Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/u2XjT0_eqStZoyVHozggimCJHgk.mft
File:                     u2XjT0_eqStZoyVHozggimCJHgk.mft (raw, json)
Hash identifier:          z8/DZr3L9MdYYNpx4oosxQYh6PaNbRvkoHG/agcZud0=
Subject key identifier:   08:4E:B2:81:EF:58:4F:1A:CA:BA:98:94:F2:47:88:E9:32:8E:3C:1A
Authority key identifier: BB:65:E3:4F:4F:DE:A9:2B:59:A3:25:47:A3:38:20:8A:60:89:1E:09
Certificate issuer:       /CN=A917F224/serialNumber=BB65E34F4FDEA92B59A32547A338208A60891E09
Certificate serial:       0CAF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u2XjT0_eqStZoyVHozggimCJHgk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/u2XjT0_eqStZoyVHozggimCJHgk.mft
Manifest number:          0CA3
Signing time:             Tue 18 Aug 2026 18:51:23 +0000
Manifest this update:     Tue 18 Aug 2026 18:51:23 +0000
Manifest next update:     Tue 25 Aug 2026 18:51:23 +0000
Files and hashes:         1: u2XjT0_eqStZoyVHozggimCJHgk.crl (hash: G6t6ecNBcJ5c/PL/2/b45AIPN7cgTfyYbVz4UZ6eq0U=)
                          2: A46E4EAC205911EAAB6ECF1FC4F9AE02.roa (hash: aH2PFWJx8DbhX2Z6lNZyZCXpMFOnUtp/rNxQv+i82qY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/u2XjT0_eqStZoyVHozggimCJHgk.crl
                          rsync://rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/u2XjT0_eqStZoyVHozggimCJHgk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u2XjT0_eqStZoyVHozggimCJHgk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 18:51:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3247 (0xcaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F224, serialNumber=BB65E34F4FDEA92B59A32547A338208A60891E09
        Validity
            Not Before: Aug 18 18:51:23 2026 GMT
            Not After : Aug 25 18:51:23 2026 GMT
        Subject: CN=6a84a9ab-ba8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:5c:70:ca:ce:cb:9d:a5:4c:16:3f:b0:f4:f5:
                    22:a3:5e:7f:91:e8:1e:ad:cc:bf:00:b7:a2:25:4d:
                    d3:9d:a8:98:e0:56:9a:76:68:2b:d7:68:73:55:3f:
                    21:f9:59:1e:c9:b5:f4:12:ff:a0:ed:e9:e6:67:5f:
                    26:7a:2c:24:56:42:87:b4:21:97:0f:a3:41:b5:8f:
                    e4:f2:f8:dc:45:fc:c4:0d:d9:7d:d6:1a:38:21:c9:
                    7e:ad:99:90:5c:84:cf:14:62:17:21:dd:36:bd:5f:
                    8d:d0:d7:14:31:c8:53:d4:ff:4a:f3:1f:08:40:54:
                    81:41:42:2b:b0:ea:ab:bb:f6:a2:7b:80:03:e4:d9:
                    ac:22:56:40:d4:3e:5b:4f:83:78:cd:2c:73:85:2e:
                    dd:7f:f2:22:e2:42:f2:ad:37:1f:40:cf:3d:9e:7c:
                    de:19:80:5b:93:49:43:b8:53:22:9b:3f:80:17:a9:
                    39:f3:0d:72:f5:db:6a:f7:2d:10:fb:be:5c:51:a0:
                    f4:b5:bf:a2:60:37:ef:44:d2:6b:c3:59:60:4e:3d:
                    c4:53:26:8b:66:1e:3e:8e:32:f9:1c:50:f0:73:33:
                    25:f4:28:19:dd:2b:a3:a4:cc:b2:e3:14:00:fb:4e:
                    4d:fd:6f:e4:53:c5:ef:21:78:87:87:28:a2:5c:d7:
