Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E832/3B47108C500411EAA6D93054C4F9AE02/ID0eLahSvltkOpm-9WTXdL3cx_Q.mft
File:                     ID0eLahSvltkOpm-9WTXdL3cx_Q.mft (raw, json)
Hash identifier:          tqXtQ5KlgggQxvM+r+KL0yvCMHJHlYuYDtWstbVJvRg=
Subject key identifier:   44:D5:D7:17:67:1E:2F:83:29:92:89:DE:32:00:BD:94:99:33:2D:42
Authority key identifier: 20:3D:1E:2D:A8:52:BE:5B:64:3A:99:BE:F5:64:D7:74:BD:DC:C7:F4
Certificate issuer:       /CN=A917E832/serialNumber=203D1E2DA852BE5B643A99BEF564D774BDDCC7F4
Certificate serial:       0BB8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ID0eLahSvltkOpm-9WTXdL3cx_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E832/3B47108C500411EAA6D93054C4F9AE02/ID0eLahSvltkOpm-9WTXdL3cx_Q.mft
Manifest number:          0BAA
Signing time:             Tue 18 Aug 2026 19:20:47 +0000
Manifest this update:     Tue 18 Aug 2026 19:20:46 +0000
Manifest next update:     Tue 25 Aug 2026 19:20:46 +0000
Files and hashes:         1: ID0eLahSvltkOpm-9WTXdL3cx_Q.crl (hash: BFW2f91Zav7aPC2HdLHM3bD9XCt06GwJpdLqK/f47eg=)
                          2: E869880C500511EA98307A59C4F9AE02.roa (hash: eDmxH/4SMnVpNQqwIMaBf1pbV6bCEaBXN55W5wLAprg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E832/3B47108C500411EAA6D93054C4F9AE02/ID0eLahSvltkOpm-9WTXdL3cx_Q.crl
                          rsync://rpki.apnic.net/member_repository/A917E832/3B47108C500411EAA6D93054C4F9AE02/ID0eLahSvltkOpm-9WTXdL3cx_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ID0eLahSvltkOpm-9WTXdL3cx_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 19:20:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3000 (0xbb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E832, serialNumber=203D1E2DA852BE5B643A99BEF564D774BDDCC7F4
        Validity
            Not Before: Aug 18 19:20:46 2026 GMT
            Not After : Aug 25 19:20:46 2026 GMT
        Subject: CN=6a84b08e-4c66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:7d:7b:88:ad:ff:67:96:a2:20:dc:63:8a:32:
                    7b:de:1e:b3:e1:45:48:38:ae:13:b6:8d:f2:5c:1a:
                    67:26:1b:5f:82:a0:f4:80:54:b2:9e:74:c7:64:e9:
                    55:6a:4a:11:4a:ea:d7:64:55:4f:71:87:42:5d:5d:
                    e5:c2:59:9a:95:ce:55:6e:1f:55:14:f7:61:f3:61:
                    19:e8:ac:0c:03:08:16:a3:6f:1e:5f:d4:c3:07:bb:
                    67:62:fd:ee:1c:3c:7d:66:8a:24:d6:1a:8c:bc:83:
                    d7:4a:33:d8:84:40:c3:8c:03:2a:7d:f0:4c:38:49:
                    35:02:e2:6e:ae:36:8f:2d:f9:3d:dc:cc:f8:72:5e:
                    b1:7f:e2:e0:62:7f:cb:93:52:b8:cd:8a:54:98:73:
                    d7:5b:db:ed:ba:c6:57:70:8a:2b:2f:84:70:93:67:
                    79:2c:79:87:d2:85:77:9c:d7:8e:73:8d:de:4e:99:
                    19:4f:f3:85:d7:8a:7d:66:2e:ae:1b:d1:f9:e6:de:
                    c2:3a:68:45:2d:ee:7f:1b:52:ad:31:f3:6b:59:bd:
                    92:8e:ad:4d:f8:04:6d:40:f5:04:b4:e0:de:b9:aa:
                    ec:6c:e3:0f:ec:9c:22:45:78:ff:44:d6:70:c7:d7:
                    24:11:5c:fb:28:32:4c:ae:93:00:14:99:82:7e:5c:
                    52:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:D5:D7:17:67:1E:2F:83:29:92:89:DE:32:00:BD:94:99:33:2D:42
            X509v3 Authority Key Identifier:
                keyid:20:3D:1E:2D:A8:52:BE:5B:64:3A:99:BE:F5:64:D7:74:BD:DC:C7:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E832/3B47108C500411EAA6D93054C4F9AE02/ID0eLahSvltkOpm-9WTXdL3cx_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ID0eLahSvltkOpm-9WTXdL3cx_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E832/3B47108C500411EAA6D93054C4F9AE02/ID0eLahSvltkOpm-9WTXdL3cx_Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:ea:ce:af:7e:45:b1:94:e0:12:a5:52:b2:db:b2:4e:01:1a:
         b1:eb:00:3f:f9:8a:4e:fb:63:ed:cf:a1:ee:a1:4f:df:22:ac:
         37:4a:9d:22:4b:1b:5a:42:59:f0:9f:4d:94:d0:ff:97:ee:f8:
         a9:4e:69:3e:e7:55:76:04:ce:dd:5a:96:d7:96:93:11:19:2c:
         ce:c5:3c:08:e6:c9:23:8a:09:ad:de:c4:46:92:2c:d1:53:66:
         21:2f:90:15:52:22:a5:d6:4d:75:d9:79:84:46:91:af:44:00:
         c6:ad:34:c1:72:d7:8f:b8:e5:1a:50:a8:4c:7a:8b:d9:3b:e0:
         0d:37:d9:ed:07:80:b7:21:e6:a9:f4:34:56:a6:56:92:ab:3b:
         50:0b:5e:5f:8c:73:fa:a3:07:7a:ff:48:c3:c7:1a:63:b4:5f:
         e2:1a:ee:a8:3e:df:ea:be:6f:9d:90:04:f4:09:b9:09:02:3c:
         0a:1d:14:86:25:24:07:9e:f6:b7:01:f8:87:a6:59:4f:c8:2c:
         e2:b1:d1:1a:20:29:a4:61:26:d2:e0:eb:45:5b:99:3a:c8:a1:
         65:6e:ef:ab:6a:8e:20:1f:5a:36:05:3f:b3:7e:58:86:7d:a3:
         f3:66:de:5c:ce:06:2f:7e:b8:86:e8:c7:67:b0:30:7c:3b:70:
         1d:96:15:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:54:56 2026 by rpki-client