Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E756/7591BEBE920011F18B018CA75D11F970/VCbPAAypXtlX-zh4RmES3qX5YzE.mft
File:                     VCbPAAypXtlX-zh4RmES3qX5YzE.mft (raw, json)
Hash identifier:          kL9tFXZP98keNdqBfyHizeyMCRUer4xBy/RNk0es7ZM=
Subject key identifier:   97:47:B0:8F:2A:9F:6E:26:D6:10:B5:AC:9D:80:D2:9A:55:AE:70:C1
Authority key identifier: 54:26:CF:00:0C:A9:5E:D9:57:FB:38:78:46:61:12:DE:A5:F9:63:31
Certificate issuer:       /CN=A918E756/serialNumber=5426CF000CA95ED957FB3878466112DEA5F96331
Certificate serial:       09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCbPAAypXtlX-zh4RmES3qX5YzE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E756/7591BEBE920011F18B018CA75D11F970/VCbPAAypXtlX-zh4RmES3qX5YzE.mft
Manifest number:          08
Signing time:             Wed 19 Aug 2026 09:55:27 +0000
Manifest this update:     Wed 19 Aug 2026 09:55:26 +0000
Manifest next update:     Wed 26 Aug 2026 09:55:26 +0000
Files and hashes:         1: VCbPAAypXtlX-zh4RmES3qX5YzE.crl (hash: tu41ssBMFySWMV/bykWJWeDqVgVQLMvdT0x/8QbibK8=)
                          2: 8977E636920211F1A2698D205E11F970.roa (hash: 2QkuVfzySfZOhqbjYE8wCK7l1ySmgIbwdfOI1fa+VA0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E756/7591BEBE920011F18B018CA75D11F970/VCbPAAypXtlX-zh4RmES3qX5YzE.crl
                          rsync://rpki.apnic.net/member_repository/A918E756/7591BEBE920011F18B018CA75D11F970/VCbPAAypXtlX-zh4RmES3qX5YzE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCbPAAypXtlX-zh4RmES3qX5YzE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:55:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E756, serialNumber=5426CF000CA95ED957FB3878466112DEA5F96331
        Validity
            Not Before: Aug 19 09:55:26 2026 GMT
            Not After : Aug 26 09:55:26 2026 GMT
        Subject: CN=6a857d8f-b88e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e2:a3:6b:17:11:c6:c6:9c:1e:a0:1b:27:31:
                    f3:fb:5b:7b:b5:cf:8d:ea:0b:1d:76:78:d9:34:7e:
                    64:99:c5:78:98:5f:cd:f0:8d:9c:91:c4:02:9c:14:
                    b9:4c:1f:75:6a:c6:84:6e:cb:66:47:0f:fe:2c:93:
                    5b:a8:78:58:3e:9c:52:a7:2e:15:6c:a1:33:c4:10:
                    5e:0a:02:57:f5:9d:5d:51:92:aa:65:dc:8e:ae:d4:
                    64:48:aa:27:2e:16:34:52:6a:53:d8:9f:52:de:ef:
                    24:e1:d8:5a:9b:fe:e1:ba:c0:b3:ef:f6:2c:b8:88:
                    e5:47:02:42:28:96:d4:b9:d2:1e:68:3a:ce:7c:41:
                    48:a3:ec:e3:f7:2d:35:bb:b1:1b:88:45:aa:8d:99:
                    d8:0d:3a:12:5f:e7:78:7d:98:1c:47:49:88:86:82:
                    84:4c:68:e0:78:e7:da:65:38:4d:33:35:76:76:7a:
                    b6:32:12:a7:43:fa:a2:01:c6:ad:a9:71:83:be:87:
                    84:ab:93:9d:db:20:3e:07:5b:46:9a:d9:01:bd:7a:
                    2d:14:8d:c3:af:d5:92:e9:9f:c8:ba:11:45:5c:b0:
                    97:b5:cb:84:ab:23:66:ff:21:23:b3:8e:5d:35:77:
                    4c:b0:cc:5f:49:fe:82:71:57:23:c7:7b:06:d5:b9:
                    c9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:47:B0:8F:2A:9F:6E:26:D6:10:B5:AC:9D:80:D2:9A:55:AE:70:C1
            X509v3 Authority Key Identifier:
                keyid:54:26:CF:00:0C:A9:5E:D9:57:FB:38:78:46:61:12:DE:A5:F9:63:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E756/7591BEBE920011F18B018CA75D11F970/VCbPAAypXtlX-zh4RmES3qX5YzE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCbPAAypXtlX-zh4RmES3qX5YzE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E756/7591BEBE920011F18B018CA75D11F970/VCbPAAypXtlX-zh4RmES3qX5YzE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:f1:c3:0f:0b:d1:75:05:f1:6a:68:af:df:7d:8e:bf:0f:af:
         e3:3a:6d:86:33:ec:17:49:38:20:82:d7:6a:66:05:78:93:1b:
         c2:16:4b:38:02:d2:05:01:ba:23:ff:00:17:71:ae:6c:2d:d9:
         99:7f:11:7b:73:5f:06:c0:9f:16:86:93:d6:0a:59:c1:a1:69:
         91:07:06:88:38:ac:c1:2e:8b:d4:7a:bb:36:9f:2b:bf:a6:a3:
         f4:53:f8:fc:80:a9:6a:fa:32:4e:39:a7:20:ce:bf:ea:70:f3:
         79:c4:db:43:70:e1:ce:68:38:8d:d7:c7:88:d8:2f:dd:6c:7a:
         19:49:73:91:2f:bb:95:fc:dd:f4:19:cf:42:35:63:7a:7d:e7:
         1f:14:07:15:96:02:05:46:d9:d3:5a:87:79:d0:a8:66:b8:96:
         b4:f5:b8:e9:6e:f3:61:a3:81:0c:42:77:f1:4e:ad:87:49:f4:
         06:72:2a:76:a1:67:fc:35:98:61:34:02:1f:3e:47:57:94:5b:
         b8:9d:62:0b:2f:d6:4d:54:13:41:41:72:84:6c:a6:27:89:27:
         ba:d2:ca:8d:5c:bb:34:d5:e1:ee:be:34:fc:23:db:ed:b5:8b:
         9c:b6:85:f5:7f:18:4d:db:14:2b:3e:0e:b6:66:6c:02:35:d2:
         22:01:49:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:44:29 2026 by rpki-client