Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9181CA2/79365B8E8F0711EC9EB23170C4F9AE02/xI1E8RHZ9NyOPmStf5ZIZGHLn70.mft
File:                     xI1E8RHZ9NyOPmStf5ZIZGHLn70.mft (raw, json)
Hash identifier:          7uH3SfRdF3WDmAfZUckhnEqqLLCrG1U6DcOKKS7LYdQ=
Subject key identifier:   58:26:90:0E:0B:AB:FC:F2:A2:0E:01:6B:F2:D2:4E:61:82:FE:3A:50
Authority key identifier: C4:8D:44:F1:11:D9:F4:DC:8E:3E:64:AD:7F:96:48:64:61:CB:9F:BD
Certificate issuer:       /CN=A9181CA2/serialNumber=C48D44F111D9F4DC8E3E64AD7F96486461CB9FBD
Certificate serial:       04A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xI1E8RHZ9NyOPmStf5ZIZGHLn70.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181CA2/79365B8E8F0711EC9EB23170C4F9AE02/xI1E8RHZ9NyOPmStf5ZIZGHLn70.mft
Manifest number:          04A2
Signing time:             Wed 19 Aug 2026 00:18:27 +0000
Manifest this update:     Wed 19 Aug 2026 00:18:27 +0000
Manifest next update:     Wed 26 Aug 2026 00:18:27 +0000
Files and hashes:         1: xI1E8RHZ9NyOPmStf5ZIZGHLn70.crl (hash: U7bsGOAYxNlLC6puU1GoDxq5DlUrXyc+QKfgVuyVeoE=)
                          2: 76391AA6995311EC8EAA8C59C4F9AE02.roa (hash: /DFzhLMwMBBos/KXMPwemxU7fne2fqyoQbKIJm0faRo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181CA2/79365B8E8F0711EC9EB23170C4F9AE02/xI1E8RHZ9NyOPmStf5ZIZGHLn70.crl
                          rsync://rpki.apnic.net/member_repository/A9181CA2/79365B8E8F0711EC9EB23170C4F9AE02/xI1E8RHZ9NyOPmStf5ZIZGHLn70.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xI1E8RHZ9NyOPmStf5ZIZGHLn70.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 00:18:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1193 (0x4a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181CA2, serialNumber=C48D44F111D9F4DC8E3E64AD7F96486461CB9FBD
        Validity
            Not Before: Aug 19 00:18:27 2026 GMT
            Not After : Aug 26 00:18:27 2026 GMT
        Subject: CN=6a84f653-160e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:10:38:bd:f9:73:92:17:7a:7a:02:47:63:4d:
                    92:3c:8b:12:e5:aa:b2:44:df:19:ac:66:c0:a5:70:
                    d1:ed:a4:3c:a5:57:24:24:7e:94:04:19:5d:64:90:
                    2f:ef:7e:c1:b7:dc:61:60:9a:0e:6e:cc:bd:f6:de:
                    e0:f6:0d:61:50:31:95:e7:90:66:96:2c:36:be:46:
                    d9:15:74:1a:29:01:4a:f1:5c:b0:3a:11:62:eb:9b:
                    a3:ac:b2:35:df:10:d5:3f:db:de:af:fc:33:33:9a:
                    78:6b:f0:c9:0a:a5:1f:46:f1:01:1b:c0:01:d2:00:
                    38:39:ba:91:27:30:31:c1:b4:e3:d5:56:43:15:c6:
                    e0:fd:88:91:cb:71:78:e3:2c:df:c1:cb:74:df:82:
                    a0:76:9f:27:6b:9e:ae:b4:ae:53:7b:43:9e:7e:76:
                    18:13:26:2c:90:e6:55:70:89:c9:82:14:cc:7f:da:
                    6c:45:48:1f:e6:38:60:33:85:bc:8a:b6:66:31:f9:
                    fd:99:95:b8:d3:fb:94:63:ac:f3:73:1c:8b:19:f5:
                    e6:0e:f0:92:5a:0c:96:86:b7:b4:8d:4d:e8:58:9d:
                    74:94:1a:8c:06:fd:ab:a0:2f:cd:82:ce:53:3c:be:
                    80:77:e7:7c:80:1d:3f:3f:7c:8e:7e:f5:00:69:58:
                    ba:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:26:90:0E:0B:AB:FC:F2:A2:0E:01:6B:F2:D2:4E:61:82:FE:3A:50
            X509v3 Authority Key Identifier:
                keyid:C4:8D:44:F1:11:D9:F4:DC:8E:3E:64:AD:7F:96:48:64:61:CB:9F:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181CA2/79365B8E8F0711EC9EB23170C4F9AE02/xI1E8RHZ9NyOPmStf5ZIZGHLn70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xI1E8RHZ9NyOPmStf5ZIZGHLn70.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181CA2/79365B8E8F0711EC9EB23170C4F9AE02/xI1E8RHZ9NyOPmStf5ZIZGHLn70.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:3e:00:00:24:40:d0:8a:e3:d3:93:09:35:ac:74:02:7d:af:
         7a:de:9b:33:ea:72:87:20:13:f8:b2:74:6d:98:1a:61:99:e4:
         ed:73:31:b4:dc:e9:90:e4:c6:34:02:09:cf:31:9b:1e:a2:c3:
         92:f1:3b:92:7f:75:47:4b:3c:a0:0f:47:9a:a7:00:0f:68:89:
         be:50:75:e2:20:75:fb:17:6f:da:76:50:23:f2:53:43:64:23:
         f0:65:27:d1:86:d9:09:fd:b2:b4:b7:a9:3c:a7:13:25:c3:33:
         cb:6a:e2:22:06:92:f0:ad:eb:1c:13:6c:1d:00:72:32:e3:cf:
         90:63:ab:4a:fa:ee:4f:b5:33:53:15:92:50:6d:cf:a7:f7:4e:
         de:b1:f8:f3:89:93:fd:29:03:c6:d6:f9:6e:9f:94:90:16:f5:
         b3:47:3e:d9:2b:2b:45:c2:e7:60:15:7f:74:db:5a:02:65:fe:
         fc:99:31:a2:61:c2:5b:12:e4:c2:c2:fa:81:12:62:a9:93:dc:
         ea:e5:ca:20:92:4a:b0:7c:f7:c9:45:76:18:7d:7a:e8:4b:32:
         f9:61:72:d3:2e:48:08:ed:c7:11:2b:a5:25:ef:40:f6:bf:e3:
         33:2f:65:47:56:a0:d0:e4:df:d5:0c:83:4f:67:5b:90:dc:2c:
         a8:0e:eb:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:41:50 2026 by rpki-client