Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft
File:                     D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft (raw, json)
Hash identifier:          6+A2M5tfZ8AnnAc290d9tcE5yMRO7Hej4wShBCTlvJ4=
Subject key identifier:   11:BB:34:03:E9:93:3B:04:AF:9A:36:97:C0:2B:FB:25:CC:EC:75:88
Authority key identifier: 0F:D7:0E:78:A1:0E:09:18:EF:1C:9D:D8:2A:E2:E9:FD:C3:5A:A4:9F
Certificate issuer:       /CN=A9186883/serialNumber=0FD70E78A10E0918EF1C9DD82AE2E9FDC35AA49F
Certificate serial:       021E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft
Manifest number:          021E
Signing time:             Wed 19 Aug 2026 03:23:16 +0000
Manifest this update:     Wed 19 Aug 2026 03:23:15 +0000
Manifest next update:     Wed 26 Aug 2026 03:23:15 +0000
Files and hashes:         1: D9cOeKEOCRjvHJ3YKuLp_cNapJ8.crl (hash: QLuKMEExxbpIYSovjZ7WAPye6PTWI/Gs26i/4/iigTo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.crl
                          rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 03:23:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 542 (0x21e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186883, serialNumber=0FD70E78A10E0918EF1C9DD82AE2E9FDC35AA49F
        Validity
            Not Before: Aug 19 03:23:15 2026 GMT
            Not After : Aug 26 03:23:15 2026 GMT
        Subject: CN=6a8521a4-4b16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:15:3d:ba:dd:8b:6f:2a:e6:bf:c0:e5:dc:57:
                    b1:96:e6:1e:61:3c:f9:d5:3c:c2:7e:83:55:e9:00:
                    2e:86:ed:35:9b:a9:cc:5a:b0:8e:ec:e1:0c:e6:dc:
                    14:8a:f5:f8:01:b9:16:e4:b7:f6:ba:5a:42:fc:44:
                    80:33:56:ab:54:44:9a:8c:fe:57:ea:b9:16:62:9f:
                    81:24:5d:a4:9e:51:cf:cb:77:52:a1:88:e4:94:d1:
                    57:83:a4:29:09:9a:80:d5:c9:e9:b8:e1:df:6d:38:
                    6e:8d:2d:ca:e1:72:ad:ad:b8:62:3b:29:34:b5:28:
                    f8:95:9d:33:a9:55:8e:4c:e2:e7:87:a3:3e:23:1c:
                    97:a8:3b:3b:48:20:dc:e9:8f:cb:75:cf:b6:95:1d:
                    28:67:84:58:c1:ed:7b:51:73:7c:c7:32:95:d1:5d:
                    d4:36:07:24:63:4d:b4:ee:26:55:17:2e:ea:d0:d9:
                    c6:94:ad:c9:b3:65:da:1a:3c:47:d4:d2:a1:df:a5:
                    e6:e3:02:ad:a7:b4:35:35:de:31:b7:ec:86:b3:2d:
                    36:22:f5:90:55:d9:62:58:80:d8:6a:3b:e5:7a:c8:
                    d4:4e:c0:26:28:1f:29:d6:e1:04:47:ec:5e:c1:fe:
                    70:95:39:05:91:ba:aa:2b:6b:1f:64:69:81:f9:4e:
                    b7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:BB:34:03:E9:93:3B:04:AF:9A:36:97:C0:2B:FB:25:CC:EC:75:88
            X509v3 Authority Key Identifier:
                keyid:0F:D7:0E:78:A1:0E:09:18:EF:1C:9D:D8:2A:E2:E9:FD:C3:5A:A4:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:3d:4e:dd:d1:b5:64:5c:e3:ef:d9:d0:7e:ea:d0:a2:3c:5f:
         21:e8:5b:71:28:db:f0:1f:6f:2e:04:28:e8:53:e2:d3:3b:00:
         fa:bb:f5:a1:ab:5b:9f:5b:31:14:07:ab:ac:fd:61:01:0b:cc:
         08:6c:8b:7e:2a:ba:b8:01:8c:8b:28:d4:cf:10:8e:ad:19:ff:
         f8:8e:1b:d9:65:33:6a:62:d5:6a:30:65:ac:25:7b:7d:7b:ab:
         38:05:eb:0c:90:bc:50:4d:d0:4f:be:2f:73:4c:fe:a7:5f:32:
         6a:56:ae:56:38:16:54:46:7e:c3:eb:19:f0:9c:9c:f9:8a:cc:
         66:00:42:dc:58:1e:08:da:8d:21:40:56:14:e9:7d:6d:5c:32:
         e5:61:fd:a1:b4:18:26:fb:7e:a6:2d:43:15:64:30:61:45:4f:
         26:f0:1e:a3:39:21:12:52:6d:38:ca:61:7e:e6:d5:25:4c:bd:
         0d:0b:73:51:ca:25:20:07:3f:71:b6:68:78:bd:52:c4:34:b3:
         a8:ef:07:4c:84:47:de:db:31:f5:59:7b:1b:56:43:3c:c6:8d:
         de:a1:ac:83:f4:88:53:ae:99:be:c7:7a:bc:ba:0a:9e:a2:dc:
         77:d1:cd:32:bf:73:d5:70:ce:62:c3:8f:ff:91:03:04:cc:3e:
         e4:63:37:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:41:29 2026 by rpki-client