Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.mft
File:                     PbshszWLCF8IIbTcBqkanEXELLw.mft (raw, json)
Hash identifier:          WHz43cJQLFE5CUSdEHWzq8NlcH/19LkFO83D0Q0M5d8=
Subject key identifier:   26:B9:02:E5:12:D9:B5:D2:62:B4:E1:C0:89:61:69:D9:F2:7E:7E:82
Authority key identifier: 3D:BB:21:B3:35:8B:08:5F:08:21:B4:DC:06:A9:1A:9C:45:C4:2C:BC
Certificate issuer:       /CN=A9199B5E/serialNumber=3DBB21B3358B085F0821B4DC06A91A9C45C42CBC
Certificate serial:       0270
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbshszWLCF8IIbTcBqkanEXELLw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.mft
Manifest number:          026A
Signing time:             Wed 19 Aug 2026 02:36:51 +0000
Manifest this update:     Wed 19 Aug 2026 02:36:50 +0000
Manifest next update:     Wed 26 Aug 2026 02:36:50 +0000
Files and hashes:         1: PbshszWLCF8IIbTcBqkanEXELLw.crl (hash: KCzHRcur9/veR6d4huOyX3hMK+/D9GvA9Q7r6hCBQV4=)
                          2: 0FFD0884E94C11EDB883CD14C4F9AE02.roa (hash: GRfiEr9OW2Ontk4PlK6wpEk+JDayOUZ5GJhS4LRNf8E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.crl
                          rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbshszWLCF8IIbTcBqkanEXELLw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 02:36:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 624 (0x270)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199B5E, serialNumber=3DBB21B3358B085F0821B4DC06A91A9C45C42CBC
        Validity
            Not Before: Aug 19 02:36:50 2026 GMT
            Not After : Aug 26 02:36:50 2026 GMT
        Subject: CN=6a8516c3-436c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:90:a0:e4:96:89:54:aa:43:a8:52:57:54:37:
                    44:d0:02:d1:61:e9:bb:32:8b:d6:a3:c7:e3:b2:f6:
                    ab:0a:78:b3:27:88:72:8e:f8:98:6c:5d:03:33:e9:
                    86:2d:c3:de:6d:aa:56:cf:81:08:aa:6e:f5:f1:97:
                    96:99:18:97:36:8f:bb:05:c5:4f:0e:5b:a1:69:82:
                    47:fd:81:e1:b4:1c:df:27:83:15:a3:3a:ad:4a:7f:
                    df:67:08:6e:9b:46:81:51:d8:7f:5a:59:59:e3:fa:
                    17:25:4a:73:ea:3a:cd:62:e5:00:3b:9f:91:68:cd:
                    8c:db:78:a0:8b:f1:9e:a9:c8:a0:c6:4b:f5:31:9a:
                    6e:32:d3:e5:7c:ab:a2:da:ae:2e:03:0a:a0:1a:ef:
                    77:4b:bf:99:c1:45:45:6d:c0:95:05:90:3d:80:42:
                    58:17:ca:5e:ce:e5:b9:52:62:a2:54:88:05:9a:e4:
                    b2:8a:b3:59:d1:f6:a1:c5:c5:4f:7d:df:de:27:1c:
                    65:8f:72:7b:15:4c:1b:25:42:d5:a7:d9:c2:e5:23:
                    a2:9e:33:c6:01:30:3e:ab:84:e7:99:10:d8:e8:c5:
                    78:91:86:61:62:b5:ed:08:32:e7:80:1c:33:a9:f2:
                    ce:8b:fd:9d:ba:60:9b:f6:bf:79:eb:e3:68:a2:6a:
                    14:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:B9:02:E5:12:D9:B5:D2:62:B4:E1:C0:89:61:69:D9:F2:7E:7E:82
            X509v3 Authority Key Identifier:
                keyid:3D:BB:21:B3:35:8B:08:5F:08:21:B4:DC:06:A9:1A:9C:45:C4:2C:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbshszWLCF8IIbTcBqkanEXELLw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:4b:1b:f0:04:71:a6:6b:94:1e:50:d2:e6:05:26:62:9b:48:
         55:f7:3c:9f:62:4c:90:6d:2e:81:6d:fe:7c:a9:62:8b:71:04:
         31:b5:90:27:ef:22:f4:c4:11:20:0e:91:1e:f7:a1:13:40:4d:
         ad:b0:d0:8b:4e:72:5b:93:4f:d9:35:99:21:fa:9a:2d:06:21:
         5e:cb:32:84:29:d5:ec:da:53:f9:cf:b4:4e:c9:81:89:74:35:
         9d:02:87:6e:05:33:e2:66:8c:f1:1f:6c:7b:53:72:ef:e8:ee:
         80:da:c9:a2:f0:08:88:d5:5f:1f:72:3d:aa:f9:10:b7:52:ea:
         a3:6b:8d:d8:91:3a:3d:cd:a4:47:7d:8b:70:a3:3f:f8:76:67:
         ef:85:77:64:5c:72:f7:9c:62:88:29:92:d0:25:91:6f:59:9d:
         c2:b0:39:94:f3:ad:aa:32:3d:72:e2:63:62:00:df:62:1f:97:
         69:80:ac:88:c0:d1:02:81:8d:dc:94:65:72:9f:88:d7:32:38:
         d4:22:8f:59:83:6b:8f:0a:71:90:ef:e0:05:4a:97:c2:a8:ac:
         46:99:80:3a:1a:cc:d9:63:0a:f2:fd:23:e3:23:6f:9f:82:80:
         84:9e:dc:d9:55:1a:60:82:3f:be:a4:5e:f2:e0:2c:d6:a1:a8:
         e3:29:2f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:47:20 2026 by rpki-client