Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9188064/F0AF85E4024611F19251606D1F3D8C67/AvtA9fNM8uV8IU8M1xQbTY2kK2s.mft
File:                     AvtA9fNM8uV8IU8M1xQbTY2kK2s.mft (raw, json)
Hash identifier:          mDH1yKZG0L7/2yNPtlm/G1E+M1wwIkMsnBulJiE9mcQ=
Subject key identifier:   E2:15:9C:50:30:57:AC:67:F7:D4:CE:20:36:AB:6A:58:A1:02:F2:95
Authority key identifier: 02:FB:40:F5:F3:4C:F2:E5:7C:21:4F:0C:D7:14:1B:4D:8D:A4:2B:6B
Certificate issuer:       /CN=A9188064/serialNumber=02FB40F5F34CF2E57C214F0CD7141B4D8DA42B6B
Certificate serial:       67
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AvtA9fNM8uV8IU8M1xQbTY2kK2s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188064/F0AF85E4024611F19251606D1F3D8C67/AvtA9fNM8uV8IU8M1xQbTY2kK2s.mft
Manifest number:          67
Signing time:             Wed 19 Aug 2026 08:45:37 +0000
Manifest this update:     Wed 19 Aug 2026 08:45:37 +0000
Manifest next update:     Wed 26 Aug 2026 08:45:37 +0000
Files and hashes:         1: AvtA9fNM8uV8IU8M1xQbTY2kK2s.crl (hash: 1Mh9r7ptUSIvQrqkOZwRC/afbp/dA7b68de/EpZqaho=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9188064/F0AF85E4024611F19251606D1F3D8C67/AvtA9fNM8uV8IU8M1xQbTY2kK2s.crl
                          rsync://rpki.apnic.net/member_repository/A9188064/F0AF85E4024611F19251606D1F3D8C67/AvtA9fNM8uV8IU8M1xQbTY2kK2s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AvtA9fNM8uV8IU8M1xQbTY2kK2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 08:45:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188064, serialNumber=02FB40F5F34CF2E57C214F0CD7141B4D8DA42B6B
        Validity
            Not Before: Aug 19 08:45:37 2026 GMT
            Not After : Aug 26 08:45:37 2026 GMT
        Subject: CN=6a856d31-2f2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7c:6d:8c:5c:c1:98:19:c8:97:9c:be:28:2c:
                    c9:f4:75:71:48:25:86:05:bd:0f:2c:53:f6:d6:f7:
                    96:0f:e8:6b:9f:6e:6d:4f:00:00:f4:b7:b7:06:00:
                    5f:e5:4c:33:ba:97:6f:dc:38:db:59:99:7c:b6:6f:
                    76:41:c6:31:fd:b8:4d:5b:06:53:4f:88:63:9f:15:
                    77:50:07:1a:e8:75:64:d0:29:e9:8e:ac:c9:ea:62:
                    5b:7a:35:49:aa:ee:60:1d:fe:f3:54:a4:4b:41:d4:
                    ed:60:1b:dd:a6:aa:19:f1:41:c4:9b:b4:ac:a8:ee:
                    fc:cc:b1:0b:37:91:3b:6c:5d:e4:aa:33:78:61:45:
                    05:28:99:71:d0:9c:41:1f:bf:9c:28:0f:d1:de:d3:
                    20:00:e8:7b:68:ce:db:8b:70:97:c2:d8:15:45:0c:
                    15:09:a7:df:60:ea:1f:ef:65:4d:c8:01:cb:7c:ae:
                    62:8d:04:d8:4c:6f:4a:44:00:3d:0c:0f:ff:b2:07:
                    f2:c4:cc:85:ae:f2:58:94:7b:cf:6f:03:76:91:3e:
                    76:6b:91:b5:a3:e9:a4:2b:73:1d:77:5b:63:35:34:
                    a0:90:ff:ad:c5:77:b7:65:98:73:34:6c:54:b9:5f:
                    46:bd:f7:1e:82:96:20:26:c0:6c:c2:45:57:a2:53:
                    79:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:15:9C:50:30:57:AC:67:F7:D4:CE:20:36:AB:6A:58:A1:02:F2:95
            X509v3 Authority Key Identifier:
                keyid:02:FB:40:F5:F3:4C:F2:E5:7C:21:4F:0C:D7:14:1B:4D:8D:A4:2B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188064/F0AF85E4024611F19251606D1F3D8C67/AvtA9fNM8uV8IU8M1xQbTY2kK2s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AvtA9fNM8uV8IU8M1xQbTY2kK2s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188064/F0AF85E4024611F19251606D1F3D8C67/AvtA9fNM8uV8IU8M1xQbTY2kK2s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:63:f7:5d:cd:9c:40:f8:9f:ba:73:c5:e9:e9:13:5e:82:9d:
         44:db:0b:7a:1e:5e:30:c4:15:ea:a9:06:23:f0:00:dc:ab:21:
         21:f0:a7:3f:9b:6e:55:da:8d:f3:45:7e:f2:14:96:e8:b6:0e:
         60:01:f1:b2:62:99:85:b0:6c:0b:5c:31:db:1a:01:8a:b7:70:
         67:68:32:51:f9:f4:c6:1e:9e:3e:d9:f6:86:74:82:be:3c:c6:
         ef:6a:7c:93:46:84:30:6a:13:94:92:e1:84:05:d7:cc:29:08:
         63:b9:ad:89:e8:f3:47:ea:a4:3e:ae:c0:f7:1b:4f:75:9b:80:
         1d:43:a7:9e:d2:d2:47:79:98:e3:4f:d9:81:0d:5a:03:ce:f8:
         45:62:40:36:d6:fe:04:97:e1:47:46:c9:14:63:29:28:10:01:
         fe:10:c3:17:aa:28:74:09:19:cc:9c:31:f4:2c:f6:c6:02:53:
         32:0c:3a:05:79:55:42:e1:1d:94:ff:5a:f5:ac:c9:ce:92:e4:
         3a:14:eb:d2:fa:a9:c8:d7:2d:05:96:8a:42:fd:5c:af:eb:c5:
         d6:cf:4c:17:0e:ed:42:df:b0:18:61:39:ec:2b:0f:57:d6:b6:
         ae:42:da:0a:ff:60:82:0f:b4:b0:62:75:8f:ab:18:3e:c3:01:
         f0:fb:9e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:50:15 2026 by rpki-client