Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft
File:                     h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft (raw, json)
Hash identifier:          MH9OBrVzybTgLMWIAuRsO6OqS8Dwlcx+JUBycU0Lle8=
Subject key identifier:   68:F0:D8:F0:32:AF:A3:A6:44:CA:E2:8F:65:CD:9C:87:65:52:90:14
Authority key identifier: 87:8B:86:86:95:FC:45:C9:C6:3B:6F:BC:54:CC:B3:50:9C:4B:9F:4B
Certificate issuer:       /CN=A918A35C/serialNumber=878B868695FC45C9C63B6FBC54CCB3509C4B9F4B
Certificate serial:       0C89
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h4uGhpX8RcnGO2-8VMyzUJxLn0s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft
Manifest number:          0C80
Signing time:             Tue 18 Aug 2026 18:54:54 +0000
Manifest this update:     Tue 18 Aug 2026 18:54:53 +0000
Manifest next update:     Tue 25 Aug 2026 18:54:53 +0000
Files and hashes:         1: h4uGhpX8RcnGO2-8VMyzUJxLn0s.crl (hash: IM8voLVCpi6jrOoOave+wRbPrfiV7xX52/vZ4NzVW1k=)
                          2: 0D22F748261A11EA83CE8D17C4F9AE02.roa (hash: b+zymn1ltVuOppTrIVQmgPXI02QXRnzUgrsEcAqqyFw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.crl
                          rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h4uGhpX8RcnGO2-8VMyzUJxLn0s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 18:54:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3209 (0xc89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A35C, serialNumber=878B868695FC45C9C63B6FBC54CCB3509C4B9F4B
        Validity
            Not Before: Aug 18 18:54:53 2026 GMT
            Not After : Aug 25 18:54:53 2026 GMT
        Subject: CN=6a84aa7e-9fe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:20:8d:64:87:06:cf:48:bf:45:a9:0e:08:d3:
                    2d:9c:31:f6:52:c5:ae:78:fd:4f:d0:93:01:40:0a:
                    d2:9f:85:5b:54:ed:69:b6:ba:3e:74:17:1b:1c:48:
                    d3:f0:05:6a:15:bf:47:21:4c:72:b1:2f:8e:64:a1:
                    e8:8d:da:82:6d:18:b6:88:c5:06:76:17:9a:b0:88:
                    4e:68:4f:e7:2c:8e:b1:9f:76:3a:17:be:60:b1:22:
                    5b:2e:e2:34:6f:71:7c:a9:26:ba:21:60:27:b5:d5:
                    c9:da:b9:0d:30:eb:57:6a:c7:e9:03:51:24:14:30:
                    7f:92:48:cc:79:b5:b1:0c:e0:41:f1:3d:2b:4b:87:
                    09:c2:90:75:ab:ab:7c:ca:2d:bd:d2:05:57:7d:e0:
                    23:2d:9b:16:22:5f:98:63:58:20:93:f3:00:a3:ca:
                    be:de:a7:fe:cb:7f:86:77:04:67:41:96:f3:e6:17:
                    f8:85:ea:58:b7:0e:6d:38:8a:23:95:75:b1:85:d9:
                    42:b0:ac:eb:08:30:a5:cf:32:98:85:7f:1d:89:b9:
                    a6:70:5d:aa:25:8e:6b:b4:ee:58:38:be:4e:39:c2:
                    7c:c8:3c:04:0d:e1:2f:e8:fe:82:cd:1a:78:7b:dc:
                    37:9c:0d:86:15:e6:db:d9:35:ec:69:38:bb:f7:12:
                    91:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:F0:D8:F0:32:AF:A3:A6:44:CA:E2:8F:65:CD:9C:87:65:52:90:14
            X509v3 Authority Key Identifier:
                keyid:87:8B:86:86:95:FC:45:C9:C6:3B:6F:BC:54:CC:B3:50:9C:4B:9F:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h4uGhpX8RcnGO2-8VMyzUJxLn0s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:1d:22:9c:70:53:8c:5a:31:e8:c1:63:17:ea:90:de:46:74:
         ca:8c:63:5c:fa:3d:99:ee:34:31:6f:17:4d:74:77:d9:c8:64:
         25:a4:15:73:35:57:17:51:35:da:80:37:3b:bc:58:42:50:12:
         d6:65:37:29:a4:bb:90:d9:36:35:59:09:7a:f6:4e:f7:3f:4f:
         93:58:36:c7:44:f3:e2:bc:b0:7b:fa:21:4f:db:4a:4d:3e:4d:
         87:07:e4:2b:af:51:da:68:db:af:a2:e8:8e:ca:f3:0e:95:f0:
         0c:8b:d2:db:7a:d4:1e:ce:ed:5d:d7:32:c8:4c:6b:45:37:41:
         4c:07:70:05:fc:97:a8:51:16:79:fb:bd:b0:8e:3e:40:57:c1:
         e4:91:31:32:10:d1:01:8d:ea:41:3a:c9:54:db:b7:cc:9b:ce:
         d0:20:4e:02:12:d1:1d:49:01:ab:ce:67:d4:1f:44:f6:5a:56:
         e6:d7:7e:c2:19:e5:b0:c5:f4:21:c4:1d:e9:64:4f:18:24:9e:
         5a:6b:d0:db:dc:e5:ea:dc:62:1d:c5:d5:4c:f7:8e:49:86:0a:
         ab:a1:24:da:a7:a6:ec:03:2b:2e:96:83:98:4d:41:28:04:3c:
         76:a6:b8:ad:28:60:79:a9:48:27:5d:92:f3:64:d5:bc:5a:e1:
         4d:6f:e7:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:55:32 2026 by rpki-client