                    cc:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:4E:B2:81:EF:58:4F:1A:CA:BA:98:94:F2:47:88:E9:32:8E:3C:1A
            X509v3 Authority Key Identifier:
                keyid:BB:65:E3:4F:4F:DE:A9:2B:59:A3:25:47:A3:38:20:8A:60:89:1E:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/u2XjT0_eqStZoyVHozggimCJHgk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u2XjT0_eqStZoyVHozggimCJHgk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/u2XjT0_eqStZoyVHozggimCJHgk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:31:36:da:5d:97:2f:8e:90:61:b1:c8:fc:d4:aa:f6:a3:e0:
         29:a9:96:d2:29:73:f8:61:86:32:dd:62:b0:f7:3f:89:4e:bb:
         50:d2:c3:80:5d:31:c7:3e:1b:ce:e6:d0:a7:de:31:a3:63:db:
         9f:dc:c8:2c:aa:f1:8f:2a:67:37:10:39:9f:aa:71:86:24:00:
         03:62:72:3b:2c:7e:ca:7c:ee:df:5a:72:7c:89:74:79:2b:4e:
         b4:47:14:79:9b:07:99:ad:97:59:4e:9d:fa:8b:b8:a3:cd:c1:
         68:c8:ae:c2:97:77:d2:85:1c:46:fc:f6:c2:16:7a:3c:cd:05:
         ac:d4:8d:2b:3e:ab:25:de:d6:87:17:8e:ae:1c:6e:29:fd:82:
         db:3a:23:8a:6b:d5:34:f7:c6:7b:7d:6e:49:39:b8:b8:15:ad:
         36:ab:01:0c:a7:24:6b:c6:aa:9d:84:c0:65:d9:f6:a2:31:fa:
         d8:da:b4:d6:b5:3d:49:ab:66:bd:67:63:f8:b0:cc:a9:2c:e3:
         bd:47:98:ee:33:f1:8b:0e:72:91:06:03:fa:6f:a4:ea:f0:ba:
         1e:fa:26:c0:d7:8d:2d:3b:50:2f:1e:57:1c:ba:0c:3b:e4:0f:
         98:10:ba:01:5c:dc:79:9d:fb:d5:9f:96:c4:70:64:ed:37:59:
         03:a6:4a:bd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0YyMjQxMTAvBgNVBAUTKEJCNjVFMzRGNEZERUE5MkI1OUEzMjU0N0EzMzgyMDhB
NjA4OTFFMDkwHhcNMjYwODE4MTg1MTIzWhcNMjYwODI1MTg1MTIzWjAYMRYwFAYD
VQQDEw02YTg0YTlhYi1iYThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6Fxwys7LnaVMFj+w9PUio15/kegercy/ALeiJU3TnaiY4Faadmgr12hzVT8h
+VkeybX0Ev+g7enmZ18meiwkVkKHtCGXD6NBtY/k8vjcRfzEDdl91ho4Icl+rZmQ
XITPFGIXId02vV+N0NcUMchT1P9K8x8IQFSBQUIrsOqru/aie4AD5NmsIlZA1D5b
T4N4zSxzhS7df/Ii4kLyrTcfQM89nnzeGYBbk0lDuFMimz+AF6k58w1y9dtq9y0Q
+75cUaD0tb+iYDfvRNJrw1lgTj3EUyaLZh4+jjL5HFDwczMl9CgZ3SujpMyy4xQA
+05N/W/kU8XvIXiHhyiiXNfMEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAhOsoHv
WE8ayrqYlPJHiOkyjjwaMB8GA1UdIwQYMBaAFLtl409P3qkrWaMlR6M4IIpgiR4J
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjIyNC82RTlCQTQxQTIw
NTgxMUVBQjcxNzcyMUJDNEY5QUUwMi91MlhqVDBfZXFTdFpveVZIb3pnZ2ltQ0pI
Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3UyWGpUMF9lcVN0Wm95VkhvemdnaW1DSkhnay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RjIyNC82RTlCQTQxQTIwNTgxMUVBQjcxNzcyMUJDNEY5QUUwMi91MlhqVDBfZXFT
dFpveVZIb3pnZ2ltQ0pIZ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnTE22l2XL46QYbHI/NSq9qPgKamW0ilz+GGGMt1isPc/iU67UNLDgF0xxz4b
zubQp94xo2Pbn9zILKrxjypnNxA5n6pxhiQAA2JyOyx+ynzu31pyfIl0eStOtEcU
eZsHma2XWU6d+ou4o83BaMiuwpd30oUcRvz2whZ6PM0FrNSNKz6rJd7WhxeOrhxu
Kf2C2zojimvVNPfGe31uSTm4uBWtNqsBDKcka8aqnYTAZdn2ojH62Nq01rU9Satm
vWdj+LDMqSzjvUeY7jPxiw5ykQYD+m+k6vC6HvomwNeNLTtQLx5XHLoMO+QPmBC6
AVzceZ371Z+WxHBk7TdZA6ZKvQ==
-----END CERTIFICATE-----
Generated at Wed Aug 19 11:46:51 2026 by rpki-client