Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.mft
File:                     rOKNq-U2SWN_puTjId4bY0Y7g88.mft (raw, json)
Hash identifier:          vaL2wCe8D7dVVLTq0MgNsPLMPJdEgN7xWXlTsQsjKqM=
Subject key identifier:   D7:27:4E:E0:D5:D2:C1:2F:95:3B:55:3D:30:1D:93:FB:2A:63:DA:41
Authority key identifier: AC:E2:8D:AB:E5:36:49:63:7F:A6:E4:E3:21:DE:1B:63:46:3B:83:CF
Certificate issuer:       /CN=A9186249/serialNumber=ACE28DABE53649637FA6E4E321DE1B63463B83CF
Certificate serial:       01DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOKNq-U2SWN_puTjId4bY0Y7g88.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.mft
Manifest number:          01D5
Signing time:             Wed 19 Aug 2026 04:17:11 +0000
Manifest this update:     Wed 19 Aug 2026 04:17:10 +0000
Manifest next update:     Wed 26 Aug 2026 04:17:10 +0000
Files and hashes:         1: rOKNq-U2SWN_puTjId4bY0Y7g88.crl (hash: aGc1Q9DURwTyqrn0yzRbCDUWCbKnc0JIMiaa0Aro65k=)
                          2: E7F6D15AD17411EE87F7325DC4F9AE02.roa (hash: zQuRWZynPjX+xVieuFFOjcx7urcSlA8n96bIrvyW0V4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.crl
                          rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOKNq-U2SWN_puTjId4bY0Y7g88.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 04:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 476 (0x1dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186249, serialNumber=ACE28DABE53649637FA6E4E321DE1B63463B83CF
        Validity
            Not Before: Aug 19 04:17:10 2026 GMT
            Not After : Aug 26 04:17:10 2026 GMT
        Subject: CN=6a852e46-ae52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:08:67:69:7f:71:a4:c4:cb:d8:e1:6f:e9:47:
                    21:db:5a:c1:23:f9:93:97:cf:54:e3:0c:46:5e:6d:
                    a1:43:34:34:22:40:5e:dd:ae:fd:bf:d4:03:c9:f9:
                    5a:cc:b4:7c:a4:b8:d0:f5:ba:32:e9:1b:aa:2b:44:
                    3a:a9:03:3f:18:dd:c1:95:57:0b:2b:8e:5c:cb:39:
                    d3:9b:e8:e6:ac:1f:34:eb:e6:62:12:9c:9b:23:4d:
                    12:97:c1:b6:ca:c4:15:c6:79:10:42:c8:6e:d3:c9:
                    1d:4c:b2:f5:37:8e:63:c9:e2:41:35:3c:ab:ec:56:
                    b2:17:fb:b4:4f:c7:cd:6b:d9:60:af:fc:ee:96:ee:
                    78:98:fb:3c:52:70:f6:b7:72:f3:25:21:d2:a7:01:
                    0a:66:7c:77:be:c7:73:e9:50:31:2c:3d:8d:c7:5a:
                    e1:b8:04:20:ff:e0:79:e1:f6:e2:28:2e:ce:a0:ac:
                    02:00:23:e3:44:3d:38:14:6a:97:51:0e:ba:d2:38:
                    97:0d:ba:8d:bb:e7:35:b1:04:19:82:30:a3:f3:6b:
                    05:80:3f:20:e4:08:12:5f:b7:f4:de:46:69:9a:ce:
                    c1:a5:ef:18:4b:a3:24:57:d5:93:a6:97:39:da:c1:
                    4e:aa:90:24:f9:25:00:66:ff:33:07:f6:8d:23:d3:
                    0f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:27:4E:E0:D5:D2:C1:2F:95:3B:55:3D:30:1D:93:FB:2A:63:DA:41
            X509v3 Authority Key Identifier:
                keyid:AC:E2:8D:AB:E5:36:49:63:7F:A6:E4:E3:21:DE:1B:63:46:3B:83:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOKNq-U2SWN_puTjId4bY0Y7g88.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:64:e5:46:cf:e4:b3:b5:a5:65:2b:11:e1:c4:6b:76:d1:31:
         fd:86:03:fe:80:a0:d4:5f:a4:82:c9:96:29:11:81:85:19:15:
         78:d0:14:51:8f:10:16:66:7f:b5:36:f7:88:1f:9d:93:34:fd:
         dd:16:13:87:66:26:eb:ab:8e:d5:7c:c0:15:4f:a5:7a:53:ac:
         d0:d0:8c:28:91:c9:e2:43:37:64:3f:f6:c3:ac:d0:82:cf:9d:
         a1:30:d4:d3:79:40:a7:d3:e0:21:ed:85:e1:7f:d0:4e:be:32:
         4c:05:4d:32:e1:58:87:df:d0:80:3b:10:86:c0:8a:24:1a:fc:
         8a:b0:6e:0a:0f:2b:81:ec:d4:8c:81:6f:c0:02:da:2b:4e:91:
         bf:d5:0a:66:38:2c:ef:75:73:f7:da:cc:df:9f:9d:03:1f:85:
         7c:42:30:1a:c9:28:49:ea:2c:c5:fe:d5:3a:72:e4:6d:07:3c:
         e4:53:2d:a5:f8:b0:3d:6d:e8:a6:ec:ec:d2:31:53:1a:7d:31:
         ea:95:09:19:ca:53:85:bd:b9:02:ab:56:fd:03:99:99:c3:e3:
         62:c4:97:89:ca:d7:3c:2d:2e:ae:82:e0:3d:ff:3e:ad:30:88:
         3b:d3:7e:66:c4:89:cb:4f:a4:fd:33:d4:21:76:2d:f7:ab:6d:
         0f:9e:79:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:54:09 2026 by rpki-client