Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft
File:                     QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft (raw, json)
Hash identifier:          KzWY3xb3xtHwPHc9DTB4ICuotN7ZgkvHBhlz/DaSZyo=
Subject key identifier:   E1:2E:B0:27:71:41:B5:F9:7A:56:1B:07:A2:49:56:94:AA:6A:3B:C4
Authority key identifier: 42:75:8D:E0:CC:0C:F6:2C:2A:EE:E9:3E:0E:EE:67:90:3A:50:2C:CC
Certificate issuer:       /CN=A918DB4E/serialNumber=42758DE0CC0CF62C2AEEE93E0EEE67903A502CCC
Certificate serial:       0D61
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft
Manifest number:          0D34
Signing time:             Tue 18 Aug 2026 18:36:54 +0000
Manifest this update:     Tue 18 Aug 2026 18:36:54 +0000
Manifest next update:     Tue 25 Aug 2026 18:36:54 +0000
Files and hashes:         1: QnWN4MwM9iwq7uk-Du5nkDpQLMw.crl (hash: E4lvBygaGI0+H2ye1mqLFo7uEWduNaQnyi9T08Vr++Q=)
                          2: CF3CF4A2DECD11EFA34A7C66C4F9AE02.roa (hash: S4RngeSsrDWRVEdowSh+mWQ91kYaeScRFv54RIFCUlY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.crl
                          rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 18:36:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3425 (0xd61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918DB4E, serialNumber=42758DE0CC0CF62C2AEEE93E0EEE67903A502CCC
        Validity
            Not Before: Aug 18 18:36:54 2026 GMT
            Not After : Aug 25 18:36:54 2026 GMT
        Subject: CN=6a84a646-2afc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:cc:74:db:d0:3d:03:65:99:6a:9e:7b:f9:4e:
                    0e:06:5e:2c:86:32:21:20:0d:b4:8e:8d:d7:9d:ea:
                    bb:5f:e5:21:af:24:fb:a3:55:b0:eb:73:0f:6c:46:
                    d3:d4:85:0f:1f:99:b9:72:ff:bb:be:a7:35:2a:43:
                    07:e6:55:26:fa:6c:40:4e:56:6f:a1:2a:26:62:db:
                    2e:f2:11:c8:6d:7e:9a:8c:99:05:d8:82:14:c5:47:
                    1e:6c:34:9c:9d:f3:c9:fc:47:63:7f:f3:03:a9:f3:
                    7b:12:e6:f8:52:1e:a8:c3:75:61:8a:59:3c:33:b0:
                    81:b3:af:90:6c:22:f7:b4:30:70:34:db:c5:03:7b:
                    e2:17:98:65:1c:48:cc:10:6d:04:00:42:9d:6a:2e:
                    95:e6:13:b3:82:6e:0f:aa:c0:90:8d:b2:2c:6b:ed:
                    7f:38:84:49:3b:31:8f:39:75:ea:e3:77:68:d0:25:
                    2e:3a:58:d0:76:18:ff:5d:55:39:2d:1b:e7:ac:90:
                    e1:0c:7d:83:fc:e5:9f:b9:45:d2:ef:0d:24:2c:1c:
                    d4:31:e1:6a:e4:28:f8:06:c8:fb:aa:7b:f3:0e:7f:
                    37:78:a8:1e:4d:1c:05:d7:20:0d:a0:65:39:d8:12:
                    ec:9d:71:42:a8:80:93:91:fb:5e:0b:93:00:9c:26:
                    1d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:2E:B0:27:71:41:B5:F9:7A:56:1B:07:A2:49:56:94:AA:6A:3B:C4
            X509v3 Authority Key Identifier:
                keyid:42:75:8D:E0:CC:0C:F6:2C:2A:EE:E9:3E:0E:EE:67:90:3A:50:2C:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:c7:fc:3c:b3:e2:82:33:9f:c7:b4:20:2e:4c:e1:77:dd:75:
         5e:38:55:a2:fb:bb:c1:9f:f2:e7:db:01:8c:8b:ff:d8:57:a4:
         18:5d:3f:5a:8f:03:98:11:1f:44:10:0c:60:56:60:a2:bd:d5:
         8c:79:80:be:ee:db:f9:51:d8:48:e5:21:69:44:60:52:0b:b1:
         53:84:0d:46:31:e4:d3:df:c3:16:9e:f6:10:7a:75:07:b8:8a:
         8f:2a:60:4a:37:b8:e2:de:7f:85:af:3f:fc:05:ff:35:a2:16:
         75:a9:98:d7:94:8a:e4:44:bf:ee:36:3b:5b:b7:a3:b8:63:dc:
         e6:7a:7d:16:8b:05:32:93:0d:61:b1:04:12:1e:ee:b3:e7:fe:
         a7:8c:51:b9:05:f3:31:1d:a6:12:bc:16:77:26:f3:fd:f0:3f:
         71:df:56:95:ce:2a:e8:b9:8d:ec:68:bf:f8:a2:92:33:bc:79:
         67:03:c1:f9:bf:eb:05:4b:bf:74:31:59:c8:22:1a:b2:d6:cc:
         2b:22:5c:80:1c:8f:66:ea:8b:b5:69:18:f5:5a:5b:74:49:9d:
         e5:84:77:48:b3:72:75:22:b6:74:ee:ca:09:fa:ff:e3:64:27:
         48:ea:34:f0:62:ed:41:e2:f5:d4:6a:6f:af:df:b9:45:ac:c7:
         69:60:0f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:39:34 2026 by rpki-client