Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.mft
File:                     xH0VZB2jsUx05cspvMBIgSMK0U4.mft (raw, json)
Hash identifier:          5Zb5l4NV0CHA5XEOacxnjOA31HuZUw86/2HV2SHYnQ0=
Subject key identifier:   8E:B1:3A:38:C9:C8:C2:B1:A8:3D:EE:72:33:C2:08:58:3B:39:8E:AF
Authority key identifier: C4:7D:15:64:1D:A3:B1:4C:74:E5:CB:29:BC:C0:48:81:23:0A:D1:4E
Certificate issuer:       /CN=A9187364/serialNumber=C47D15641DA3B14C74E5CB29BCC04881230AD14E
Certificate serial:       0366
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xH0VZB2jsUx05cspvMBIgSMK0U4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.mft
Manifest number:          035C
Signing time:             Wed 19 Aug 2026 01:18:18 +0000
Manifest this update:     Wed 19 Aug 2026 01:18:18 +0000
Manifest next update:     Wed 26 Aug 2026 01:18:18 +0000
Files and hashes:         1: xH0VZB2jsUx05cspvMBIgSMK0U4.crl (hash: 9LHcspMRlpnDOm/hIyfd2ZRc8SQD5+7cauwUgnV2ZjM=)
                          2: 62B575B8104C11ED8CE56267C4F9AE02.roa (hash: PHmyIGanMLDZ0OUpiBttzgZCYW6kYoTibkb1ghWpJ9A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.crl
                          rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xH0VZB2jsUx05cspvMBIgSMK0U4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 01:18:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 870 (0x366)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187364, serialNumber=C47D15641DA3B14C74E5CB29BCC04881230AD14E
        Validity
            Not Before: Aug 19 01:18:18 2026 GMT
            Not After : Aug 26 01:18:18 2026 GMT
        Subject: CN=6a85045a-78f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3b:98:8f:89:9b:43:78:2f:9d:2f:80:66:48:
                    49:41:c9:5f:00:3e:3b:a1:f1:3c:c1:bd:fa:7e:27:
                    4c:77:89:48:eb:4f:f7:1d:60:8f:aa:77:73:7d:a3:
                    77:ae:63:fc:55:aa:d7:9c:a8:45:0a:a0:f2:bb:fa:
                    b6:0f:0b:fb:34:64:35:75:9f:2e:ec:64:96:5d:e4:
                    8a:7a:74:5b:3d:d7:d3:62:4f:dc:2d:30:ae:51:10:
                    d4:32:be:6b:05:08:62:9c:78:d5:13:67:02:68:db:
                    2c:35:d4:07:1a:3b:37:17:db:65:bb:e9:3d:62:50:
                    85:6f:68:d5:e7:b8:26:3f:1c:22:b4:f1:b3:7d:07:
                    ca:54:9d:60:ba:82:ad:dc:4c:24:5e:31:03:fb:d7:
                    01:77:f7:8b:43:da:50:63:61:40:16:22:0e:5d:95:
                    f0:48:e4:72:80:17:ca:1e:84:c9:02:65:40:9b:f5:
                    bf:04:90:22:a6:37:d9:57:c3:d9:41:9e:3f:35:7a:
                    10:3a:41:44:ea:d2:cf:05:54:48:39:d9:5e:cb:e1:
                    c6:00:ef:08:f9:07:97:1c:9a:fa:4a:f0:e8:bc:53:
                    29:43:be:90:7b:09:20:9b:3d:9c:85:8d:e3:8e:e9:
                    88:cc:59:5d:97:f7:47:ee:9b:51:12:14:2a:c5:1b:
                    2d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:B1:3A:38:C9:C8:C2:B1:A8:3D:EE:72:33:C2:08:58:3B:39:8E:AF
            X509v3 Authority Key Identifier:
                keyid:C4:7D:15:64:1D:A3:B1:4C:74:E5:CB:29:BC:C0:48:81:23:0A:D1:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xH0VZB2jsUx05cspvMBIgSMK0U4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:60:34:80:ba:4a:2d:a2:2e:3e:d6:c3:02:c4:a8:d5:d4:75:
         65:9e:07:1c:02:9a:30:99:fd:43:b8:a5:94:7d:b3:ee:3e:ce:
         d7:9d:59:8c:7f:0c:70:a2:5c:dd:38:e9:14:16:9d:a7:d3:94:
         36:f9:6f:3c:8a:ea:32:40:e3:a5:6b:8b:c4:f2:54:de:27:f9:
         cd:4f:33:18:e3:7b:23:da:8c:11:8a:29:6c:2f:af:c4:fe:6a:
         fc:ff:55:20:f4:58:6e:16:07:73:03:37:2f:e0:7b:f0:28:ff:
         7c:46:0a:81:6f:7b:98:0c:7c:0d:18:e2:a0:03:54:02:04:3d:
         06:f8:08:53:51:ea:b5:31:17:43:20:f8:a5:60:70:8f:94:7f:
         fb:d4:4b:c2:2b:7f:63:bc:74:6d:97:8b:6a:30:e3:2a:a0:b9:
         7e:30:5c:a6:d7:1a:80:db:b5:56:94:e4:db:ce:67:ad:d3:f9:
         40:82:f0:50:fe:3b:04:03:98:5f:1c:6a:40:ab:e0:94:c9:72:
         61:b4:56:93:3c:7e:4a:ff:25:67:54:7d:09:77:73:c8:83:66:
         13:cd:64:8a:7e:14:50:01:ba:f3:d9:58:ec:f0:96:0a:71:93:
         8d:8c:19:2d:0b:6b:a4:c7:f4:0d:1b:79:48:02:2c:ad:29:e7:
         a1:a6:29:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:31:44 2026 by rpki-client