Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft
File:                     PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft (raw, json)
Hash identifier:          Z+BpJphwiPn0OHOFyUP3A4SXk6XzBbjVLZmVVNxYjmQ=
Subject key identifier:   F5:E0:AC:B7:63:FA:AE:FB:91:E3:42:7E:AD:F1:02:75:41:CF:BF:59
Authority key identifier: 3C:DE:F1:69:2A:48:BB:15:96:56:74:BC:00:2A:31:33:58:F5:2F:EF
Certificate issuer:       /CN=A918CABF/serialNumber=3CDEF1692A48BB15965674BC002A313358F52FEF
Certificate serial:       0C02
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft
Manifest number:          0BF3
Signing time:             Thu 20 Aug 2026 18:53:18 +0000
Manifest this update:     Thu 20 Aug 2026 18:53:17 +0000
Manifest next update:     Thu 27 Aug 2026 18:53:17 +0000
Files and hashes:         1: PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl (hash: u/CJjRIfV/5VYN9GkNrYTlevPIbOiRYBRQG3lTy2OGU=)
                          2: 783FBEE4430711EAB1201F6BC4F9AE02.roa (hash: 31dQK67wiYiy5G3Mr5Z9I8W/2zQAHp6VfQMF8EbdjCc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl
                          rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3074 (0xc02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918CABF, serialNumber=3CDEF1692A48BB15965674BC002A313358F52FEF
        Validity
            Not Before: Aug 20 18:53:17 2026 GMT
            Not After : Aug 27 18:53:17 2026 GMT
        Subject: CN=6a874d1e-6405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fe:f3:70:d6:e6:9e:86:c1:3b:4e:c6:54:46:
                    0a:06:79:df:cb:59:d2:0c:2d:9c:1f:f5:03:da:a9:
                    a0:ad:c9:4f:4d:ec:1e:b4:88:90:06:b3:35:c0:c0:
                    e6:f4:d3:3e:ac:3e:4d:b5:5d:f5:ee:ca:73:d1:cf:
                    9d:ed:ac:2a:05:6f:a0:af:ec:45:d5:c6:2d:01:1c:
                    5b:51:5e:e2:cc:1f:22:0c:8a:77:19:a6:f4:c0:b2:
                    97:f3:a3:45:1e:5a:b0:e4:e4:18:a8:a1:40:29:7c:
                    f9:51:be:e1:2c:ed:17:b1:ae:1e:d7:73:9b:34:cc:
                    59:fd:d5:87:d7:54:8e:19:c2:31:34:ae:a3:fe:60:
                    33:80:ca:3c:79:7c:77:96:99:8c:3d:1e:4b:1e:8c:
                    a7:42:51:ed:b0:87:ed:29:65:ad:ac:86:72:53:32:
                    06:97:3c:03:1d:97:5d:09:00:61:95:e5:9c:ce:5b:
                    3b:2d:7f:d1:3b:32:a1:74:f1:af:0d:1d:9c:9e:48:
                    ef:3a:0c:b1:7e:fb:82:b7:db:56:09:34:f2:a9:9a:
                    d0:b9:12:1a:87:03:2c:1b:cd:97:5d:34:c9:59:c7:
                    48:44:70:5a:3f:da:ea:fb:ae:c2:06:1c:d5:54:b9:
                    f6:9d:54:bd:f2:4c:14:5c:2c:ad:7e:32:ec:dd:7b:
                    7e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:E0:AC:B7:63:FA:AE:FB:91:E3:42:7E:AD:F1:02:75:41:CF:BF:59
            X509v3 Authority Key Identifier:
                keyid:3C:DE:F1:69:2A:48:BB:15:96:56:74:BC:00:2A:31:33:58:F5:2F:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:96:34:b2:2d:39:9b:d1:ef:31:d1:b0:f1:27:44:b3:7c:02:
         4d:62:30:bf:64:1e:3b:84:7e:11:9b:04:f7:b0:e5:52:da:fc:
         2b:0b:b3:33:6e:87:ab:40:6b:43:6d:40:a2:d6:7f:4c:cc:30:
         1c:ea:94:fb:35:53:74:b9:ec:0a:45:13:9e:a5:b0:4a:d6:d7:
         4c:5f:51:61:a6:e7:b3:26:48:6b:a6:7b:2e:e3:08:34:55:94:
         4e:41:73:ec:61:ad:0c:04:ad:c4:41:91:20:23:87:f7:fe:47:
         dc:7d:55:ed:71:5e:1c:48:7c:33:74:0f:8b:b1:17:24:e8:c1:
         86:6a:c7:a5:3b:ba:71:fa:c8:c4:6b:d8:f9:89:38:00:c0:5a:
         96:15:07:52:66:ff:53:85:43:1b:39:a9:96:30:9a:09:1b:ed:
         cf:c9:23:d5:6b:b3:71:a1:9a:70:66:89:03:5f:4f:8a:14:34:
         aa:d2:67:ed:f0:be:4d:27:ae:86:18:3a:f6:db:47:e4:16:f4:
         6e:d8:fa:15:4e:f5:81:e2:c6:54:7e:10:08:b4:66:7f:0c:41:
         d5:06:64:df:45:59:bf:7e:d9:f2:0c:9a:7c:94:09:5c:32:d2:
         bd:4c:b9:b2:b2:df:4b:d4:c7:50:a5:c0:72:d4:6d:fe:c6:76:
         b8:4c:31:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:48:21 2026 by rpki-client