Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft
File:                     Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft (raw, json)
Hash identifier:          OQveDKExFLPQ8YmyjqMrLMxO9V6edEnQdSzmrtp81RQ=
Subject key identifier:   7C:76:B9:15:AB:27:4D:62:D1:B0:4F:D4:70:29:70:29:2B:ED:48:B9
Authority key identifier: 49:DB:61:FF:03:C5:51:67:95:CF:78:50:9E:A3:7A:06:0F:45:47:BF
Certificate issuer:       /CN=A91947C4/serialNumber=49DB61FF03C5516795CF78509EA37A060F4547BF
Certificate serial:       0223
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sdth_wPFUWeVz3hQnqN6Bg9FR78.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft
Manifest number:          021E
Signing time:             Wed 19 Aug 2026 03:26:22 +0000
Manifest this update:     Wed 19 Aug 2026 03:26:21 +0000
Manifest next update:     Wed 26 Aug 2026 03:26:21 +0000
Files and hashes:         1: Sdth_wPFUWeVz3hQnqN6Bg9FR78.crl (hash: 3gHzngIfIl7OmVshuy2QYP5pTBhPRmQbxArNup/PnsY=)
                          2: 08181C0C646D11EE82448758C4F9AE02.roa (hash: XpOJLqrrUhEc7ebQkkMofYS8+Tg7b9rkq4W6zmxVycM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.crl
                          rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sdth_wPFUWeVz3hQnqN6Bg9FR78.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 03:26:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 547 (0x223)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91947C4, serialNumber=49DB61FF03C5516795CF78509EA37A060F4547BF
        Validity
            Not Before: Aug 19 03:26:21 2026 GMT
            Not After : Aug 26 03:26:21 2026 GMT
        Subject: CN=6a85225e-23a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:68:88:11:c7:f6:06:4e:55:8b:d3:96:20:bd:
                    3a:67:fe:4d:f7:b6:30:17:ad:ae:2a:bc:8d:86:76:
                    5f:19:82:9b:f7:15:8e:39:37:db:63:26:e9:90:9a:
                    8f:38:fa:bc:1c:26:aa:1d:9c:27:b2:5e:80:ee:7d:
                    e8:07:66:a5:cd:22:a9:74:4c:0e:4c:3b:2f:d3:58:
                    33:d1:1b:e6:42:b2:f1:4e:8f:17:b8:1a:28:b9:da:
                    30:cf:62:68:d1:e9:f6:64:17:7c:17:27:9d:e5:01:
                    26:19:2f:33:11:2e:d5:70:14:cf:b3:fc:0b:6f:61:
                    07:e3:09:79:03:a1:fa:97:ae:54:b5:d4:be:ab:1c:
                    9b:0a:e3:a6:53:ea:bf:39:bc:fc:45:fd:ce:cc:23:
                    0a:94:e0:b8:d9:88:2f:a6:f9:45:7d:df:68:d7:55:
                    9d:8d:cc:fb:a6:b8:89:0f:05:36:4e:8f:1b:68:5d:
                    1b:3d:ad:1d:27:fd:66:b5:71:10:23:be:d9:9e:4f:
                    35:fe:27:e8:3f:f0:e4:d5:fc:5f:d8:e2:ee:e6:48:
                    68:8f:02:ff:ee:79:c8:bf:b8:17:67:23:22:c0:c0:
                    75:b2:81:ed:93:90:86:03:90:c4:bd:3e:b6:e1:a9:
                    9a:d5:91:30:44:a6:87:f6:18:ff:a7:81:e9:dc:24:
                    ef:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:76:B9:15:AB:27:4D:62:D1:B0:4F:D4:70:29:70:29:2B:ED:48:B9
            X509v3 Authority Key Identifier:
                keyid:49:DB:61:FF:03:C5:51:67:95:CF:78:50:9E:A3:7A:06:0F:45:47:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sdth_wPFUWeVz3hQnqN6Bg9FR78.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:a4:a8:44:d3:f9:89:39:ea:7c:30:3b:71:bf:02:67:95:ce:
         ae:ad:83:ad:4e:05:6b:19:8b:13:7f:e1:cf:59:8b:56:3c:a5:
         f5:18:1b:1b:13:7c:c5:a8:ea:20:64:2b:cb:7d:b3:67:11:ac:
         77:fc:96:c6:57:ed:9b:2b:37:99:aa:36:9d:b7:52:26:bc:b1:
         8e:9b:67:bd:97:31:2d:5a:13:cb:cc:2c:af:fd:40:91:dd:53:
         48:7b:da:c3:17:5b:41:72:60:e0:30:30:ae:3b:8f:05:42:9d:
         3a:59:4d:b9:8e:77:f9:4b:8f:bd:c5:e7:e2:1c:82:40:7a:16:
         f8:84:29:bb:90:a5:f0:34:63:78:85:13:89:c7:b7:00:01:e6:
         56:61:d9:63:ad:87:bd:23:ef:2b:8b:93:9a:80:91:7e:0b:fc:
         b5:5b:dd:cd:a5:14:76:aa:88:6e:47:aa:8a:5c:21:47:a1:e8:
         03:90:03:49:ff:fa:67:cb:e4:fd:13:6d:37:ec:b9:9d:1f:fa:
         cc:5c:1d:b6:c8:3a:d6:16:e0:e4:14:2d:a5:0c:4d:6b:ce:3f:
         61:de:60:1d:cf:12:fa:da:14:a6:9d:af:a5:06:e5:49:82:98:
         b1:d3:cb:44:f9:1d:2c:71:9b:70:b5:aa:de:f1:af:9a:01:5e:
         36:1a:64:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:54:37 2026 by rpki-client