Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917EB41/18D7955617BE11ED8B325938C4F9AE02/n0OyarpyjoL2JjN_omUh-Oafu8s.mft
File:                     n0OyarpyjoL2JjN_omUh-Oafu8s.mft (raw, json)
Hash identifier:          juvezx7QKGxj+l3Vyp9WHE0f4ISgCRgmjGUU/658KUQ=
Subject key identifier:   21:CF:13:E5:0C:9A:5D:94:CB:B6:D7:0B:A8:4E:1C:CD:80:F5:1F:A5
Authority key identifier: 9F:43:B2:6A:BA:72:8E:82:F6:26:33:7F:A2:65:21:F8:E6:9F:BB:CB
Certificate issuer:       /CN=A917EB41/serialNumber=9F43B26ABA728E82F626337FA26521F8E69FBBCB
Certificate serial:       035D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0OyarpyjoL2JjN_omUh-Oafu8s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917EB41/18D7955617BE11ED8B325938C4F9AE02/n0OyarpyjoL2JjN_omUh-Oafu8s.mft
Manifest number:          034F
Signing time:             Fri 21 Aug 2026 00:52:38 +0000
Manifest this update:     Fri 21 Aug 2026 00:52:37 +0000
Manifest next update:     Fri 28 Aug 2026 00:52:37 +0000
Files and hashes:         1: n0OyarpyjoL2JjN_omUh-Oafu8s.crl (hash: o1Q5wY+XZuo+FAdb//bmDUTNHQvPqc9BUnDdqnSbWMg=)
                          2: 22D1D50A58BC11ED96790F65C4F9AE02.roa (hash: A+qnbUnjSVIZC27YU1NZxiXk+sZg+SOpLKE+1J+co/A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917EB41/18D7955617BE11ED8B325938C4F9AE02/n0OyarpyjoL2JjN_omUh-Oafu8s.crl
                          rsync://rpki.apnic.net/member_repository/A917EB41/18D7955617BE11ED8B325938C4F9AE02/n0OyarpyjoL2JjN_omUh-Oafu8s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0OyarpyjoL2JjN_omUh-Oafu8s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 861 (0x35d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917EB41, serialNumber=9F43B26ABA728E82F626337FA26521F8E69FBBCB
        Validity
            Not Before: Aug 21 00:52:37 2026 GMT
            Not After : Aug 28 00:52:37 2026 GMT
        Subject: CN=6a87a156-faa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:be:e7:53:6f:d4:ee:bc:91:39:60:28:a1:94:
                    87:1a:1e:d0:33:bc:4b:d3:73:44:6f:a1:74:82:4b:
                    94:bc:ac:5e:62:00:5e:06:8c:a3:7b:b8:f1:aa:11:
                    3c:3d:cb:ff:24:1a:b3:9f:39:fa:c3:59:6e:b9:52:
                    a3:11:16:7a:b2:fd:e8:9d:c9:0d:52:d5:51:d5:f4:
                    a4:82:fe:21:5a:fd:1d:d4:80:d7:6e:19:67:fa:70:
                    ce:28:58:b1:f5:b9:21:ab:f5:a3:2f:d1:52:57:2a:
                    b3:8a:f7:e8:21:2c:4a:40:d5:46:6c:68:0f:76:d5:
                    cc:93:ea:f7:cd:d5:94:f7:30:44:ed:31:9b:79:bb:
                    44:4f:7b:64:95:cd:09:9a:7a:2e:6a:9b:c6:61:a6:
                    84:e1:af:d9:c2:1c:ef:13:42:20:7f:6b:99:1d:c9:
                    7e:28:bf:43:4d:be:f6:4d:6e:d9:01:02:92:f1:64:
                    9b:0a:b3:79:c8:7e:e9:c3:51:3e:62:e4:0e:a0:02:
                    9c:00:f4:c8:4b:23:d4:1d:86:f9:d5:6b:29:15:80:
                    13:73:3e:80:54:a7:17:b6:b8:88:e2:6b:01:e8:f8:
                    72:c8:2a:88:08:5f:01:a2:e3:fa:0b:0e:56:70:4a:
                    ac:29:24:e0:97:27:3f:1e:a7:1f:02:c0:15:20:24:
                    73:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:CF:13:E5:0C:9A:5D:94:CB:B6:D7:0B:A8:4E:1C:CD:80:F5:1F:A5
            X509v3 Authority Key Identifier:
                keyid:9F:43:B2:6A:BA:72:8E:82:F6:26:33:7F:A2:65:21:F8:E6:9F:BB:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917EB41/18D7955617BE11ED8B325938C4F9AE02/n0OyarpyjoL2JjN_omUh-Oafu8s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0OyarpyjoL2JjN_omUh-Oafu8s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EB41/18D7955617BE11ED8B325938C4F9AE02/n0OyarpyjoL2JjN_omUh-Oafu8s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:42:40:4e:98:79:9d:c0:8c:9b:f1:51:33:99:06:bb:bd:a5:
         91:a0:b8:bd:87:e9:c9:4a:99:de:34:ba:c2:3e:b2:8a:38:b3:
         41:68:45:f1:6f:b3:39:2f:01:d6:1c:ff:9d:95:32:80:e5:e4:
         67:a4:5c:a5:7f:b3:7e:fc:5e:10:be:fb:e6:77:42:ae:05:ce:
         80:8e:a7:2c:a9:df:2e:9e:5f:08:ec:8b:08:59:54:bd:69:5d:
         ff:33:75:d3:d2:86:06:67:70:72:93:da:a9:29:f9:05:d9:c8:
         55:3d:ff:fa:40:b0:0a:10:a5:2d:2e:64:4a:d2:61:80:63:5c:
         c6:61:3a:6b:d0:0d:e8:79:d2:5e:c8:ce:b8:01:66:06:52:58:
         d2:4a:f0:29:e2:8f:0b:3d:70:e0:6b:9c:f2:6f:3c:d0:1a:50:
         8e:27:6a:9a:00:83:06:d2:40:ca:02:62:70:39:3b:1c:00:7a:
         aa:1f:05:b2:9e:e6:2b:36:9e:ce:98:a2:a8:8e:8f:ac:ca:d3:
         75:85:66:b6:4f:d1:17:82:06:de:7e:68:ee:0f:04:f8:ca:3c:
         5e:a1:44:ce:10:30:24:d4:db:1e:6c:58:e9:33:9d:02:6e:43:
         2d:d2:ab:49:5e:e5:69:6d:23:72:24:47:3a:9d:f9:fe:84:f2:
         9a:1c:56:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 04:56:57 2026 by rpki-client