rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 21:10:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2171 (0x87b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D121, serialNumber=72A51F4EEAA218B7336EEFF7A7A58CB1AE544239
        Validity
            Not Before: Aug 18 21:10:25 2026 GMT
            Not After : Aug 25 21:10:25 2026 GMT
        Subject: CN=6a84ca42-9ef5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:95:60:e8:1e:97:1c:40:61:47:ae:26:14:82:
                    86:8a:25:23:18:09:3c:4a:52:ad:6d:00:db:5a:7c:
                    f3:32:92:5a:3f:68:77:ba:20:60:f6:b4:6f:a6:99:
                    2d:b2:9d:b9:ff:43:09:4e:79:47:0c:33:24:ba:a3:
                    c1:1f:80:6a:a6:22:48:07:e2:d4:37:08:fd:fb:57:
                    c8:1b:d7:ab:95:f1:71:8a:4d:e6:e7:0b:af:7b:5e:
                    c1:52:98:6d:74:f8:71:45:fd:97:34:88:97:44:5b:
                    60:fa:96:a7:ca:ec:29:58:47:08:fd:47:e1:7b:6b:
                    39:ac:d9:65:be:7b:6c:76:72:ad:01:fd:bc:6a:45:
                    31:ad:a9:f7:1c:1e:e3:6e:6d:cc:52:9a:31:26:af:
                    74:99:5a:1c:5c:64:6c:89:78:3d:54:0e:77:31:fd:
                    4f:4a:ed:01:7a:f3:1b:bc:d8:50:32:2c:e4:52:cf:
                    4b:3d:c7:b3:2c:2c:c0:8f:db:32:05:d0:d7:7f:ed:
                    9d:e7:6e:50:d3:aa:31:2b:d9:9a:d3:c9:8a:79:c3:
                    9a:07:fb:91:15:7e:0f:23:3a:ed:e5:90:44:4b:00:
                    1f:61:a2:67:fe:62:03:ee:6a:6b:9c:47:5d:fc:4e:
                    fa:e1:5e:9a:ca:88:0a:4e:4e:8e:8b:37:bc:c1:d9:
                    e4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:46:C6:70:03:8E:BD:9B:AD:34:3F:3A:F3:C0:27:E0:42:FF:EB:8A
            X509v3 Authority Key Identifier:
                keyid:72:A5:1F:4E:EA:A2:18:B7:33:6E:EF:F7:A7:A5:8C:B1:AE:54:42:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:d6:76:ed:47:c0:ae:63:21:59:78:04:bc:1f:e3:9a:b4:fe:
         cf:a3:ad:89:54:72:6d:32:ce:54:c6:b4:84:a2:71:31:9f:37:
         6c:c7:39:9d:48:40:dd:ec:79:63:34:5a:b1:9f:6b:9a:50:2d:
         fd:d2:e1:df:69:79:4e:70:f3:36:a5:4e:c5:31:83:65:37:1b:
         22:3c:b5:54:c5:25:ea:f6:47:bf:b3:a6:4c:c5:b3:50:3f:fa:
         f6:b2:0d:af:2c:c0:c5:04:25:14:d2:0c:4c:eb:08:6a:08:43:
         75:68:e1:32:cf:88:05:14:e6:d3:2a:4c:4a:53:1a:6b:9a:68:
         97:5c:39:4d:fd:c7:50:af:e8:8b:6c:d9:3e:4e:41:bf:d5:47:
         36:99:ed:23:01:a7:9a:fd:4d:eb:12:19:bc:fa:09:4c:68:bc:
         0c:fc:a9:83:35:63:ab:58:68:4b:36:77:ea:c9:4a:45:51:59:
         8e:24:25:54:27:62:82:04:4c:68:ff:39:4b:c3:54:89:14:13:
         84:d8:29:d5:03:67:fa:b4:7b:ba:11:96:1d:52:c8:49:4b:96:
         af:2e:f0:bf:db:b1:06:e8:cf:31:9b:37:10:5e:da:d0:c6:d8:
         19:4d:ab:7d:b3:f5:36:fe:11:05:26:00:04:3c:51:1a:97:22:
         2b:53:a6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:43:56 2026 by rpki-client