Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft
File:                     dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft (raw, json)
Hash identifier:          TnCaT5EAA8z9n4wNeKWBcBD9a5euiMh1vlRVfDExp/s=
Subject key identifier:   D9:91:F1:03:6B:41:5B:FB:6A:DB:0C:BD:F8:DC:FC:E8:12:E5:69:03
Authority key identifier: 76:1A:8E:8F:EB:76:01:49:8C:9E:A6:78:87:FD:C1:05:41:76:D9:FC
Certificate issuer:       /CN=A918C10A/serialNumber=761A8E8FEB7601498C9EA67887FDC1054176D9FC
Certificate serial:       08A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhqOj-t2AUmMnqZ4h_3BBUF22fw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft
Manifest number:          089B
Signing time:             Tue 18 Aug 2026 20:57:09 +0000
Manifest this update:     Tue 18 Aug 2026 20:57:08 +0000
Manifest next update:     Tue 25 Aug 2026 20:57:08 +0000
Files and hashes:         1: dhqOj-t2AUmMnqZ4h_3BBUF22fw.crl (hash: NUSMXw0vFathe71P0lamHCPdn5BvGbOBDFg4TgZ5fTg=)
                          2: CCFEC19AFDAC11EAB7B8A13BC4F9AE02.roa (hash: hPLmNaEpUGBOielXjPQ12dxqTWiu2MctRveJnDfMrGs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.crl
                          rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhqOj-t2AUmMnqZ4h_3BBUF22fw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 20:57:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2212 (0x8a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C10A, serialNumber=761A8E8FEB7601498C9EA67887FDC1054176D9FC
        Validity
            Not Before: Aug 18 20:57:08 2026 GMT
            Not After : Aug 25 20:57:08 2026 GMT
        Subject: CN=6a84c725-bb46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:31:dd:d1:7c:c5:46:cb:d8:df:60:2d:8e:80:
                    8d:6f:75:3b:b9:03:f4:67:35:19:1a:52:4d:36:87:
                    dc:b5:83:41:0c:0f:f9:de:d5:24:5d:08:11:58:da:
                    44:1d:21:f4:33:01:8b:ea:4f:28:71:77:bc:45:14:
                    47:44:23:99:48:d1:54:a2:92:e5:47:cf:14:60:f6:
                    e6:bf:14:f3:2c:1a:e1:14:42:89:74:38:39:9c:19:
                    fe:49:3b:67:c2:03:a1:d7:7e:2e:af:1b:c8:c5:28:
                    8f:a4:a3:66:52:cc:2b:c2:1a:84:e3:6f:b7:42:34:
                    24:60:d4:a2:41:7b:b7:28:e0:35:2f:96:a6:90:45:
                    b9:11:f3:97:cd:aa:3c:28:8b:1b:b8:37:5b:00:f3:
                    1b:37:3c:20:36:b5:b4:0c:33:db:21:25:41:ab:89:
                    90:a7:bc:38:e9:4c:22:ec:52:fa:98:3f:84:23:7a:
                    41:b7:a9:21:e3:75:29:47:9f:ba:45:aa:2c:59:78:
                    c1:9a:68:bd:a2:2a:e4:ee:1a:61:81:a9:c9:b4:e6:
                    c6:c6:69:42:84:93:8b:65:47:0c:e8:8c:6b:50:d8:
                    ce:1d:a6:0e:b3:26:14:2e:22:b2:67:4f:82:41:6c:
                    53:43:c4:0d:48:00:ff:30:98:f1:e8:f5:64:50:e8:
                    1b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:91:F1:03:6B:41:5B:FB:6A:DB:0C:BD:F8:DC:FC:E8:12:E5:69:03
            X509v3 Authority Key Identifier:
                keyid:76:1A:8E:8F:EB:76:01:49:8C:9E:A6:78:87:FD:C1:05:41:76:D9:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhqOj-t2AUmMnqZ4h_3BBUF22fw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:e4:a6:9a:72:42:24:31:46:33:65:23:1a:11:51:41:56:52:
         54:da:1b:d2:85:b9:55:b3:38:0f:21:56:3d:ef:fd:9e:0b:be:
         db:8f:57:c3:d9:9e:75:20:4e:cd:fb:c1:0b:5c:a5:48:41:e2:
         95:5b:64:46:a0:42:05:d6:6a:b1:46:a6:db:99:4b:bd:b1:2e:
         e2:cf:5c:7a:38:ae:33:29:61:c6:54:11:9a:68:37:cb:e1:8b:
         93:cb:af:8d:6a:8c:ce:e3:00:25:fd:81:a9:71:e6:7d:32:e7:
         10:3c:78:92:84:69:72:33:58:ca:08:a1:03:89:d5:e4:dd:d5:
         af:07:b5:1c:78:43:5c:cf:7f:cf:78:0f:ce:57:0b:67:00:07:
         69:bc:69:b4:95:86:f8:fb:89:73:8a:67:7f:f8:d3:6b:37:fd:
         43:1f:98:15:fe:60:02:eb:83:44:38:3a:a4:e9:b9:01:26:ab:
         c3:9f:c2:f1:5e:39:ae:ae:5f:29:3f:d5:67:91:80:ce:16:8d:
         e5:ae:56:3d:eb:d9:8d:44:f8:98:0b:3e:a5:46:11:00:0c:e4:
         fa:5b:62:b9:f4:cf:58:ba:e9:93:9c:68:d1:dd:7c:b3:46:52:
         71:cd:41:0a:ca:a2:35:05:49:d6:73:92:c7:53:1c:ce:9a:da:
         d1:fe:34:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:56:50 2026 by rpki-client