Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft
File:                     vLFqiHOxvhMm61zbkLGGEV2nTWc.mft (raw, json)
Hash identifier:          H99glkJns12ygyfVhHSnvm5kHoqzVkPiJR/ROO+V/gA=
Subject key identifier:   AF:0F:E7:FD:CD:EA:B9:05:64:BE:24:BF:89:17:0D:70:0E:CC:38:52
Authority key identifier: BC:B1:6A:88:73:B1:BE:13:26:EB:5C:DB:90:B1:86:11:5D:A7:4D:67
Certificate issuer:       /CN=A9194715/serialNumber=BCB16A8873B1BE1326EB5CDB90B186115DA74D67
Certificate serial:       02DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLFqiHOxvhMm61zbkLGGEV2nTWc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft
Manifest number:          02D5
Signing time:             Wed 19 Aug 2026 01:37:27 +0000
Manifest this update:     Wed 19 Aug 2026 01:37:26 +0000
Manifest next update:     Wed 26 Aug 2026 01:37:26 +0000
Files and hashes:         1: vLFqiHOxvhMm61zbkLGGEV2nTWc.crl (hash: KuFg9GDH1P0y/bNvixrkqx/oQ4QIuwhV57DqeOSlt9o=)
                          2: A8A940C6429811EDBB392C35C4F9AE02.roa (hash: gD3cKaCeij6TV/lz5LfYhJg/3abihcMPlSP3fLdyyRc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.crl
                          rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLFqiHOxvhMm61zbkLGGEV2nTWc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 01:37:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 731 (0x2db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194715, serialNumber=BCB16A8873B1BE1326EB5CDB90B186115DA74D67
        Validity
            Not Before: Aug 19 01:37:26 2026 GMT
            Not After : Aug 26 01:37:26 2026 GMT
        Subject: CN=6a8508d6-45a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:e5:89:e1:f1:28:f9:93:c7:4f:5d:c9:7d:c5:
                    23:f7:ae:08:10:5c:b7:2e:a5:70:e3:2f:cd:5f:94:
                    b9:ed:ba:13:fd:05:44:ba:b1:71:5a:c3:8b:92:71:
                    e0:b4:e4:00:40:4e:45:22:3d:e4:5b:60:31:3f:46:
                    04:b6:75:a7:af:4a:33:4f:2b:db:07:d8:5c:14:9a:
                    3c:60:76:91:6c:f1:c4:fd:2c:c3:90:13:dd:0d:df:
                    90:a5:cd:e1:7b:a3:07:3b:3d:9f:0d:5e:c4:cc:c1:
                    22:65:0a:60:11:cc:86:4e:51:97:3e:ac:67:1d:d4:
                    08:10:bf:18:a3:6d:d9:70:69:a4:c0:e0:56:d1:06:
                    4c:0f:8a:ae:48:e0:7e:2d:d1:4a:eb:da:a6:25:09:
                    79:bd:d4:de:cf:1a:b7:ed:03:a7:08:2c:99:ee:b4:
                    1d:08:bf:3f:f8:dc:89:2c:5c:50:b0:9e:53:c6:d5:
                    8e:ce:75:5c:fb:47:09:f6:ae:12:73:ba:93:d1:33:
                    51:bb:c2:c1:0b:f7:2b:e4:b2:2c:88:5a:42:17:99:
                    49:e9:b2:57:17:8f:54:7c:07:c5:8e:9a:bf:9d:23:
                    3a:01:a0:17:79:57:c7:c4:64:ee:9d:d1:95:23:e7:
                    1a:64:d0:93:e9:51:f8:cc:28:c8:d5:36:a3:10:55:
                    de:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:0F:E7:FD:CD:EA:B9:05:64:BE:24:BF:89:17:0D:70:0E:CC:38:52
            X509v3 Authority Key Identifier:
                keyid:BC:B1:6A:88:73:B1:BE:13:26:EB:5C:DB:90:B1:86:11:5D:A7:4D:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLFqiHOxvhMm61zbkLGGEV2nTWc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:73:79:2c:91:9b:7d:7d:f3:40:ad:29:ac:35:74:48:84:9d:
         38:a3:85:56:0a:16:5c:0f:97:92:4e:dc:b7:90:44:85:ad:7a:
         8d:0f:ee:54:9f:25:d6:08:14:19:ab:48:ef:f2:14:45:32:e0:
         b2:2a:56:31:d8:b8:05:29:b6:18:87:c8:09:9e:8b:65:4b:d8:
         fb:e0:67:a0:17:09:3e:f1:ca:0f:ba:c1:34:ae:06:d8:b7:ce:
         bf:5a:17:72:e2:65:fc:51:00:b7:9a:5b:2a:73:27:bf:b9:f5:
         9d:f7:9a:01:83:19:c3:fc:15:a7:db:b9:eb:ba:3a:d8:fb:27:
         5b:be:1f:42:9f:1c:3c:02:4c:ed:17:61:fc:35:45:9c:7c:3e:
         1b:e3:86:0f:6f:aa:0b:d5:f5:4c:14:04:76:e9:08:47:13:9d:
         b2:46:86:81:40:3f:9f:81:4d:db:b6:2e:e1:ca:b1:e9:bd:e2:
         71:e9:5e:9e:fa:39:4e:3c:0f:21:5c:04:22:34:d1:3d:e7:90:
         17:53:1d:61:de:c1:af:19:6f:6a:76:af:c7:ef:9e:a8:cd:da:
         75:7c:f8:88:a7:11:44:fe:47:04:e6:4e:4d:bb:c0:a1:eb:a2:
         92:4c:b3:f6:23:98:8a:3c:7f:bd:a2:dd:fd:74:27:43:97:44:
         52:87:56:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:31:50 2026 by rpki-client