Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.mft
File:                     bZYGiLbecUGnIYmOngc-FneP7zU.mft (raw, json)
Hash identifier:          Toq5EzBOpsOeGf1JGmUHYLOfvaFFD3ehm4ce9HJ1Hzw=
Subject key identifier:   45:E1:0B:4A:E3:37:A5:B2:42:87:83:B0:15:C1:BE:FB:07:28:90:A4
Authority key identifier: 6D:96:06:88:B6:DE:71:41:A7:21:89:8E:9E:07:3E:16:77:8F:EF:35
Certificate issuer:       /CN=A9197A8F/serialNumber=6D960688B6DE7141A721898E9E073E16778FEF35
Certificate serial:       022C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZYGiLbecUGnIYmOngc-FneP7zU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.mft
Manifest number:          0225
Signing time:             Wed 19 Aug 2026 03:21:46 +0000
Manifest this update:     Wed 19 Aug 2026 03:21:46 +0000
Manifest next update:     Wed 26 Aug 2026 03:21:46 +0000
Files and hashes:         1: bZYGiLbecUGnIYmOngc-FneP7zU.crl (hash: Cc7gYPi38jWQqJtfB1zd85M/nko5s4WTgpmZ6kaEx/I=)
                          2: A663285A59DE11EE85CFCB12C4F9AE02.roa (hash: XXVUjsyhZNJjR2zCirDCP6YTvzsx5dU96ixceZ4TvBU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.crl
                          rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZYGiLbecUGnIYmOngc-FneP7zU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 03:21:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 556 (0x22c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197A8F, serialNumber=6D960688B6DE7141A721898E9E073E16778FEF35
        Validity
            Not Before: Aug 19 03:21:46 2026 GMT
            Not After : Aug 26 03:21:46 2026 GMT
        Subject: CN=6a85214a-c0c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d0:cc:35:2a:e4:fc:2f:d3:bb:71:b2:c8:2d:
                    d8:10:e2:a6:a1:c5:d2:d2:dd:99:d8:d3:a6:29:99:
                    d4:8e:04:7a:a8:f3:e6:c7:d8:46:91:ed:1c:15:6b:
                    d7:ad:c5:96:c7:ac:52:13:84:35:b9:1b:60:6b:7e:
                    fe:84:82:73:f8:b8:6a:28:c6:e9:3e:7c:5f:e6:63:
                    0b:15:df:68:8c:17:f9:54:11:40:e3:a4:64:eb:c5:
                    fc:53:3d:02:2e:28:5c:ab:03:1a:b1:7b:b1:7d:d5:
                    44:c5:9b:6a:1d:c7:64:55:8d:6f:39:ff:34:5e:63:
                    0d:21:a3:93:d0:a0:0c:ec:66:22:d1:02:d4:a4:1e:
                    49:e8:88:74:6a:e4:d0:78:d1:c0:1f:c7:0b:6b:b5:
                    34:0f:05:d6:8f:85:10:ad:f7:72:48:93:85:68:26:
                    75:26:55:83:f0:31:a0:b2:66:a3:fa:ba:21:d6:7c:
                    4c:57:64:a1:83:b1:3f:7f:3a:85:5f:de:bd:2e:27:
                    d8:1c:47:0c:2c:ac:6e:8c:87:9c:0a:33:45:91:c5:
                    9b:62:2e:cc:96:b0:94:3b:9e:6d:3c:cc:40:46:45:
                    13:2a:12:09:e8:1b:fb:43:2a:4e:d2:52:b5:c4:17:
                    63:f0:5c:23:5b:d6:36:21:0d:64:36:76:75:a2:d9:
                    cd:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:E1:0B:4A:E3:37:A5:B2:42:87:83:B0:15:C1:BE:FB:07:28:90:A4
            X509v3 Authority Key Identifier:
                keyid:6D:96:06:88:B6:DE:71:41:A7:21:89:8E:9E:07:3E:16:77:8F:EF:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZYGiLbecUGnIYmOngc-FneP7zU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:67:85:7c:53:8e:2d:80:2e:61:9d:e1:f6:a0:19:43:90:ac:
         a6:c0:6c:20:50:d1:58:17:8e:e2:cf:d8:66:bb:fb:3a:2a:bc:
         ef:3a:cb:a5:4d:e5:7e:38:ed:18:24:ee:c2:11:f3:d3:58:21:
         4f:fa:40:63:7c:23:64:cc:b0:0a:5f:30:4b:38:de:0b:a4:ae:
         98:12:c8:08:3b:92:c7:f1:11:86:29:f7:e5:88:34:c6:52:23:
         31:52:70:db:95:3f:f4:06:95:42:39:88:e5:7e:11:a9:3c:3c:
         33:df:02:e6:da:41:a1:b2:ea:1e:8c:11:4e:f1:ae:7c:5f:0d:
         60:36:a2:fc:d0:a8:1b:02:b8:f3:d6:58:b6:a8:85:e0:60:d8:
         ed:0f:e9:68:e5:a0:e8:40:db:27:a4:46:58:6c:e4:f4:39:16:
         88:15:71:7d:b2:d8:01:3a:7f:1c:a0:1b:f7:0b:31:cc:56:44:
         01:e4:14:12:3b:e8:9f:1a:c0:63:44:7e:8d:06:a3:08:8f:1a:
         2c:f2:24:21:f4:26:f9:36:7a:31:03:5e:4e:5f:66:5a:c8:67:
         fa:2a:83:fd:20:1f:7b:5e:89:03:3b:b1:4f:78:2b:86:9c:dc:
         14:54:3e:3e:65:11:80:35:74:ea:72:a5:85:8a:e3:d4:37:d1:
         93:8c:7b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:27:56 2026 by rpki-client