Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919910B/623D1E066F8511EBAC5AC96CC4F9AE02/3JGEsEpTx6Fy980mJV612APjRwU.mft
File:                     3JGEsEpTx6Fy980mJV612APjRwU.mft (raw, json)
Hash identifier:          xYp2FXVrJxz0tKAsQc7MkOYHwZqkd++P1GNH//PrI30=
Subject key identifier:   3A:DA:BF:63:D7:45:03:83:B1:3E:53:CA:68:E7:B8:D0:13:77:92:E0
Authority key identifier: DC:91:84:B0:4A:53:C7:A1:72:F7:CD:26:25:5E:B5:D8:03:E3:47:05
Certificate issuer:       /CN=A919910B/serialNumber=DC9184B04A53C7A172F7CD26255EB5D803E34705
Certificate serial:       0794
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JGEsEpTx6Fy980mJV612APjRwU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919910B/623D1E066F8511EBAC5AC96CC4F9AE02/3JGEsEpTx6Fy980mJV612APjRwU.mft
Manifest number:          0786
Signing time:             Tue 18 Aug 2026 21:56:36 +0000
Manifest this update:     Tue 18 Aug 2026 21:56:35 +0000
Manifest next update:     Tue 25 Aug 2026 21:56:35 +0000
Files and hashes:         1: 3JGEsEpTx6Fy980mJV612APjRwU.crl (hash: GcWlXbhv3svfu6Ja08l2DAnIyJ5rWN7X385m9pwWZU8=)
                          2: BB199EBC6F8711EB9E412A2BC4F9AE02.roa (hash: WW2Q5pVhbj5jDvO5RjgY9SPQ1B4ZwOtUiB5icQfsm2w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919910B/623D1E066F8511EBAC5AC96CC4F9AE02/3JGEsEpTx6Fy980mJV612APjRwU.crl
                          rsync://rpki.apnic.net/member_repository/A919910B/623D1E066F8511EBAC5AC96CC4F9AE02/3JGEsEpTx6Fy980mJV612APjRwU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JGEsEpTx6Fy980mJV612APjRwU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 21:56:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1940 (0x794)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919910B, serialNumber=DC9184B04A53C7A172F7CD26255EB5D803E34705
        Validity
            Not Before: Aug 18 21:56:35 2026 GMT
            Not After : Aug 25 21:56:35 2026 GMT
        Subject: CN=6a84d514-fcad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:bd:38:17:cb:d5:d3:cc:26:de:63:6d:8b:ba:
                    ac:12:e4:55:ae:cb:53:7c:cb:77:87:80:db:97:31:
                    50:a7:30:dd:34:14:6d:07:a4:fd:ec:5b:fc:f8:4d:
                    98:02:29:92:42:3f:70:7c:1a:6d:d3:cf:fd:33:86:
                    c0:0c:54:3d:1d:7f:9b:a6:0d:7f:1d:7b:c2:5d:12:
                    2b:46:8e:64:c7:5a:62:45:c5:bf:af:b2:bb:e9:1e:
                    cf:e8:b7:97:ce:d1:2d:85:65:e3:64:f2:67:ef:d7:
                    d3:dd:69:d1:6f:67:de:4a:7e:2a:1e:8e:8a:34:6f:
                    19:ce:90:ec:45:d0:31:51:07:b8:6c:ac:fd:f3:62:
                    cc:30:a7:8a:0f:71:3a:04:d0:db:d9:13:78:55:1d:
                    55:1b:90:e7:dd:2e:20:38:7d:f2:da:d3:0d:7d:9e:
                    10:4b:25:4f:11:5f:9c:0c:f2:d3:64:c5:d8:7d:a5:
                    d2:4d:24:82:e2:ed:9e:a8:e8:8a:35:26:84:ab:6c:
                    e7:da:3e:36:d6:98:bd:18:e9:be:c6:c7:cc:80:bb:
                    3d:cc:55:24:53:ae:49:bc:5c:46:cf:9c:1c:7a:7c:
                    e4:dd:5b:7a:2f:3d:48:14:12:7f:26:7e:e0:25:87:
                    a3:24:65:f3:1b:71:dd:65:38:36:42:ad:e9:d2:16:
                    59:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:DA:BF:63:D7:45:03:83:B1:3E:53:CA:68:E7:B8:D0:13:77:92:E0
            X509v3 Authority Key Identifier:
                keyid:DC:91:84:B0:4A:53:C7:A1:72:F7:CD:26:25:5E:B5:D8:03:E3:47:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919910B/623D1E066F8511EBAC5AC96CC4F9AE02/3JGEsEpTx6Fy980mJV612APjRwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JGEsEpTx6Fy980mJV612APjRwU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919910B/623D1E066F8511EBAC5AC96CC4F9AE02/3JGEsEpTx6Fy980mJV612APjRwU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:74:c0:46:ba:61:c1:4c:65:77:f7:66:35:5a:cf:ad:74:4f:
         a9:9f:23:05:36:d8:37:a0:f4:c2:89:cd:4c:0b:de:a2:61:66:
         b1:38:da:4d:7c:0b:9e:d3:f8:31:5e:e9:d0:70:23:79:95:4b:
         f9:e9:a2:5c:ee:af:b8:99:41:b1:cc:8d:a9:14:f4:29:1a:38:
         79:57:0d:7e:e3:84:8f:9b:c2:34:a0:72:2b:d2:c4:cc:1b:ba:
         a1:42:e6:46:9e:dc:e5:b2:58:fc:c3:05:13:fb:24:7d:c4:c0:
         fa:e7:e7:f6:de:44:fc:b2:75:c8:ec:c1:db:03:d0:49:44:05:
         54:4d:92:06:cc:07:78:a9:9e:43:1d:13:10:46:cb:dc:df:d4:
         bd:50:5b:cf:b3:0c:b4:55:39:2b:c9:d4:ef:9c:8c:eb:6d:a7:
         86:84:bc:90:61:68:29:09:b3:be:22:a1:01:42:50:9a:1c:93:
         75:92:ac:51:e2:a4:5e:8c:01:0d:d9:6d:92:8c:0e:90:89:42:
         6b:48:f6:8c:42:7c:ec:b5:70:c9:5c:22:37:6d:96:ac:97:dd:
         34:8f:e2:86:71:4e:ba:2b:52:6b:a9:8b:46:fd:c5:90:67:3d:
         8d:f9:c9:15:8f:85:27:4b:7a:18:d7:d7:a6:c5:98:b6:d1:f9:
         7f:db:9d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:40:17 2026 by rpki-client