Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B418/AD0DC4801C4F11EDAAD31386C4F9AE02/rUk9yaPSQDSDYoWHBR93lRWJFnk.mft
File:                     rUk9yaPSQDSDYoWHBR93lRWJFnk.mft (raw, json)
Hash identifier:          WnuJZK29AZSffjD3IpUFpdqjtY4Hz2FAQbR3tWwxG/g=
Subject key identifier:   08:E8:CD:9E:08:9E:0C:01:3B:E8:83:EA:27:07:0F:AF:C3:53:9A:71
Authority key identifier: AD:49:3D:C9:A3:D2:40:34:83:62:85:87:05:1F:77:95:15:89:16:79
Certificate issuer:       /CN=A918B418/serialNumber=AD493DC9A3D2403483628587051F779515891679
Certificate serial:       033C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUk9yaPSQDSDYoWHBR93lRWJFnk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B418/AD0DC4801C4F11EDAAD31386C4F9AE02/rUk9yaPSQDSDYoWHBR93lRWJFnk.mft
Manifest number:          0336
Signing time:             Wed 19 Aug 2026 01:24:41 +0000
Manifest this update:     Wed 19 Aug 2026 01:24:40 +0000
Manifest next update:     Wed 26 Aug 2026 01:24:40 +0000
Files and hashes:         1: rUk9yaPSQDSDYoWHBR93lRWJFnk.crl (hash: Q94fF55rm/l6CWN2986yK99Uw75jykHbE1n1iyqC01U=)
                          2: 8275E1721C5311EDA75CF137C4F9AE02.roa (hash: Aouq02eIPTvtF0wx4ZSVXw6EhRfqAUhL5Ch4Qtkxu5U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B418/AD0DC4801C4F11EDAAD31386C4F9AE02/rUk9yaPSQDSDYoWHBR93lRWJFnk.crl
                          rsync://rpki.apnic.net/member_repository/A918B418/AD0DC4801C4F11EDAAD31386C4F9AE02/rUk9yaPSQDSDYoWHBR93lRWJFnk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUk9yaPSQDSDYoWHBR93lRWJFnk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 01:24:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 828 (0x33c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B418, serialNumber=AD493DC9A3D2403483628587051F779515891679
        Validity
            Not Before: Aug 19 01:24:40 2026 GMT
            Not After : Aug 26 01:24:40 2026 GMT
        Subject: CN=6a8505d8-2dcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:24:b3:2b:82:a6:bb:cd:d1:ff:5c:6d:09:57:
                    f5:69:6b:be:be:19:c6:47:0f:f2:d7:ee:34:01:42:
                    4d:22:46:9f:da:02:76:12:63:41:be:01:ff:8e:90:
                    e6:09:b4:7a:02:3e:34:65:be:3e:eb:6d:61:5f:4e:
                    e3:5f:dc:e3:08:be:a1:a7:7b:e9:9b:07:1d:01:4a:
                    76:9f:90:05:bc:60:17:d1:7d:aa:0f:cc:bc:99:6d:
                    15:63:c2:94:b6:36:75:70:4a:bc:f1:be:b3:64:c3:
                    c5:2c:de:de:36:76:28:de:75:62:8d:0e:f5:29:b7:
                    8c:53:a2:8e:bf:8a:f2:61:cf:9b:a8:00:49:69:68:
                    75:c9:05:57:4a:d2:90:8e:e8:dd:85:3a:06:f7:bb:
                    ee:00:14:90:c4:2b:0b:de:f2:19:04:cf:cd:d2:33:
                    28:13:4f:f2:48:72:68:8d:6d:fa:74:ae:cd:f4:e9:
                    b7:01:a3:fe:c5:47:f4:1d:33:d8:ef:2c:aa:f6:4f:
                    98:46:dd:6a:6a:3f:6c:2e:a1:1e:72:80:b5:a3:46:
                    b6:52:4e:dc:d3:79:d1:b6:c0:81:41:de:fe:63:5c:
                    0b:f4:89:54:31:a7:4f:5b:e4:a5:27:44:cb:d9:9c:
                    22:ab:b0:25:92:f4:1f:73:03:89:5f:74:01:47:4b:
                    a3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:E8:CD:9E:08:9E:0C:01:3B:E8:83:EA:27:07:0F:AF:C3:53:9A:71
            X509v3 Authority Key Identifier:
                keyid:AD:49:3D:C9:A3:D2:40:34:83:62:85:87:05:1F:77:95:15:89:16:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B418/AD0DC4801C4F11EDAAD31386C4F9AE02/rUk9yaPSQDSDYoWHBR93lRWJFnk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUk9yaPSQDSDYoWHBR93lRWJFnk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B418/AD0DC4801C4F11EDAAD31386C4F9AE02/rUk9yaPSQDSDYoWHBR93lRWJFnk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:f3:ae:df:fd:7e:68:13:79:54:f4:33:78:b3:71:96:7a:02:
         cc:ab:ae:19:39:3f:e1:be:5d:5b:3a:5a:86:3b:1f:bb:a7:ae:
         34:dc:6d:ca:0e:98:b2:07:3c:9d:ce:97:f2:ef:51:16:48:15:
         a0:f4:37:27:d3:b3:24:f3:73:81:70:1e:d5:a4:dc:d1:44:70:
         62:3a:48:56:70:fa:f2:f6:e1:a4:7f:07:17:9e:9d:8b:31:d5:
         70:d0:c3:67:be:e8:fe:c7:ed:5d:0b:e0:3f:bf:fb:78:a9:e2:
         fc:36:db:4c:37:cd:72:54:97:7d:07:35:41:c8:38:40:5a:8f:
         59:a1:0f:3e:30:a4:73:dd:b4:0a:3f:01:ee:f3:31:fd:e6:60:
         2e:68:76:d2:67:47:58:d5:77:3c:c8:a9:a2:8e:5a:72:49:ef:
         a4:9f:b1:e3:d4:b1:3a:69:e7:db:f0:d8:56:74:f6:13:e4:0a:
         26:cb:af:18:32:b8:bc:65:5f:13:c9:6d:ea:0b:d8:25:31:ef:
         99:9c:b3:ff:d6:0a:af:7d:15:4d:46:45:33:41:ac:99:51:b3:
         af:d3:6c:29:17:c2:2c:c7:ac:fe:63:ae:b9:78:3e:f7:44:78:
         5b:43:7c:d3:67:9e:6d:bd:9b:3d:ae:00:dc:db:44:85:c3:08:
         41:d1:24:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:50:15 2026 by rpki-client