Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft
File:                     r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft (raw, json)
Hash identifier:          sO1tPn4H1PceTqu0onZNGbid/G9VzFdjNb0aXkx3uvc=
Subject key identifier:   D5:AD:C4:19:0C:94:6D:12:FA:5F:F0:78:CB:1C:98:51:DB:1B:BD:C2
Authority key identifier: AF:41:C9:D0:44:6A:7F:A9:14:C6:C1:6E:78:8C:D2:C3:F8:0A:F5:02
Certificate issuer:       /CN=A918EC82/serialNumber=AF41C9D0446A7FA914C6C16E788CD2C3F80AF502
Certificate serial:       0910
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft
Manifest number:          08FB
Signing time:             Fri 04 Sep 2026 20:13:42 +0000
Manifest this update:     Fri 04 Sep 2026 20:13:42 +0000
Manifest next update:     Fri 11 Sep 2026 20:13:42 +0000
Files and hashes:         1: r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl (hash: QPMUnaImR99dUZ889LQP3Qko1msYazrBG6KramKkypc=)
                          2: F814843E7B5D11F18BA834705CA30FBC.roa (hash: VjrtVuIdkV4NNtsE4s4P9PRm9+7fdmJWz3kJX58ICd4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl
                          rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 20:13:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2320 (0x910)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EC82, serialNumber=AF41C9D0446A7FA914C6C16E788CD2C3F80AF502
        Validity
            Not Before: Sep  4 20:13:42 2026 GMT
            Not After : Sep 11 20:13:42 2026 GMT
        Subject: CN=6a9b2676-4ea0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fe:98:9c:d2:01:08:d9:7f:3a:cc:43:d2:c5:
                    e1:3e:7a:0d:0e:ad:46:6b:9f:5d:91:08:e7:74:d8:
                    c3:f2:e3:af:5d:9a:5d:bc:70:da:42:da:a9:69:41:
                    e8:32:21:49:89:ac:e0:82:37:8f:d4:ee:db:48:25:
                    3c:84:df:e1:7a:05:28:05:47:97:b7:a7:13:2f:ac:
                    aa:0b:ed:98:7a:5f:ed:38:71:41:80:ba:63:58:ad:
                    b1:4f:d3:e2:35:51:94:60:af:44:59:6c:29:71:99:
                    ae:4d:a9:ec:fa:6e:ab:7e:8d:5d:70:10:44:26:5b:
                    c7:7f:e6:c7:63:30:1e:d3:58:73:36:24:e1:00:02:
                    28:eb:fb:f5:2f:25:8e:68:79:a9:3a:bd:19:e1:55:
                    d8:d2:53:77:cb:ba:0e:fe:24:41:12:72:85:f8:a3:
                    3c:0a:3e:81:c8:5f:10:50:5e:a5:68:29:48:32:6e:
                    08:f0:ed:10:b1:be:be:0f:87:a8:35:9d:95:7b:34:
                    fb:f1:33:0c:92:19:cc:40:bc:ed:2a:47:ad:7d:a5:
                    d7:eb:57:03:ae:0a:ba:42:b2:1a:2e:26:26:f8:7b:
                    c8:fc:a7:2c:8f:81:7f:93:87:06:70:c0:4b:6c:89:
                    62:c6:16:39:4e:34:4a:50:00:a2:b0:d3:cf:ab:ae:
                    e0:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:AD:C4:19:0C:94:6D:12:FA:5F:F0:78:CB:1C:98:51:DB:1B:BD:C2
            X509v3 Authority Key Identifier:
                keyid:AF:41:C9:D0:44:6A:7F:A9:14:C6:C1:6E:78:8C:D2:C3:F8:0A:F5:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:ae:dc:4c:31:2e:fe:84:1f:cc:87:35:ea:dc:75:84:84:5a:
         22:c4:a6:7a:4d:45:6c:0f:7b:43:79:5a:cc:38:ca:50:83:34:
         43:91:d1:8b:8a:87:08:77:37:5d:ac:13:ea:bc:a0:ac:9e:7f:
         05:4c:66:37:33:86:52:29:5c:9b:a7:fa:68:6e:29:58:38:fd:
         62:14:05:f6:e3:7e:4e:7f:76:7c:32:b1:31:ac:5f:bf:9b:47:
         b6:d0:40:cc:2c:95:98:1f:d7:b2:9d:fc:b6:37:a9:d4:06:f0:
         d6:3c:b1:3f:88:e5:69:38:3e:ba:5e:ed:05:f7:b6:a8:04:13:
         f6:2e:58:15:b4:a0:99:9f:c8:50:78:e7:17:0b:45:3c:17:59:
         aa:f4:4c:3a:14:a1:88:70:c4:77:3f:2a:89:ce:59:46:ec:c2:
         e1:a8:3f:5b:50:d0:13:7a:96:f9:50:7a:7a:b5:74:80:f0:f3:
         e5:3f:2f:c8:58:f0:bd:76:f2:94:29:34:32:4b:d7:da:bb:5b:
         bf:81:1b:66:95:2e:de:6a:37:96:84:7f:63:6a:6b:ea:93:3b:
         96:42:f7:f2:39:66:b8:29:96:ec:53:db:31:b1:cf:e4:ea:3a:
         7b:aa:ed:b9:9d:53:ee:31:00:47:79:6e:40:c4:0d:a6:8c:0e:
         b4:67:f3:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:26:17 2026 by rpki-client