Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E754/ACD1D7701DAB11E2BA2806AA08B02CD2/tQk3XiWpXStZwZWBw8Y1topJES0.mft
File:                     tQk3XiWpXStZwZWBw8Y1topJES0.mft (raw, json)
Hash identifier:          s3ehsIZSwTMpRIsDpgOy4bgrtpRkCkayjZ6KSqKGK1A=
Subject key identifier:   59:8B:04:AD:26:4F:96:73:26:1E:C3:49:F5:8B:B5:57:2F:B2:C4:A1
Authority key identifier: B5:09:37:5E:25:A9:5D:2B:59:C1:95:81:C3:C6:35:B6:8A:49:11:2D
Certificate issuer:       /CN=A917E754/serialNumber=B509375E25A95D2B59C19581C3C635B68A49112D
Certificate serial:       357D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tQk3XiWpXStZwZWBw8Y1topJES0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E754/ACD1D7701DAB11E2BA2806AA08B02CD2/tQk3XiWpXStZwZWBw8Y1topJES0.mft
Manifest number:          3573
Signing time:             Tue 18 Aug 2026 15:21:02 +0000
Manifest this update:     Tue 18 Aug 2026 15:21:01 +0000
Manifest next update:     Tue 25 Aug 2026 15:21:01 +0000
Files and hashes:         1: tQk3XiWpXStZwZWBw8Y1topJES0.crl (hash: wWKWsciGhIoN4Tjur7ljQkGOTNMscBBoR5QCS7w39y8=)
                          2: 2F79F386050511EA87CC7D42C4F9AE02.roa (hash: bvmOeL2YXx3nWwBQZ93HrV/AoxQKQL3Er6wwEPR+cds=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E754/ACD1D7701DAB11E2BA2806AA08B02CD2/tQk3XiWpXStZwZWBw8Y1topJES0.crl
                          rsync://rpki.apnic.net/member_repository/A917E754/ACD1D7701DAB11E2BA2806AA08B02CD2/tQk3XiWpXStZwZWBw8Y1topJES0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tQk3XiWpXStZwZWBw8Y1topJES0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 15:21:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13693 (0x357d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E754, serialNumber=B509375E25A95D2B59C19581C3C635B68A49112D
        Validity
            Not Before: Aug 18 15:21:01 2026 GMT
            Not After : Aug 25 15:21:01 2026 GMT
        Subject: CN=6a84785e-1d49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:12:6f:ea:ab:42:17:0d:bf:92:ae:23:b8:9b:
                    a4:13:32:69:d1:5b:a4:f6:d5:f7:11:66:79:53:4b:
                    aa:93:31:27:dd:f7:30:f5:c0:48:b9:8e:13:a0:95:
                    de:84:0d:b1:74:84:4e:f4:9e:d5:e8:9a:73:d0:44:
                    be:96:1c:50:bc:e2:2d:73:b4:e8:b8:94:df:b3:7a:
                    11:b0:78:8f:08:24:c4:bc:4a:0d:a1:1e:fb:20:a5:
                    dd:d5:55:36:6f:ac:d4:97:32:5c:bd:4f:f4:24:7e:
                    72:17:0f:e1:b8:40:90:b4:d1:85:18:47:0e:0c:4e:
                    b0:47:27:ca:e3:62:0e:7a:71:32:a9:86:8a:a2:fb:
                    7d:b7:ea:fb:48:7b:c3:d5:91:1c:1c:ea:73:ae:dd:
                    35:ba:67:77:5e:1f:4d:3b:05:eb:12:6f:da:dc:b2:
                    a0:60:ca:a4:4c:86:1f:61:d7:52:f1:ce:ac:85:3a:
                    67:7a:a0:ff:33:47:0d:1b:46:6b:d0:a7:79:38:12:
                    6f:b5:3c:8d:75:53:e3:58:eb:9c:33:9e:05:f1:9d:
                    08:d4:72:2b:1f:07:0f:64:23:12:30:9f:75:04:b3:
                    17:62:d4:3e:40:54:95:71:4b:d6:91:4c:50:29:e6:
                    8a:30:3d:3d:16:42:c8:b6:29:5f:e8:82:e4:9b:c0:
                    eb:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:8B:04:AD:26:4F:96:73:26:1E:C3:49:F5:8B:B5:57:2F:B2:C4:A1
            X509v3 Authority Key Identifier:
                keyid:B5:09:37:5E:25:A9:5D:2B:59:C1:95:81:C3:C6:35:B6:8A:49:11:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E754/ACD1D7701DAB11E2BA2806AA08B02CD2/tQk3XiWpXStZwZWBw8Y1topJES0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tQk3XiWpXStZwZWBw8Y1topJES0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E754/ACD1D7701DAB11E2BA2806AA08B02CD2/tQk3XiWpXStZwZWBw8Y1topJES0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:2b:61:1b:47:41:65:79:0d:43:41:c9:24:19:17:ac:a3:d4:
         05:89:e7:ce:a7:70:0c:89:b4:3a:4d:f6:18:d2:d2:44:74:09:
         59:b1:2c:48:8e:f5:f8:fd:10:de:07:06:87:30:a4:6e:f0:3a:
         a7:ca:2f:e2:1a:6d:f5:f9:d4:93:dd:af:9e:b6:5e:79:b1:78:
         bd:b4:46:5c:e6:c9:3d:12:43:ce:1d:2f:c7:dd:ab:29:5a:00:
         fc:a1:32:34:78:66:70:23:7a:0a:ee:48:dd:9a:9d:91:89:c1:
         e2:c9:df:c8:27:b0:df:2d:92:55:26:65:6b:71:f3:71:a4:32:
         1a:10:03:c2:cb:b8:a4:c7:99:41:39:11:55:9f:44:27:c0:ac:
         43:36:e5:76:66:c7:fc:34:b0:b8:a9:03:14:0d:4f:67:95:65:
         2f:5a:e8:43:61:72:bb:60:24:48:25:07:c4:77:14:d2:bc:bd:
         74:a2:da:0f:57:05:a8:a0:01:bd:90:5e:38:54:77:ee:1f:b6:
         57:a0:39:99:19:9a:36:48:10:c5:50:b4:08:e3:82:ea:f8:7b:
         61:10:bc:6b:9f:51:e8:a4:59:83:da:03:bf:ad:33:83:61:44:
         1e:4b:b3:3f:5a:72:c1:13:de:a7:4e:2b:42:47:3d:50:85:ce:
         c3:1e:85:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:46:21 2026 by rpki-client