Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E10B/1B40D2B285BA11F1B4DBBCA460A30FBC/3MnOwPy4zLyvexzByLIVJW33h48.mft
File:                     3MnOwPy4zLyvexzByLIVJW33h48.mft (raw, json)
Hash identifier:          Z5hfrK/7hE6XiumHeN6aA4+4W1yqa6fPQR5CdUcTBzo=
Subject key identifier:   B8:32:F5:A5:2F:5B:18:04:FA:9C:55:47:B3:AE:F5:53:2C:BA:42:1C
Authority key identifier: DC:C9:CE:C0:FC:B8:CC:BC:AF:7B:1C:C1:C8:B2:15:25:6D:F7:87:8F
Certificate issuer:       /CN=A917E10B/serialNumber=DCC9CEC0FCB8CCBCAF7B1CC1C8B215256DF7878F
Certificate serial:       12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MnOwPy4zLyvexzByLIVJW33h48.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E10B/1B40D2B285BA11F1B4DBBCA460A30FBC/3MnOwPy4zLyvexzByLIVJW33h48.mft
Manifest number:          11
Signing time:             Wed 19 Aug 2026 09:48:36 +0000
Manifest this update:     Wed 19 Aug 2026 09:48:35 +0000
Manifest next update:     Wed 26 Aug 2026 09:48:35 +0000
Files and hashes:         1: 3MnOwPy4zLyvexzByLIVJW33h48.crl (hash: 4sg5RKJnLxrATemEVSkQKdSggHdyRT/QxdwCsUV0N8M=)
                          2: 21FFC88285BB11F18D64891761A30FBC.roa (hash: PC6qEPDsndTLYCHvOKo4WSESSfo2uGz9CI0DWNFOq5s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E10B/1B40D2B285BA11F1B4DBBCA460A30FBC/3MnOwPy4zLyvexzByLIVJW33h48.crl
                          rsync://rpki.apnic.net/member_repository/A917E10B/1B40D2B285BA11F1B4DBBCA460A30FBC/3MnOwPy4zLyvexzByLIVJW33h48.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MnOwPy4zLyvexzByLIVJW33h48.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E10B, serialNumber=DCC9CEC0FCB8CCBCAF7B1CC1C8B215256DF7878F
        Validity
            Not Before: Aug 19 09:48:35 2026 GMT
            Not After : Aug 26 09:48:35 2026 GMT
        Subject: CN=6a857bf4-1102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ba:b2:7c:fd:05:d7:e0:a5:83:85:b2:5d:81:
                    97:cc:07:54:d5:f9:81:d7:11:2d:2f:ec:e5:25:e6:
                    53:db:e0:78:d9:bf:88:7e:5d:0c:19:82:f2:bf:79:
                    32:64:5b:45:a7:76:9e:ed:34:b1:ff:31:3a:11:e2:
                    e6:8d:92:a3:d1:bf:ba:ce:e4:af:63:79:f4:a9:59:
                    07:9d:1f:6f:1d:8b:3a:fb:fb:f7:9f:e6:8f:5b:6c:
                    c6:d3:39:71:e4:45:4c:de:68:e3:d9:35:d6:b1:96:
                    be:ae:b2:35:fd:fe:61:e4:29:f5:35:40:22:33:94:
                    b3:8b:db:56:f8:d9:40:64:aa:f8:9f:bb:4b:29:01:
                    e7:2e:fa:57:1e:7f:65:f1:be:68:26:cd:72:07:13:
                    cb:90:9e:25:7f:0d:95:e1:8a:f0:ce:c6:62:f3:85:
                    ca:cf:98:6e:db:4e:2d:27:68:53:c4:de:bd:ad:33:
                    58:2e:8f:33:43:41:03:ed:18:5f:df:a0:48:c8:5d:
                    12:9a:1a:40:2a:05:0f:61:bc:09:e1:e4:90:58:bc:
                    3d:88:97:eb:79:28:c6:b6:ad:83:e1:d3:75:3d:ac:
                    8c:ed:0c:95:c3:ac:7b:87:7a:44:ac:07:dc:ed:54:
                    fe:4c:c4:3d:7d:ea:06:f6:34:d0:8c:7a:91:14:c8:
                    3e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:32:F5:A5:2F:5B:18:04:FA:9C:55:47:B3:AE:F5:53:2C:BA:42:1C
            X509v3 Authority Key Identifier:
                keyid:DC:C9:CE:C0:FC:B8:CC:BC:AF:7B:1C:C1:C8:B2:15:25:6D:F7:87:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E10B/1B40D2B285BA11F1B4DBBCA460A30FBC/3MnOwPy4zLyvexzByLIVJW33h48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MnOwPy4zLyvexzByLIVJW33h48.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E10B/1B40D2B285BA11F1B4DBBCA460A30FBC/3MnOwPy4zLyvexzByLIVJW33h48.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:21:f1:8e:07:a4:cb:16:f9:03:43:9c:e2:a8:4b:2b:d2:9d:
         ba:1a:9b:db:e7:4f:77:2b:a3:d8:fa:bd:fe:86:ef:bd:ae:41:
         2f:31:3d:cc:77:9b:2c:e2:eb:cd:ff:67:ba:73:38:32:b4:70:
         01:ff:68:e1:43:63:35:bd:25:ba:3d:05:e9:55:9e:3c:7b:41:
         00:a3:dc:51:6a:4e:83:fd:38:54:ec:64:39:e3:d3:a5:6d:bc:
         3c:7c:07:65:57:67:1b:36:46:81:22:1b:3f:d9:b4:bf:0c:52:
         b5:46:2b:51:6b:99:a3:1f:ca:e9:3e:6f:a0:a9:aa:5e:79:05:
         1e:45:5a:ec:9d:95:6e:b2:d7:a6:cb:d1:e7:d9:bf:a4:94:91:
         bb:28:9a:a6:39:24:a3:f6:77:29:3d:6b:7c:3e:16:9f:86:59:
         ce:e8:18:e8:76:5f:a0:7a:ac:a1:d2:25:0b:a3:df:60:d2:f1:
         2b:6b:40:5e:3b:17:68:8c:59:fb:69:20:9a:0e:37:ca:94:c0:
         32:dd:51:46:4e:43:ce:7f:23:9a:70:57:6b:a5:9b:8b:e8:c0:
         00:d8:65:9d:ae:25:70:6b:ae:9d:98:9e:4a:a0:1e:60:13:87:
         ad:57:ae:a4:d0:72:16:62:3a:c4:75:07:7d:7f:49:c0:94:69:
         78:e0:56:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:43:49 2026 by rpki-client