Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.mft
File:                     UT8gd9itkRrHe1tcWbPiFMeLAjs.mft (raw, json)
Hash identifier:          Sb366I3/EFMpv11g6xkcOevNg5y9nELrGHqV04CqnxU=
Subject key identifier:   46:EE:1E:AF:15:E5:DF:69:64:89:1E:53:38:19:C8:B1:95:B0:BE:FD
Authority key identifier: 51:3F:20:77:D8:AD:91:1A:C7:7B:5B:5C:59:B3:E2:14:C7:8B:02:3B
Certificate issuer:       /CN=A917E1B9/serialNumber=513F2077D8AD911AC77B5B5C59B3E214C78B023B
Certificate serial:       06A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT8gd9itkRrHe1tcWbPiFMeLAjs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.mft
Manifest number:          0698
Signing time:             Tue 18 Aug 2026 22:49:09 +0000
Manifest this update:     Tue 18 Aug 2026 22:49:09 +0000
Manifest next update:     Tue 25 Aug 2026 22:49:09 +0000
Files and hashes:         1: UT8gd9itkRrHe1tcWbPiFMeLAjs.crl (hash: +RQYBYVs1c9r7Vm3s0SSWUUN/meMg61EYlj46VBGwvk=)
                          2: 7F27A9D6C88211EBB7A6F948C4F9AE02.roa (hash: 0DdKz2dwlNQQLlFEjcuZMVHNGtOylU4qbdsXKkCH924=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.crl
                          rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT8gd9itkRrHe1tcWbPiFMeLAjs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 22:49:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1696 (0x6a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E1B9, serialNumber=513F2077D8AD911AC77B5B5C59B3E214C78B023B
        Validity
            Not Before: Aug 18 22:49:09 2026 GMT
            Not After : Aug 25 22:49:09 2026 GMT
        Subject: CN=6a84e165-ed4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1b:29:39:d6:d6:b2:a2:94:42:71:d7:26:45:
                    0a:ba:7b:a5:49:92:ce:da:1d:f3:f0:1a:4f:7d:bc:
                    0a:38:91:21:bf:f6:28:5c:ef:ab:9a:bf:e9:ac:7e:
                    24:bd:81:25:f7:f1:0c:73:90:de:92:20:2d:02:c2:
                    d8:49:58:1b:e9:ab:9a:9b:02:f0:4c:eb:c6:d4:44:
                    f8:fb:18:fe:0c:2b:e5:6d:52:0d:bf:2d:17:32:24:
                    3e:d1:83:2c:d7:ea:ca:e1:5c:af:f8:b3:2a:5b:cb:
                    db:9d:48:50:1d:d0:61:e0:18:01:37:37:98:91:09:
                    36:95:92:d7:d0:57:e1:cf:ea:d0:65:fb:aa:6a:98:
                    90:3a:79:21:8f:18:b1:bd:86:b9:f0:9f:f5:0b:50:
                    84:02:e4:12:53:45:9d:d0:f3:b9:9f:da:ba:17:32:
                    c0:e8:f4:9c:9f:8a:48:29:2f:ff:ae:b6:35:5f:8c:
                    a9:66:a0:c5:de:db:98:d9:e2:ca:7b:b7:78:84:9c:
                    7f:03:78:04:7c:19:53:5e:49:2e:03:26:b1:af:dc:
                    93:03:da:12:b2:7e:69:a1:c2:75:3d:ac:5f:09:4c:
                    ca:f5:f0:41:6b:08:f1:6c:ea:4b:ef:7f:aa:e3:3b:
                    bc:15:98:c6:b8:e7:dc:89:dc:93:23:f0:03:07:9a:
                    93:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:EE:1E:AF:15:E5:DF:69:64:89:1E:53:38:19:C8:B1:95:B0:BE:FD
            X509v3 Authority Key Identifier:
                keyid:51:3F:20:77:D8:AD:91:1A:C7:7B:5B:5C:59:B3:E2:14:C7:8B:02:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT8gd9itkRrHe1tcWbPiFMeLAjs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:f7:2b:33:37:6f:ba:2c:9e:b1:11:24:2e:6c:7e:f1:76:43:
         05:9b:7a:f8:cf:13:e0:5b:28:a3:7c:bc:1b:e1:36:3a:cf:69:
         9a:ed:a4:96:cb:c0:b6:66:6c:38:6a:6f:24:c7:62:f4:d5:94:
         9c:25:d7:eb:ed:ff:0a:3c:e5:7c:a9:73:09:bf:68:73:f2:8c:
         ee:d9:bc:2c:2f:ed:17:a9:d2:a8:bf:79:57:f5:1d:ca:99:e8:
         ef:e5:11:22:47:51:a9:79:bb:30:25:df:0b:6a:7c:9e:e4:11:
         37:c4:e8:ac:9e:66:60:fa:42:ca:4b:8a:be:24:c1:c3:c1:7d:
         da:5d:97:8c:14:e5:f3:15:cd:69:a2:20:af:76:33:07:c1:b3:
         71:d3:e1:8a:12:b3:0c:49:d9:6c:2b:89:d0:47:10:8e:6e:11:
         e8:31:6b:47:75:b8:c0:cd:d1:3c:f5:0b:be:b9:76:05:37:98:
         0b:db:ca:ba:dd:35:ab:f6:aa:c5:65:93:cd:b0:22:28:0e:18:
         b9:31:a6:fe:f8:c9:a5:ed:2f:7f:de:14:75:79:55:18:66:87:
         64:6a:c2:b1:f3:3f:82:8e:e7:a5:40:64:aa:e1:c9:ca:d2:62:
         ab:bb:ba:db:ac:99:20:40:bd:fa:81:59:b6:e5:29:e2:1d:19:
         54:58:44:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:47:51 2026 by rpki-client