Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft
File:                     P1VrwCUQM7zlcvxsirdgrMSXBZM.mft (raw, json)
Hash identifier:          EBXlBqQyWDwCgcDnlTuvg8w2qGLqH72eM5MA3CX81Wo=
Subject key identifier:   64:B2:1D:EE:51:13:C0:47:8D:35:D7:C7:6D:38:5A:90:89:18:CB:DD
Authority key identifier: 3F:55:6B:C0:25:10:33:BC:E5:72:FC:6C:8A:B7:60:AC:C4:97:05:93
Certificate issuer:       /CN=A919CF42/serialNumber=3F556BC0251033BCE572FC6C8AB760ACC4970593
Certificate serial:       1620
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft
Manifest number:          15FF
Signing time:             Tue 18 Aug 2026 16:53:30 +0000
Manifest this update:     Tue 18 Aug 2026 16:53:29 +0000
Manifest next update:     Tue 25 Aug 2026 16:53:29 +0000
Files and hashes:         1: P1VrwCUQM7zlcvxsirdgrMSXBZM.crl (hash: qAslK+QfD9zdtwhX5g3Q62ZwMIPKi4zcHwxykjVneB0=)
                          2: 9FA735ECEAF811ED9E2D1958C4F9AE02.roa (hash: GS7Hz+JO/tFd7f6jkV506RLU0L8tY/ifzdZjJQhwPzk=)
                          3: F148BE6E511611EE85A7E634C4F9AE02.roa (hash: GqZMFA0L7ACjbBy6EEKhCEh6yrXjeUh2/sYjzUSadNQ=)
                          4: 65C8C388EAFB11ED9F4DC557C4F9AE02.roa (hash: 49JEiOnck3YIqSnh0w+N5FmwAfU3DdS+vbKJpG7LI7Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.crl
                          rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 16:53:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5664 (0x1620)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919CF42, serialNumber=3F556BC0251033BCE572FC6C8AB760ACC4970593
        Validity
            Not Before: Aug 18 16:53:29 2026 GMT
            Not After : Aug 25 16:53:29 2026 GMT
        Subject: CN=6a848e09-161d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2c:8c:f5:a0:50:67:2e:4e:a2:05:a2:cf:c0:
                    ab:90:94:0a:47:ed:26:6a:0f:69:4a:45:07:dc:4e:
                    c9:71:15:7a:4c:23:5f:35:ee:d4:0c:fd:e4:1d:68:
                    f3:7e:63:85:0c:55:e1:1f:df:7f:b4:03:3b:c0:fa:
                    e5:c6:8e:d5:a2:d0:27:ef:05:0f:c3:8b:4c:e4:0d:
                    91:d9:b7:b6:ca:d4:84:f8:61:57:f1:42:4e:ec:a1:
                    fa:f1:fc:69:ee:81:6c:4d:fe:2b:d2:6c:37:18:4c:
                    42:6e:c3:d4:3e:03:e5:df:9d:8e:c9:1b:3f:5f:28:
                    a2:3a:0b:89:af:fe:60:20:5a:3a:cc:d0:f8:fc:c4:
                    68:ce:f6:4d:53:c8:c2:81:84:9b:c9:89:82:28:90:
                    77:1a:8c:91:bd:1f:de:ad:a7:fe:f6:99:16:b2:36:
                    de:c2:cf:31:a3:7c:cc:29:39:36:69:75:33:98:de:
                    5e:70:3b:36:2b:f7:f9:40:28:09:54:33:b3:04:b7:
                    86:7c:88:a8:50:8f:22:40:e9:36:8e:1d:7e:d0:8e:
                    73:38:59:dd:4c:a7:70:b1:7c:ce:ae:d2:f7:8d:44:
                    7f:4d:df:59:5c:c9:39:05:ae:44:e3:7a:99:fb:03:
                    45:7e:89:c2:e4:df:d5:52:46:8b:88:04:60:0f:a7:
                    24:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:B2:1D:EE:51:13:C0:47:8D:35:D7:C7:6D:38:5A:90:89:18:CB:DD
            X509v3 Authority Key Identifier:
                keyid:3F:55:6B:C0:25:10:33:BC:E5:72:FC:6C:8A:B7:60:AC:C4:97:05:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:11:af:b0:98:a6:c0:20:f3:fa:e9:8f:cf:fe:dd:0e:fc:8e:
         5b:ff:ba:c0:0b:a9:e2:63:73:48:2c:98:3c:4d:36:93:7b:65:
         27:43:49:b2:58:33:db:26:02:43:a3:52:2a:f6:88:02:63:e4:
         15:fc:cb:09:47:2d:62:d4:aa:46:83:67:71:db:6f:2b:f7:ac:
         21:03:14:67:c0:8d:d7:43:49:2d:a5:1b:46:e5:de:99:c4:7e:
         4f:c2:05:97:1f:16:de:1e:cc:e6:3a:6a:9b:44:82:cd:2a:f7:
         d6:d9:91:cc:35:f2:4a:07:77:77:57:e2:d4:24:db:04:1b:30:
         0b:31:c2:bf:1c:77:d2:56:0c:4e:cd:a2:3c:23:89:c2:00:1d:
         cc:26:e7:da:0a:17:7a:1a:dd:25:a6:99:7b:8e:9d:e8:00:88:
         55:65:2e:4c:cd:54:4d:73:ee:97:ff:82:ea:6b:44:aa:9f:5f:
         40:34:eb:75:87:05:70:ca:2c:b9:bd:eb:a3:f1:05:3a:92:e6:
         27:90:10:92:b0:f4:ab:6b:e1:7f:44:cc:9e:92:b7:1e:19:9d:
         b8:da:f8:9e:c9:45:ef:08:15:6f:46:00:64:18:60:34:f7:f4:
         e7:6b:b3:1b:5d:7f:36:69:a6:33:55:44:38:10:d5:a9:1e:c3:
         bd:12:7f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:15:09 2026 by rpki-client