Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.mft
File:                     wTdkoKY6d2fzpHXXqBro3xiv4I0.mft (raw, json)
Hash identifier:          fKYv4/wGO5oZ//9YJACz5fwvQR6hqvmWKk/Qui6aFAk=
Subject key identifier:   AA:ED:93:3D:13:CE:C5:85:29:F5:08:C8:BC:C2:E5:04:81:94:35:03
Authority key identifier: C1:37:64:A0:A6:3A:77:67:F3:A4:75:D7:A8:1A:E8:DF:18:AF:E0:8D
Certificate issuer:       /CN=A919941E/serialNumber=C13764A0A63A7767F3A475D7A81AE8DF18AFE08D
Certificate serial:       02B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTdkoKY6d2fzpHXXqBro3xiv4I0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.mft
Manifest number:          02A8
Signing time:             Wed 19 Aug 2026 02:09:07 +0000
Manifest this update:     Wed 19 Aug 2026 02:09:06 +0000
Manifest next update:     Wed 26 Aug 2026 02:09:06 +0000
Files and hashes:         1: wTdkoKY6d2fzpHXXqBro3xiv4I0.crl (hash: wP72uob/H2ole6a5QYNe02vEE9VrO+0NMth3Oaw+DVc=)
                          2: 8A7D7EA2426B11F0B0160739C4F9AE02.roa (hash: y6sr7tbJEN2rlUZBa3aIr3fhInWoQ8HE4shLL1FfQsw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.crl
                          rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTdkoKY6d2fzpHXXqBro3xiv4I0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 02:09:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 692 (0x2b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919941E, serialNumber=C13764A0A63A7767F3A475D7A81AE8DF18AFE08D
        Validity
            Not Before: Aug 19 02:09:06 2026 GMT
            Not After : Aug 26 02:09:06 2026 GMT
        Subject: CN=6a851043-800e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:30:25:69:a8:26:c8:0f:5f:c0:c1:a7:59:8d:
                    fa:5a:f2:41:78:a8:d1:0c:a3:0e:e0:6e:0a:49:a6:
                    07:d8:d3:4b:e8:b7:c4:db:a5:ba:c6:51:5c:bd:86:
                    81:6c:ab:5c:07:e3:4c:43:11:1a:1b:4f:1e:32:58:
                    e6:4a:ef:e3:20:3d:d6:a2:0d:c0:74:8f:21:8f:30:
                    ad:31:8b:e2:7e:cc:5d:82:28:57:ba:23:79:ab:3d:
                    f9:c0:71:92:11:8a:26:7c:3b:ba:b0:2f:07:ad:2a:
                    f1:12:6d:58:16:e8:d8:8e:53:28:71:83:3c:d9:5f:
                    7e:b4:d0:cf:e5:19:0b:8d:06:25:85:21:c0:75:60:
                    c4:c6:97:25:6a:46:52:a7:4f:57:ea:b2:92:cb:77:
                    b5:e2:15:ec:9b:96:a8:52:ef:df:01:e7:99:59:59:
                    e5:46:7c:ad:ab:b0:dc:7a:c8:a7:ba:4e:f1:f1:59:
                    f7:20:81:f9:d6:7f:6f:0c:47:ad:dd:5c:ea:25:83:
                    3a:95:fa:96:48:31:85:f7:93:8e:86:64:65:93:03:
                    52:0e:b4:76:f4:3d:25:38:21:1f:12:ce:48:2f:46:
                    a5:99:81:7a:b5:e3:a1:88:e5:f9:45:4f:25:1f:8c:
                    6b:b5:45:fe:d1:ff:6e:f5:5e:f2:28:09:00:95:a2:
                    e1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:ED:93:3D:13:CE:C5:85:29:F5:08:C8:BC:C2:E5:04:81:94:35:03
            X509v3 Authority Key Identifier:
                keyid:C1:37:64:A0:A6:3A:77:67:F3:A4:75:D7:A8:1A:E8:DF:18:AF:E0:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTdkoKY6d2fzpHXXqBro3xiv4I0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:b6:4c:e8:7b:ce:c0:66:f1:35:3f:8c:e3:e7:ca:24:ab:a5:
         42:e7:52:33:e8:49:bd:a1:a9:59:fa:02:f0:1d:c7:91:28:e9:
         78:a9:c0:bc:51:fa:90:92:4e:0f:24:7c:68:e2:9a:f4:e9:10:
         aa:75:c5:bb:ec:05:c1:7e:7a:d2:f7:70:a4:3c:fe:5f:65:a0:
         6f:85:1f:78:97:94:e3:fd:dc:03:79:3b:8d:a0:65:4e:9c:71:
         c1:a0:b2:32:e7:94:f9:27:19:47:26:10:c1:a7:15:e9:1b:31:
         91:2e:2a:62:d7:ef:fa:61:23:a9:b6:8a:64:d3:19:c4:d3:91:
         7c:fe:06:5b:f0:9d:2f:7b:61:eb:79:17:70:c2:99:72:e8:25:
         0d:02:51:b3:5b:a3:33:dd:64:1a:5a:b9:bf:0b:67:c5:a3:0e:
         61:2c:5e:2f:68:c1:a3:0f:5d:11:fd:87:15:26:95:a3:c1:e6:
         84:21:90:e0:9e:44:2e:67:c3:27:6d:3d:32:6f:d8:be:c4:6f:
         56:37:e9:0d:e5:3a:cd:67:c5:83:31:6e:a2:74:4f:ad:f4:ed:
         66:84:e4:2e:8f:34:2b:96:d9:d2:02:1c:ba:28:71:be:e4:19:
         68:41:a2:4c:e9:0a:4c:87:2c:a7:e4:89:e0:71:05:2e:de:1b:
         8c:ea:91:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:50:58 2026 by rpki-client