Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919762A/4C8CE1C0944911F08B0DC109C4F9AE02/i0WgWBIZndhsv8hCI_2BqzMGJrk.mft
File:                     i0WgWBIZndhsv8hCI_2BqzMGJrk.mft (raw, json)
Hash identifier:          lQ3yPdpSJnbtc3/pYKC6Flj5p20wiejQC11CCThjZdc=
Subject key identifier:   CA:23:70:2F:C7:4E:51:99:A7:D0:BC:28:55:95:49:95:BF:6A:ED:06
Authority key identifier: 8B:45:A0:58:12:19:9D:D8:6C:BF:C8:42:23:FD:81:AB:33:06:26:B9
Certificate issuer:       /CN=A919762A/serialNumber=8B45A05812199DD86CBFC84223FD81AB330626B9
Certificate serial:       B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0WgWBIZndhsv8hCI_2BqzMGJrk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919762A/4C8CE1C0944911F08B0DC109C4F9AE02/i0WgWBIZndhsv8hCI_2BqzMGJrk.mft
Manifest number:          AD
Signing time:             Wed 19 Aug 2026 07:48:11 +0000
Manifest this update:     Wed 19 Aug 2026 07:48:11 +0000
Manifest next update:     Wed 26 Aug 2026 07:48:11 +0000
Files and hashes:         1: i0WgWBIZndhsv8hCI_2BqzMGJrk.crl (hash: 5yuT42Zud5xkq4R+4vi2AtDwwUoTB6s4rxxvvi4lr/o=)
                          2: 9724DB52944911F0BBB4490AC4F9AE02.roa (hash: lrnY90MK4IZ1+v8LT/IR8+iuZQ3iOAKAABMyKp5uRJo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919762A/4C8CE1C0944911F08B0DC109C4F9AE02/i0WgWBIZndhsv8hCI_2BqzMGJrk.crl
                          rsync://rpki.apnic.net/member_repository/A919762A/4C8CE1C0944911F08B0DC109C4F9AE02/i0WgWBIZndhsv8hCI_2BqzMGJrk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0WgWBIZndhsv8hCI_2BqzMGJrk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 07:48:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177 (0xb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919762A, serialNumber=8B45A05812199DD86CBFC84223FD81AB330626B9
        Validity
            Not Before: Aug 19 07:48:11 2026 GMT
            Not After : Aug 26 07:48:11 2026 GMT
        Subject: CN=6a855fbb-36fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e5:42:6b:9c:5d:78:dd:e6:ef:e4:23:c4:bb:
                    c1:e6:a3:33:2b:d7:db:c2:43:2f:a6:3b:ca:f9:bb:
                    43:7f:67:3a:9d:f4:94:14:a3:9c:16:0d:51:55:1d:
                    e8:b4:65:b1:78:89:01:0a:bd:c4:6d:74:ed:7d:8c:
                    26:61:31:ea:ec:26:27:94:b7:a1:a6:6e:77:84:17:
                    2b:f5:d4:c3:68:d7:33:70:df:1d:85:7b:2d:d0:1f:
                    ce:38:8e:b2:1f:08:2e:a4:4f:78:cf:17:f6:12:6f:
                    fa:49:d3:74:62:50:6d:0b:0e:1d:b1:5d:c5:35:58:
                    b9:a1:2e:ca:f9:0d:84:8a:b0:5d:d4:fd:a1:56:42:
                    68:e6:a0:27:61:a0:d4:c8:d3:6c:3b:a7:84:18:bc:
                    9d:b6:6a:2c:06:11:9f:ff:4f:43:02:20:9e:0c:3c:
                    f0:0a:8b:ce:0f:e8:72:32:68:65:b8:42:0f:42:d4:
                    12:49:81:56:24:44:7d:75:69:5e:a1:c3:c6:bd:e7:
                    a7:d4:5a:99:7c:fe:5c:43:19:70:56:23:6f:57:5e:
                    3e:02:1b:73:50:c1:fb:6e:41:f9:ac:5d:90:ed:a7:
                    27:72:c8:a6:31:32:a7:bf:20:25:0a:53:4e:a3:03:
                    15:20:81:2f:01:9c:61:ea:e0:12:57:5e:34:86:fc:
                    80:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:23:70:2F:C7:4E:51:99:A7:D0:BC:28:55:95:49:95:BF:6A:ED:06
            X509v3 Authority Key Identifier:
                keyid:8B:45:A0:58:12:19:9D:D8:6C:BF:C8:42:23:FD:81:AB:33:06:26:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919762A/4C8CE1C0944911F08B0DC109C4F9AE02/i0WgWBIZndhsv8hCI_2BqzMGJrk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0WgWBIZndhsv8hCI_2BqzMGJrk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919762A/4C8CE1C0944911F08B0DC109C4F9AE02/i0WgWBIZndhsv8hCI_2BqzMGJrk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:c4:79:5f:6f:06:16:fb:eb:7c:e5:34:f9:47:2c:a9:e2:f2:
         d8:74:b4:43:af:1f:49:11:8e:c2:31:91:85:fa:92:1c:13:34:
         55:8d:a0:fd:c4:9a:bc:fc:24:4f:04:f3:80:42:cf:5d:17:f9:
         a7:5f:53:85:3c:9f:cc:aa:55:bc:9d:61:7a:12:cd:63:00:29:
         2a:8d:be:d1:6a:ba:4e:45:9e:91:ee:4f:d4:21:74:b8:c4:84:
         ee:69:da:a5:6e:8d:dc:e4:d2:2c:3f:23:83:c9:9e:1a:7c:9c:
         2e:be:58:e9:7f:63:e9:99:f2:54:17:95:25:52:ab:d4:4f:71:
         8a:5d:81:48:fa:01:e9:58:d1:ea:f2:a9:f5:18:5e:7d:90:91:
         ca:f8:3b:c3:da:1c:e0:69:17:a8:4e:90:12:93:42:97:7a:09:
         fb:45:33:55:80:7e:f0:64:b6:49:6f:bc:96:ab:3a:41:80:51:
         c7:84:bd:c4:7d:a7:d4:0a:17:b8:52:0d:ef:6c:b0:f5:d6:d7:
         b8:7f:fb:34:05:fd:4e:02:45:e3:c3:cf:2c:07:26:56:d7:57:
         a5:84:b7:a1:15:73:80:50:a9:32:38:ea:dc:a0:c0:67:8c:03:
         39:28:82:26:54:89:94:74:f1:70:8b:ca:56:3b:1c:8f:d3:a3:
         00:8a:91:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:29 2026 by rpki-client