Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.mft
File:                     pN7tlZPlkTA6mwOYBh_o71GGZco.mft (raw, json)
Hash identifier:          0d/mCM5xQLc20nqBxpr8x2ktaraBYbr6BNGawquKJvw=
Subject key identifier:   5E:A3:38:90:D8:3F:E4:1D:F0:5F:47:D4:E5:DA:9E:E1:89:5B:80:0A
Authority key identifier: A4:DE:ED:95:93:E5:91:30:3A:9B:03:98:06:1F:E8:EF:51:86:65:CA
Certificate issuer:       /CN=A918CABF/serialNumber=A4DEED9593E591303A9B0398061FE8EF518665CA
Certificate serial:       0226
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pN7tlZPlkTA6mwOYBh_o71GGZco.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.mft
Manifest number:          0220
Signing time:             Thu 20 Aug 2026 18:53:21 +0000
Manifest this update:     Thu 20 Aug 2026 18:53:20 +0000
Manifest next update:     Thu 27 Aug 2026 18:53:20 +0000
Files and hashes:         1: pN7tlZPlkTA6mwOYBh_o71GGZco.crl (hash: 26ggp/ar3aTIJkYrdoJ+ROzikRGcRXJefe1R452AoeM=)
                          2: E12607CE6F0411EEA5298939C4F9AE02.roa (hash: IZDaa3RvwLLyBno3E88edLLqf6N/YltnYG0ukbjvIk4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.crl
                          rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pN7tlZPlkTA6mwOYBh_o71GGZco.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 18:53:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 550 (0x226)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918CABF, serialNumber=A4DEED9593E591303A9B0398061FE8EF518665CA
        Validity
            Not Before: Aug 20 18:53:20 2026 GMT
            Not After : Aug 27 18:53:20 2026 GMT
        Subject: CN=6a874d21-95ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:62:28:cf:56:dc:a4:12:e6:2c:a4:a6:ed:e4:
                    25:33:c8:9c:1e:43:e7:3b:0f:5e:35:e6:ca:af:53:
                    11:4d:77:f8:e8:ac:b3:21:c1:5d:1b:9a:0d:08:bf:
                    78:db:ab:0f:75:d8:40:c4:fd:f6:dd:00:fd:36:fb:
                    a3:b3:ab:5c:45:3c:51:be:8e:5e:e5:00:0e:30:a5:
                    3c:99:82:5c:1f:16:8a:52:73:b8:c3:c3:8c:c4:e9:
                    97:a5:92:82:1e:68:f3:b6:e4:c9:cc:ea:3e:b3:96:
                    12:e8:d2:46:c7:dc:fe:4a:23:47:8f:d0:63:aa:c9:
                    6e:0b:b3:06:eb:47:2e:9f:c9:3f:f9:fd:b7:f4:f4:
                    07:81:a4:fa:b3:54:80:e2:f0:a0:0e:89:58:88:ad:
                    dc:60:cf:d3:37:61:8a:6d:d7:d7:5b:7b:d3:ce:61:
                    ba:64:1e:00:16:5a:ef:4f:5c:61:42:28:3a:1a:2f:
                    42:09:91:2e:8f:88:16:77:bc:da:48:23:82:e0:c0:
                    b5:09:a5:af:36:85:49:57:6d:65:58:ca:3c:02:33:
                    bc:4b:6f:b7:5e:fe:ba:db:91:02:56:69:1b:95:9f:
                    42:37:fb:13:98:dc:43:ae:30:81:2b:ae:2e:26:ed:
                    a8:ac:3f:6f:ee:32:76:c6:76:80:c0:e1:19:b6:41:
                    6c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:A3:38:90:D8:3F:E4:1D:F0:5F:47:D4:E5:DA:9E:E1:89:5B:80:0A
            X509v3 Authority Key Identifier:
                keyid:A4:DE:ED:95:93:E5:91:30:3A:9B:03:98:06:1F:E8:EF:51:86:65:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pN7tlZPlkTA6mwOYBh_o71GGZco.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:a1:f8:d4:2f:b2:62:55:75:3e:ef:ee:b7:52:23:0c:32:d9:
         ff:cd:f0:96:14:2d:c8:e8:71:93:6e:ec:88:86:04:aa:a0:51:
         10:f6:45:4c:ef:dd:96:15:e2:3c:be:8a:ce:3b:8e:cc:68:17:
         6c:77:6b:bc:a8:69:38:62:1a:44:6e:95:04:e8:ef:d0:f3:e1:
         79:96:e9:c5:99:3e:8a:cf:93:ba:c6:29:1e:3c:88:2a:f9:c9:
         7d:02:4f:d4:e7:3d:3b:15:fd:f4:0a:fa:f0:01:b9:0a:f0:ca:
         75:79:fe:b0:65:34:87:58:45:55:88:d0:41:a3:81:9e:a9:77:
         98:b6:d1:04:3e:e2:1a:4e:74:a6:31:71:60:2d:5a:7e:bb:d0:
         49:d2:26:41:25:dc:dc:a6:94:5b:80:c7:a6:30:8c:4e:a5:79:
         2b:5d:f3:77:01:84:74:b6:5c:32:dd:42:17:9d:84:57:f7:1c:
         be:b9:af:3e:33:ca:d1:22:06:8b:a7:19:7c:47:37:a3:de:24:
         e0:fe:b0:a6:6c:29:93:4c:55:cf:0c:59:f1:f1:1b:23:e4:22:
         75:fb:e3:21:4f:28:4f:04:eb:ab:0a:c5:d9:bd:01:a7:47:9b:
         3d:ef:7c:ea:58:ab:d4:05:ec:9c:99:d8:7a:f7:28:8e:3b:77:
         4d:7e:77:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:49:11 2026 by rpki-client