Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft
File:                     aNpOhaeYSz_RCu80x9HQDxtGRTE.mft (raw, json)
Hash identifier:          NjdLBeEbsue6vF7RTxI/gvfj0FGuT9nR+jnwSGl9lFY=
Subject key identifier:   D5:7A:2A:1D:8C:BD:26:BC:96:B8:71:86:0F:AF:D9:17:54:9B:4E:7B
Authority key identifier: 68:DA:4E:85:A7:98:4B:3F:D1:0A:EF:34:C7:D1:D0:0F:1B:46:45:31
Certificate issuer:       /CN=A918D931/serialNumber=68DA4E85A7984B3FD10AEF34C7D1D00F1B464531
Certificate serial:       088F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNpOhaeYSz_RCu80x9HQDxtGRTE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft
Manifest number:          0886
Signing time:             Mon 31 Aug 2026 20:42:15 +0000
Manifest this update:     Mon 31 Aug 2026 20:42:14 +0000
Manifest next update:     Mon 07 Sep 2026 20:42:14 +0000
Files and hashes:         1: aNpOhaeYSz_RCu80x9HQDxtGRTE.crl (hash: 7jOOod6+lM2SHCvZUXtI0/ua9jMdNuglM4sS9mJcPFo=)
                          2: F575D65A085A11EBA6864D71C4F9AE02.roa (hash: 0tPpCFmY2RtQMNi50P1oO91h+coSEhJnlpMk0tERKfA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.crl
                          rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNpOhaeYSz_RCu80x9HQDxtGRTE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Sep 2026 20:42:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2191 (0x88f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D931, serialNumber=68DA4E85A7984B3FD10AEF34C7D1D00F1B464531
        Validity
            Not Before: Aug 31 20:42:14 2026 GMT
            Not After : Sep  7 20:42:14 2026 GMT
        Subject: CN=6a95e727-e4e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b1:fe:d9:54:10:6a:78:4e:b0:ec:ee:ca:9d:
                    40:6d:c1:c4:9b:62:19:f4:5d:56:20:9b:72:41:83:
                    f4:72:f0:f2:fa:d7:e5:23:b0:1b:ef:88:c5:cf:ea:
                    39:23:d4:11:31:2d:f0:2c:a7:88:d7:b9:81:df:83:
                    69:30:99:23:46:5f:f2:08:64:26:94:9e:0e:e0:3c:
                    62:4a:5d:06:d4:fd:99:6e:17:e3:b4:a3:4a:48:5a:
                    db:d7:58:78:eb:18:9e:6c:81:44:3b:b3:3f:20:38:
                    9b:ec:29:08:ea:9c:bc:76:c5:a5:82:41:75:8c:e9:
                    f2:87:be:29:42:be:5c:18:06:a9:54:40:9e:2d:27:
                    9c:7e:2e:2f:9d:63:03:2d:47:1b:2d:d9:bd:e5:c8:
                    3e:76:80:0d:3e:3b:61:d6:cc:fe:74:f5:c5:c5:75:
                    5a:cd:e6:68:27:4a:b0:34:dd:bd:f7:d2:ba:af:b8:
                    81:5e:2c:c8:80:8c:f5:74:3b:9e:07:df:21:5c:e8:
                    9b:ee:5e:94:6e:19:97:49:cf:b7:b8:e7:c3:ff:ea:
                    74:c8:db:c7:99:8e:2b:50:ac:17:fd:df:d1:b9:54:
                    67:d6:fd:b9:59:f5:bd:b1:88:3f:03:e2:02:42:e1:
                    c5:49:ad:50:fc:bf:2d:d1:d9:98:c3:65:ab:ae:19:
                    70:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:7A:2A:1D:8C:BD:26:BC:96:B8:71:86:0F:AF:D9:17:54:9B:4E:7B
            X509v3 Authority Key Identifier:
                keyid:68:DA:4E:85:A7:98:4B:3F:D1:0A:EF:34:C7:D1:D0:0F:1B:46:45:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNpOhaeYSz_RCu80x9HQDxtGRTE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:a5:f0:ef:07:8d:b8:a2:97:e8:4a:12:f8:83:50:59:c8:6c:
         50:74:b2:04:07:de:08:06:fc:4d:69:5c:07:9f:24:be:52:f5:
         25:5a:34:c8:6a:f6:3b:f9:b6:96:e2:9c:5b:0d:40:a7:70:7c:
         66:3c:4a:10:67:cf:14:28:3e:bb:d1:27:9e:55:a3:c7:35:27:
         ad:15:74:60:16:9d:e7:c1:e2:82:e2:c6:90:45:2f:34:4c:be:
         05:61:62:d4:ce:5d:a4:36:b1:4f:25:59:0d:fd:cc:85:2f:71:
         38:15:c3:4a:f1:aa:34:b3:d4:b6:35:87:f3:34:29:a0:1a:f0:
         61:f0:e2:38:03:38:34:b5:9b:e9:08:a3:36:bf:7e:85:6f:b1:
         18:a8:4a:13:7e:7f:eb:21:c0:47:27:e9:e4:72:ba:bd:ff:74:
         87:d5:ab:6e:e6:24:3b:53:bb:e1:db:48:e1:eb:dc:11:0f:dc:
         ba:a3:e4:24:69:d0:b6:9b:99:57:6a:f3:9d:cb:d7:cc:43:aa:
         34:05:05:b7:98:3e:35:0d:64:ed:01:72:dc:0b:25:cf:31:9b:
         08:d9:3a:c0:9c:40:c5:49:f5:57:0d:81:99:85:35:e0:e2:40:
         68:ac:f8:f4:02:d8:2b:78:77:5f:33:91:7a:fc:94:00:7b:81:
         ab:f1:c1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:52:09 2026 by rpki-client