Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.mft
File:                     cRYXAC2fDJ62W07dYfehyR_NuD4.mft (raw, json)
Hash identifier:          zuyN6OrlGe1IUR+MmeLUlDcrQ+PTjKRsEng5fee34Qs=
Subject key identifier:   DA:57:65:9B:6E:D1:0C:3D:CD:B2:C3:66:10:60:E4:A0:6C:16:BE:B3
Authority key identifier: 71:16:17:00:2D:9F:0C:9E:B6:5B:4E:DD:61:F7:A1:C9:1F:CD:B8:3E
Certificate issuer:       /CN=A919C6E7/serialNumber=711617002D9F0C9EB65B4EDD61F7A1C91FCDB83E
Certificate serial:       0185
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRYXAC2fDJ62W07dYfehyR_NuD4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.mft
Manifest number:          017B
Signing time:             Wed 19 Aug 2026 05:18:11 +0000
Manifest this update:     Wed 19 Aug 2026 05:18:10 +0000
Manifest next update:     Wed 26 Aug 2026 05:18:10 +0000
Files and hashes:         1: cRYXAC2fDJ62W07dYfehyR_NuD4.crl (hash: NqOUqxiQavxX88NZnacmriF6Xr5TWMyKqYmsRAMqw9Q=)
                          2: D93EF164ABF311F0BBF66516C4F9AE02.roa (hash: VuA/EDxNN0tQRMyk9i3DgPoA/8Jh+78o9QnDk32xTks=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.crl
                          rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRYXAC2fDJ62W07dYfehyR_NuD4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 05:18:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 389 (0x185)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C6E7, serialNumber=711617002D9F0C9EB65B4EDD61F7A1C91FCDB83E
        Validity
            Not Before: Aug 19 05:18:10 2026 GMT
            Not After : Aug 26 05:18:10 2026 GMT
        Subject: CN=6a853c93-0423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ba:85:35:16:af:0c:ca:d2:99:88:50:0d:05:
                    bb:f8:a6:f3:43:64:8a:a6:99:d0:3f:a3:a7:22:07:
                    b6:b5:9f:51:29:71:2c:0e:f8:8a:f6:1c:7c:f9:23:
                    b0:b9:96:71:d1:ba:04:f7:05:55:b2:bc:3c:39:cd:
                    32:36:9f:85:ea:3d:a8:8b:53:fc:35:fb:da:86:d2:
                    42:52:d0:76:10:64:76:f9:35:a6:e6:d0:09:a8:bc:
                    ad:67:19:68:c1:94:37:8c:3a:df:14:fc:fd:fe:76:
                    ce:10:8c:c2:34:2d:14:22:67:73:04:ce:04:a2:92:
                    38:b3:f6:a8:b8:2d:1a:43:7e:f8:8e:7f:38:ff:f3:
                    b2:75:ea:3a:af:94:4b:64:c7:48:13:cc:24:04:08:
                    5e:30:76:ab:1e:80:45:77:8b:98:a5:f7:b1:9d:87:
                    2a:a7:2c:31:67:27:ae:ec:b4:d7:92:2c:6c:3e:fb:
                    b0:3f:3d:f6:92:24:ba:58:c3:6a:6a:c9:0f:a4:dc:
                    c6:1c:43:ab:22:13:4c:54:aa:c7:08:73:f1:cd:36:
                    27:de:2e:ea:e2:dd:f7:d1:9c:16:99:17:17:6f:bd:
                    de:6a:e5:99:b5:4b:5f:c1:13:ad:5b:fe:a7:f1:67:
                    a0:8a:39:67:69:94:c2:54:d5:d5:e2:48:ba:9b:68:
                    fc:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:57:65:9B:6E:D1:0C:3D:CD:B2:C3:66:10:60:E4:A0:6C:16:BE:B3
            X509v3 Authority Key Identifier:
                keyid:71:16:17:00:2D:9F:0C:9E:B6:5B:4E:DD:61:F7:A1:C9:1F:CD:B8:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRYXAC2fDJ62W07dYfehyR_NuD4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:ec:0e:81:ae:30:d8:53:6b:ad:61:e5:63:57:4b:92:aa:b8:
         2e:f9:84:b1:6d:3c:7c:dc:60:9c:5c:e9:70:2b:2f:ca:64:07:
         f8:33:00:51:33:59:b8:3b:6d:2b:3a:6a:d9:ef:ef:2f:16:55:
         6c:19:03:24:2d:7c:0a:99:a9:13:15:6c:90:97:66:ef:22:11:
         b6:89:06:9f:71:ac:6f:29:00:0f:58:77:d6:4c:cb:e2:fb:90:
         ff:d8:33:12:f2:da:03:e9:4a:1b:f5:91:aa:86:c2:8d:49:fd:
         07:31:7b:fb:15:80:d1:04:9d:f3:2d:7f:50:98:e5:a0:0d:3a:
         ba:e6:32:b7:14:f5:10:93:21:25:1e:3b:61:79:af:af:a8:cb:
         fa:f7:4c:35:f7:38:92:05:5e:e2:58:be:ec:2c:66:56:4f:bb:
         0b:7d:e6:06:b1:1c:bf:22:53:cf:77:38:0a:9e:31:8f:e0:10:
         65:8c:3b:59:d9:ff:e7:5c:9d:ca:1d:0e:f0:9d:66:c7:7e:e7:
         12:d7:54:c0:5f:ce:0b:0d:cd:f6:76:9f:fa:0a:e9:6f:e6:4b:
         35:9f:11:ce:8e:ca:cb:18:26:73:94:ee:84:46:7f:13:56:21:
         97:d4:96:a0:81:fb:2f:a6:7e:c8:a2:36:8f:bf:78:d8:53:55:
         f2:56:50:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:44:24 2026 by rpki-client