Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.mft
File:                     T-3YAGh4j_B5v7o_OuSTcmQRX8A.mft (raw, json)
Hash identifier:          GayVhL2Wv1BOjQm7vTSy93jcnlcobTRfPYT+7ddKcN8=
Subject key identifier:   BF:A5:01:EE:59:95:A9:02:60:89:01:E4:39:9B:12:74:79:1B:BE:99
Authority key identifier: 4F:ED:D8:00:68:78:8F:F0:79:BF:BA:3F:3A:E4:93:72:64:11:5F:C0
Certificate issuer:       /CN=A918924D/serialNumber=4FEDD80068788FF079BFBA3F3AE4937264115FC0
Certificate serial:       54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-3YAGh4j_B5v7o_OuSTcmQRX8A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.mft
Manifest number:          53
Signing time:             Thu 27 Aug 2026 07:44:59 +0000
Manifest this update:     Thu 27 Aug 2026 07:44:58 +0000
Manifest next update:     Thu 03 Sep 2026 07:44:58 +0000
Files and hashes:         1: T-3YAGh4j_B5v7o_OuSTcmQRX8A.crl (hash: kj0huTxZpiJmGNHhJrU8Vx59h1tW49+WppEA6VU4lZQ=)
                          2: 0F7A780C278211F19C45DF9DCA833773.roa (hash: Nj46aMQlSHXr0PtozGObb5+1Bq9Ubs8JUSseSuuPGA8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.crl
                          rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-3YAGh4j_B5v7o_OuSTcmQRX8A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 03 Sep 2026 07:44:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918924D, serialNumber=4FEDD80068788FF079BFBA3F3AE4937264115FC0
        Validity
            Not Before: Aug 27 07:44:58 2026 GMT
            Not After : Sep  3 07:44:58 2026 GMT
        Subject: CN=6a8feafb-7b2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:63:b1:c5:8e:5a:75:f6:0c:60:59:68:1a:5b:
                    e1:e4:61:8f:fe:4f:69:a8:12:23:1f:63:45:6d:fb:
                    44:80:8a:8c:f6:a4:f2:23:54:4f:bd:81:87:d1:09:
                    db:c0:55:5e:ca:c4:e7:9b:67:f5:5c:7a:89:47:50:
                    85:13:51:dc:fa:ae:b1:37:39:72:bf:b0:90:a8:a6:
                    08:07:12:5e:bd:34:49:09:bd:b3:88:be:a4:24:c4:
                    3e:88:ce:81:7e:72:30:3a:89:b1:53:92:df:fc:59:
                    07:19:51:84:60:2d:17:37:21:4d:9c:e3:ee:8a:42:
                    e2:09:7b:1b:2a:c8:8b:88:48:7d:40:ed:ab:43:a4:
                    ad:1c:41:7c:23:05:01:f6:61:1a:44:66:fb:c5:ec:
                    82:02:36:36:5a:fc:7c:91:98:c2:59:6c:36:eb:88:
                    10:18:d2:23:b8:e5:b0:50:b9:d1:40:bc:3a:26:1d:
                    d8:ed:f7:ce:bc:84:1c:fe:41:94:0b:ed:63:c6:6b:
                    82:78:c3:30:4c:69:d3:bb:47:04:1d:ab:2b:32:03:
                    9b:73:bf:79:d8:28:d8:3c:6b:34:10:85:7c:fd:94:
                    18:4e:ef:21:ea:89:31:68:cd:c0:e0:36:3a:d1:ba:
                    33:58:47:0f:0e:36:41:22:4d:f5:09:73:94:a6:73:
                    32:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:A5:01:EE:59:95:A9:02:60:89:01:E4:39:9B:12:74:79:1B:BE:99
            X509v3 Authority Key Identifier:
                keyid:4F:ED:D8:00:68:78:8F:F0:79:BF:BA:3F:3A:E4:93:72:64:11:5F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-3YAGh4j_B5v7o_OuSTcmQRX8A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:ab:39:6e:2d:b7:66:eb:ca:54:f9:47:0b:ca:de:66:89:d3:
         6b:b4:f0:f5:c4:2c:42:a5:95:ad:7f:27:71:a0:78:f8:5f:db:
         eb:8d:7f:5a:a4:22:de:36:44:9b:bb:29:27:03:77:56:b6:74:
         23:34:f7:7e:c2:c2:92:3d:c1:5c:c1:40:ad:00:f0:4a:f6:2a:
         ba:45:11:3f:69:83:05:8d:e9:68:1c:98:51:83:87:62:28:0d:
         f3:2d:d1:87:5a:66:73:57:e5:ad:cb:fc:e8:f2:41:8d:5d:16:
         e2:2c:d7:45:bb:bc:aa:76:3e:6b:6e:87:7c:8c:e1:63:f9:0a:
         4b:d5:a1:f8:03:22:cb:10:d6:c6:ee:c3:79:fa:68:05:30:4f:
         43:d8:c8:17:e5:cb:54:dd:87:66:4b:47:29:d2:48:d7:85:c5:
         1b:5d:c4:70:55:10:ec:cf:2c:42:67:f7:01:42:78:f6:a2:dc:
         df:22:fc:71:a2:7a:62:2b:cc:c5:7c:de:fd:21:b3:9d:40:ee:
         91:c0:9a:d1:94:41:a0:ce:c8:03:9d:e6:a5:57:72:0a:52:8a:
         f5:66:48:49:86:73:e4:23:0c:31:9d:02:17:28:19:c7:a4:39:
         9b:38:11:da:cd:51:2d:dd:40:bb:e6:04:ca:6f:e5:a1:b2:3d:
         ff:a9:36:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 07:17:38 2026 by rpki-client