Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C553/FFF5CCF64D5B11F1A1CE7A888F833773/qLttedj8Wklcs7U8aZYmG3aVywU.mft
File:                     qLttedj8Wklcs7U8aZYmG3aVywU.mft (raw, json)
Hash identifier:          jHpJ7oFXMK6EvhjV0tZNyq9TlG+6MpfS92yZLt/Wt3g=
Subject key identifier:   BD:B7:04:F7:83:0D:48:5A:83:9D:C0:B9:94:00:D8:C9:41:0B:D3:92
Authority key identifier: A8:BB:6D:79:D8:FC:5A:49:5C:B3:B5:3C:69:96:26:1B:76:95:CB:05
Certificate issuer:       /CN=A918C553/serialNumber=A8BB6D79D8FC5A495CB3B53C6996261B7695CB05
Certificate serial:       34
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qLttedj8Wklcs7U8aZYmG3aVywU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C553/FFF5CCF64D5B11F1A1CE7A888F833773/qLttedj8Wklcs7U8aZYmG3aVywU.mft
Manifest number:          33
Signing time:             Wed 19 Aug 2026 09:23:41 +0000
Manifest this update:     Wed 19 Aug 2026 09:23:40 +0000
Manifest next update:     Wed 26 Aug 2026 09:23:40 +0000
Files and hashes:         1: qLttedj8Wklcs7U8aZYmG3aVywU.crl (hash: YoS7jZVtE0pkIeV2tfOYQPfM3/U4n2Mvbv04BtXC/Sc=)
                          2: C0D3BF824D5C11F18D7C59B78F833773.roa (hash: hI4EfUAJ4cvG9UsDM9/RzADC4zdxChx3k/UyKORIo9s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C553/FFF5CCF64D5B11F1A1CE7A888F833773/qLttedj8Wklcs7U8aZYmG3aVywU.crl
                          rsync://rpki.apnic.net/member_repository/A918C553/FFF5CCF64D5B11F1A1CE7A888F833773/qLttedj8Wklcs7U8aZYmG3aVywU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qLttedj8Wklcs7U8aZYmG3aVywU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:23:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C553, serialNumber=A8BB6D79D8FC5A495CB3B53C6996261B7695CB05
        Validity
            Not Before: Aug 19 09:23:40 2026 GMT
            Not After : Aug 26 09:23:40 2026 GMT
        Subject: CN=6a85761d-d349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:eb:26:5f:b9:ac:0a:64:9e:8d:1a:ce:47:55:
                    0e:e5:29:c5:a3:bc:18:7b:1b:72:02:25:fc:28:11:
                    e1:87:16:0b:a7:6f:93:ba:dc:b5:cf:85:86:b8:04:
                    85:22:3b:11:b1:0b:41:89:60:85:bb:3b:7b:5d:f3:
                    89:ab:0b:e6:83:c7:39:f9:0e:7a:05:e7:2f:68:d9:
                    ef:fb:ef:90:ac:a0:c4:30:1c:1e:00:cb:89:7e:eb:
                    a5:83:f7:60:a7:59:81:85:4a:97:1e:77:36:2d:56:
                    ba:cc:f8:a7:e5:cd:ff:d9:a3:32:33:13:97:fc:ed:
                    76:05:fc:99:82:ce:d1:79:01:32:ce:ec:2d:9d:97:
                    dd:b4:c3:49:76:73:c5:c3:a2:94:ef:37:37:98:62:
                    31:d0:77:ac:26:e8:a5:6e:c5:af:ad:67:fa:02:db:
                    c0:38:ad:5a:d8:b8:aa:d1:bb:32:11:34:a0:c8:40:
                    29:e8:72:6f:76:34:7b:25:d8:4f:95:43:fb:da:9d:
                    32:94:40:0c:01:c3:c2:7c:b1:43:d4:82:41:86:c7:
                    35:ca:25:60:6f:fd:71:58:eb:11:80:75:91:6e:3d:
                    8c:eb:f5:fe:67:0b:90:91:a4:ff:1d:b6:59:82:9b:
                    d2:4a:19:8e:65:71:96:9b:31:1a:8a:f6:8d:ea:54:
                    97:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:B7:04:F7:83:0D:48:5A:83:9D:C0:B9:94:00:D8:C9:41:0B:D3:92
            X509v3 Authority Key Identifier:
                keyid:A8:BB:6D:79:D8:FC:5A:49:5C:B3:B5:3C:69:96:26:1B:76:95:CB:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C553/FFF5CCF64D5B11F1A1CE7A888F833773/qLttedj8Wklcs7U8aZYmG3aVywU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qLttedj8Wklcs7U8aZYmG3aVywU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C553/FFF5CCF64D5B11F1A1CE7A888F833773/qLttedj8Wklcs7U8aZYmG3aVywU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:a0:d5:6c:d8:a8:8a:f6:1e:a2:58:6a:f4:3e:38:b1:51:c7:
         cc:5f:dd:85:e3:07:44:79:24:93:81:16:f8:e9:f4:3d:ca:e6:
         79:0f:6c:fe:9d:37:69:4d:40:f8:f6:bd:88:ac:f5:89:24:d2:
         e0:2f:a9:e5:5b:c1:6a:24:a1:b4:04:26:ff:bd:fc:6f:ad:74:
         63:0f:17:60:d9:6c:a7:f0:9c:1c:f5:ea:87:0f:7a:a4:b2:6e:
         ae:ac:ac:02:10:4a:b9:ad:9a:44:06:51:78:d7:33:57:1e:55:
         63:3b:04:71:89:44:1d:d5:fe:d5:5f:39:93:ca:c8:4e:91:88:
         f5:31:bc:58:4f:47:08:a5:b2:ad:a3:17:91:48:5c:7b:eb:28:
         f5:98:22:b4:16:2c:64:1f:ba:5d:2c:20:cf:37:bb:ce:1b:d2:
         a5:6e:85:c5:89:7a:dd:63:58:fd:a9:40:ab:57:6a:91:5a:27:
         0a:6a:ed:54:39:e2:9e:f1:85:31:22:06:d6:e9:7d:37:2c:2f:
         f4:77:35:c6:30:04:3f:ef:1a:58:68:4f:33:c5:16:f9:b9:2e:
         75:17:2c:a0:f8:29:b6:ea:f4:32:e2:8f:82:94:25:b1:0f:97:
         12:93:3d:f9:18:82:80:9f:e0:52:84:fc:ae:3a:10:11:52:44:
         a2:25:81:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:31:42 2026 by rpki-client