Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9188D2D/A0682A048FF911EDABEC2537C4F9AE02/tYgfusqd6_Rspghj0pd8U_3WwZA.mft
File:                     tYgfusqd6_Rspghj0pd8U_3WwZA.mft (raw, json)
Hash identifier:          yuflVP9nnQtnu49dsv+dDqZOjjpCXCBfDcnC42GZUgA=
Subject key identifier:   22:1F:87:B3:28:13:F2:26:F6:77:E4:BB:F0:DF:C1:B4:55:7E:17:3E
Authority key identifier: B5:88:1F:BA:CA:9D:EB:F4:6C:A6:08:63:D2:97:7C:53:FD:D6:C1:90
Certificate issuer:       /CN=A9188D2D/serialNumber=B5881FBACA9DEBF46CA60863D2977C53FDD6C190
Certificate serial:       02AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tYgfusqd6_Rspghj0pd8U_3WwZA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188D2D/A0682A048FF911EDABEC2537C4F9AE02/tYgfusqd6_Rspghj0pd8U_3WwZA.mft
Manifest number:          02A2
Signing time:             Wed 19 Aug 2026 02:06:42 +0000
Manifest this update:     Wed 19 Aug 2026 02:06:41 +0000
Manifest next update:     Wed 26 Aug 2026 02:06:41 +0000
Files and hashes:         1: tYgfusqd6_Rspghj0pd8U_3WwZA.crl (hash: CszPH2etC7Bcb4+LwHTIWHbwOwmZHdk2hoh8d+cTk5g=)
                          2: D9D943568FFC11ED9776CB38C4F9AE02.roa (hash: aADozuDCIEKbnLRcroHhbSPv1V+V+40QMaTifMiQcJs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9188D2D/A0682A048FF911EDABEC2537C4F9AE02/tYgfusqd6_Rspghj0pd8U_3WwZA.crl
                          rsync://rpki.apnic.net/member_repository/A9188D2D/A0682A048FF911EDABEC2537C4F9AE02/tYgfusqd6_Rspghj0pd8U_3WwZA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tYgfusqd6_Rspghj0pd8U_3WwZA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 02:06:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 682 (0x2aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188D2D, serialNumber=B5881FBACA9DEBF46CA60863D2977C53FDD6C190
        Validity
            Not Before: Aug 19 02:06:41 2026 GMT
            Not After : Aug 26 02:06:41 2026 GMT
        Subject: CN=6a850fb2-0a1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a6:94:69:5d:aa:c3:dc:03:03:79:7f:94:10:
                    a4:d3:2b:6b:d8:8a:3e:cf:84:51:6e:05:fc:e9:c8:
                    4f:ca:1a:fb:ff:f3:3a:71:6c:f7:e7:ab:29:71:39:
                    bb:9d:b8:e5:4c:30:ae:3d:20:b4:c0:b9:e6:13:ca:
                    62:d7:48:d6:a8:22:5d:37:13:9f:3c:4a:2e:eb:b4:
                    d0:9c:93:f8:99:9a:29:54:74:cf:a2:13:87:b7:0d:
                    81:f5:79:b0:b4:71:41:81:4b:0d:bd:42:68:ef:d2:
                    f5:c4:67:84:8c:61:49:39:fb:8d:55:2f:01:81:e7:
                    00:08:ee:89:72:a9:bf:d1:82:28:d8:79:89:32:ab:
                    d4:df:ac:52:8e:7c:2d:4a:51:cb:f6:40:fb:d4:2b:
                    36:d4:f7:dc:9e:ca:2d:c0:a4:52:ca:d6:d3:d3:7c:
                    63:c0:f0:32:9b:d3:6e:93:eb:64:b0:1d:8c:fb:04:
                    a5:54:e5:cc:a7:4d:ab:3b:3b:c6:38:65:35:68:dd:
                    a3:84:43:4b:05:47:df:37:55:05:73:30:1e:7e:44:
                    ee:91:d8:b5:02:a3:4c:94:29:f5:6d:28:a4:68:e1:
                    58:cb:ad:14:b5:75:72:82:33:b3:65:40:4f:df:d1:
                    4a:3a:26:b8:4f:d8:4e:89:fe:59:ef:66:5a:49:65:
                    ce:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:1F:87:B3:28:13:F2:26:F6:77:E4:BB:F0:DF:C1:B4:55:7E:17:3E
            X509v3 Authority Key Identifier:
                keyid:B5:88:1F:BA:CA:9D:EB:F4:6C:A6:08:63:D2:97:7C:53:FD:D6:C1:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188D2D/A0682A048FF911EDABEC2537C4F9AE02/tYgfusqd6_Rspghj0pd8U_3WwZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tYgfusqd6_Rspghj0pd8U_3WwZA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188D2D/A0682A048FF911EDABEC2537C4F9AE02/tYgfusqd6_Rspghj0pd8U_3WwZA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:7c:58:7a:4e:7d:5d:10:d4:9f:a7:a8:bc:2b:cc:31:e5:41:
         2f:d3:84:68:30:cd:c8:9f:e0:48:f6:f0:f9:c7:43:6f:52:b0:
         1a:72:c7:c4:d9:dd:72:e1:a4:c2:23:ac:d6:75:72:c9:d9:74:
         a9:25:f9:6d:b3:37:2c:11:0d:03:e7:bc:2e:c0:f8:93:51:85:
         d1:da:48:5f:98:f7:fc:08:70:c5:02:62:69:91:1f:f6:04:7a:
         53:a4:24:31:de:5b:84:57:44:94:60:b2:3b:87:62:24:fa:23:
         31:ea:2e:a8:76:c0:8d:8c:de:c1:b9:10:f0:b3:a7:44:ce:0a:
         a5:7a:4a:14:47:19:ed:73:7b:06:d4:80:7c:c9:00:aa:82:6a:
         47:69:2f:19:00:1d:d5:88:b5:ac:d0:a7:0c:83:c4:45:00:b7:
         e6:22:b0:ab:6f:e6:f8:58:71:49:2d:bf:95:cd:57:b1:0c:de:
         95:96:59:7f:35:a5:0b:d1:6d:44:d7:a9:1a:65:d7:3a:08:71:
         9b:84:93:b7:30:da:31:65:1c:45:88:3b:e3:10:16:16:f2:0a:
         e4:93:2a:8f:2a:49:75:3d:9a:1a:72:c2:7b:02:df:b7:23:41:
         ea:5c:03:05:f1:48:e6:64:0f:7e:5b:a8:f2:cf:3d:43:ff:ef:
         6e:e4:44:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:57 2026 by rpki-client