Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft
File:                     zPugs5k5MOsTt6JZJyqoEfh0SyM.mft (raw, json)
Hash identifier:          wNPzhSaPvYD8A7LPds9WIcs7vi3bz0/x/hMvUP0qOzY=
Subject key identifier:   25:5C:E9:0D:2D:9D:12:79:74:B9:38:98:E2:5C:F1:08:78:33:65:AE
Authority key identifier: CC:FB:A0:B3:99:39:30:EB:13:B7:A2:59:27:2A:A8:11:F8:74:4B:23
Certificate issuer:       /CN=A9191D22/serialNumber=CCFBA0B3993930EB13B7A259272AA811F8744B23
Certificate serial:       0AF5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPugs5k5MOsTt6JZJyqoEfh0SyM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft
Manifest number:          0ADE
Signing time:             Tue 18 Aug 2026 19:43:29 +0000
Manifest this update:     Tue 18 Aug 2026 19:43:29 +0000
Manifest next update:     Tue 25 Aug 2026 19:43:29 +0000
Files and hashes:         1: zPugs5k5MOsTt6JZJyqoEfh0SyM.crl (hash: Stkgy9Y2ePtMhtfvFcvoHI0+GUsKhdSpjXMC4/HQhB0=)
                          2: 683CD6083EF511F1AB4378F7C3833773.roa (hash: 2AqUjb8b7TWsR15Or5pxjFuJpbFFS7iyKcRc0Dhq0k8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.crl
                          rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPugs5k5MOsTt6JZJyqoEfh0SyM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 19:43:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2805 (0xaf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191D22, serialNumber=CCFBA0B3993930EB13B7A259272AA811F8744B23
        Validity
            Not Before: Aug 18 19:43:29 2026 GMT
            Not After : Aug 25 19:43:29 2026 GMT
        Subject: CN=6a84b5e1-cbd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d3:d2:f8:ce:d4:9e:f4:ac:c9:4e:ee:dd:94:
                    49:b1:40:61:39:e9:a0:97:c3:82:ae:4a:0f:2a:ce:
                    ed:b6:6e:63:62:77:03:81:33:e3:c6:4c:31:64:44:
                    8c:83:83:90:1d:f7:32:ea:04:4d:1d:b5:21:7c:9e:
                    aa:b6:ee:5e:15:9c:94:9a:63:c5:1b:01:b2:ca:9b:
                    df:4d:77:fa:c9:aa:f9:a2:d9:a7:6f:23:e0:81:fc:
                    b2:9e:6a:12:92:eb:cb:b4:3b:a4:3f:bc:18:97:99:
                    16:44:09:2c:28:08:fc:f8:71:e5:22:b7:50:76:97:
                    47:5f:71:ce:1e:9b:bc:56:a1:85:4f:19:b3:64:be:
                    02:86:b7:39:8d:0b:4a:12:9b:fc:a6:eb:85:79:6a:
                    fa:8f:05:f6:86:d1:55:7b:65:e0:ac:8a:98:f8:57:
                    37:fa:68:a4:f5:d8:50:e5:13:3a:91:7e:50:b4:85:
                    2b:0b:98:6b:5f:89:61:15:1f:38:13:8c:4f:a8:bd:
                    46:a7:85:fc:08:44:59:ad:08:c7:cb:ee:59:d0:90:
                    0b:fb:e5:2f:2b:e1:1f:aa:7b:ea:a8:37:d4:54:b3:
                    48:16:87:5e:ed:7f:60:62:d7:71:05:1b:17:7f:75:
                    b1:16:f1:84:8b:cd:ec:72:8f:25:75:cb:94:97:46:
                    80:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:5C:E9:0D:2D:9D:12:79:74:B9:38:98:E2:5C:F1:08:78:33:65:AE
            X509v3 Authority Key Identifier:
                keyid:CC:FB:A0:B3:99:39:30:EB:13:B7:A2:59:27:2A:A8:11:F8:74:4B:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPugs5k5MOsTt6JZJyqoEfh0SyM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:e5:5f:61:f2:ba:fe:d4:5f:af:cd:13:ce:06:a5:2e:6e:94:
         df:f3:19:b3:ab:d6:d4:88:24:0d:be:42:c7:47:33:81:16:da:
         ec:14:b9:ff:72:74:bd:32:ff:63:a0:d3:af:fa:07:46:6e:6a:
         7a:a7:a6:39:c3:63:00:91:0d:2f:36:ce:92:b8:42:e7:c5:88:
         e6:19:0f:f3:f7:8e:53:60:df:b4:6f:02:58:56:c4:a7:bc:8a:
         e8:c7:b8:1d:e5:9d:cc:6f:ab:91:0f:03:3d:7c:15:af:63:76:
         93:9c:74:29:15:39:4a:d5:59:cf:f9:10:da:bc:8e:7a:7c:a2:
         15:8c:86:8c:f8:c3:a6:31:61:72:86:12:ef:6c:a4:c1:c0:60:
         5b:b2:74:00:14:aa:8d:73:96:43:7a:cc:98:c4:91:39:18:ed:
         49:7e:28:d7:b0:f4:57:f9:ae:2b:7b:0d:2e:1f:8d:d1:07:f9:
         ae:97:9e:83:bc:29:af:55:63:1f:72:e0:83:b2:2d:6f:b1:76:
         09:06:b5:50:c6:ba:89:31:cf:42:5b:82:7f:28:f6:d4:2b:20:
         f0:70:a1:a4:73:4d:3c:3c:0b:9c:62:6e:f2:20:4b:11:70:48:
         6e:31:bd:b5:90:e1:05:44:ba:e4:b1:7e:07:c5:5e:85:76:ce:
         6c:ad:fa:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:47:00 2026 by rpki-client