Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D109/DAC666C05CE011EEB6C1B513C4F9AE02/Pq60tRb3A-pY8W4I2opmdwP7XK4.mft
File:                     Pq60tRb3A-pY8W4I2opmdwP7XK4.mft (raw, json)
Hash identifier:          qN6OJm34PpSGE5099Og09PVb2ASAzfjah/BkhEihtI0=
Subject key identifier:   C5:96:96:03:8F:FC:2D:A5:15:7D:96:E3:E3:90:B6:61:66:E4:23:19
Authority key identifier: 3E:AE:B4:B5:16:F7:03:EA:58:F1:6E:08:DA:8A:66:77:03:FB:5C:AE
Certificate issuer:       /CN=A919D109/serialNumber=3EAEB4B516F703EA58F16E08DA8A667703FB5CAE
Certificate serial:       0232
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pq60tRb3A-pY8W4I2opmdwP7XK4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D109/DAC666C05CE011EEB6C1B513C4F9AE02/Pq60tRb3A-pY8W4I2opmdwP7XK4.mft
Manifest number:          0227
Signing time:             Wed 19 Aug 2026 03:23:39 +0000
Manifest this update:     Wed 19 Aug 2026 03:23:39 +0000
Manifest next update:     Wed 26 Aug 2026 03:23:39 +0000
Files and hashes:         1: Pq60tRb3A-pY8W4I2opmdwP7XK4.crl (hash: U90dZpkW9n0jnbigbsnWSSF3SNp89TQJGyolKhkgF+Y=)
                          2: B67DC27A60E311EEB04BEA49C4F9AE02.roa (hash: Ammp8qF05nah6v/McxV23VKxzM9VW/7aLFZmanvDnyE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D109/DAC666C05CE011EEB6C1B513C4F9AE02/Pq60tRb3A-pY8W4I2opmdwP7XK4.crl
                          rsync://rpki.apnic.net/member_repository/A919D109/DAC666C05CE011EEB6C1B513C4F9AE02/Pq60tRb3A-pY8W4I2opmdwP7XK4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pq60tRb3A-pY8W4I2opmdwP7XK4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 03:23:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 562 (0x232)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D109, serialNumber=3EAEB4B516F703EA58F16E08DA8A667703FB5CAE
        Validity
            Not Before: Aug 19 03:23:39 2026 GMT
            Not After : Aug 26 03:23:39 2026 GMT
        Subject: CN=6a8521bb-03f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ec:78:1a:9d:41:e5:da:ef:60:f9:f8:18:71:
                    b4:b8:0b:66:93:a6:99:57:16:27:af:07:86:41:04:
                    10:f1:22:a0:08:a8:79:0f:e8:a2:4b:79:ed:79:8c:
                    20:ec:5c:1a:0b:56:c5:fb:9a:bb:9a:4c:e2:58:f4:
                    bd:b9:49:24:fe:f1:1d:e4:13:02:ac:4b:3e:43:c1:
                    0d:bd:29:10:7a:ae:60:01:d2:8c:4c:6b:cd:9f:38:
                    e2:c5:65:34:6c:26:79:79:17:a6:bf:db:3a:c7:90:
                    aa:26:c9:4b:7c:5c:4c:ec:c6:40:1e:a4:04:54:55:
                    90:35:f6:5a:bf:65:f3:3b:39:28:30:ab:5b:33:ed:
                    af:1e:26:51:96:af:4c:d7:8d:a8:a9:35:4f:2c:c8:
                    f7:6d:aa:a8:a3:18:2d:c2:74:90:e3:db:89:1a:7d:
                    00:74:45:89:02:59:29:cc:53:97:e3:e7:3b:a2:24:
                    cb:d7:0a:cc:e3:83:59:d2:72:a5:0f:57:d2:0a:28:
                    d8:75:f3:58:ef:4f:a5:c5:85:90:69:e3:1e:f7:a4:
                    ad:cd:c7:42:91:a6:8e:49:52:d9:fc:a6:dc:d6:02:
                    f5:ab:2b:90:9e:00:1e:85:af:9d:37:38:08:0f:2a:
                    e9:43:c7:af:7e:0f:9b:9e:1d:ff:44:bd:99:1b:5b:
                    78:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:96:96:03:8F:FC:2D:A5:15:7D:96:E3:E3:90:B6:61:66:E4:23:19
            X509v3 Authority Key Identifier:
                keyid:3E:AE:B4:B5:16:F7:03:EA:58:F1:6E:08:DA:8A:66:77:03:FB:5C:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D109/DAC666C05CE011EEB6C1B513C4F9AE02/Pq60tRb3A-pY8W4I2opmdwP7XK4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pq60tRb3A-pY8W4I2opmdwP7XK4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D109/DAC666C05CE011EEB6C1B513C4F9AE02/Pq60tRb3A-pY8W4I2opmdwP7XK4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:89:4b:3f:e4:90:16:6d:e8:30:cc:e7:c0:22:f3:47:94:a4:
         1e:5a:72:1c:66:3d:29:d7:42:ff:1b:1d:de:c7:f9:0f:2b:09:
         9c:24:b0:8b:8b:37:9f:68:33:99:73:a6:df:5e:89:30:b7:a4:
         f3:8a:57:16:c7:2b:0e:a4:79:e4:fa:fc:dd:dc:c2:21:16:f9:
         ec:47:82:b1:40:74:4c:56:17:fd:36:2f:ba:54:8f:82:cb:c5:
         fc:06:5b:b4:bf:59:34:6a:89:8a:6e:3d:45:f3:e0:47:0a:45:
         59:00:7a:09:0a:43:91:d9:c1:32:98:b3:44:55:4f:8c:bd:78:
         82:82:a9:d4:07:93:56:23:3b:94:21:88:7a:a1:90:9b:98:67:
         5d:4a:aa:9f:af:c5:61:d2:c4:78:80:6e:2d:53:08:b9:a0:25:
         f0:63:47:51:90:82:3f:09:83:ea:74:33:e0:4f:a4:0a:8b:c8:
         13:83:ad:82:a6:ec:24:55:5a:48:e0:35:6a:63:a2:82:7d:0a:
         63:db:c5:26:81:c1:f7:9d:05:d9:e8:8d:73:65:c1:09:70:ca:
         b7:06:a1:a4:24:ac:8f:6a:3a:44:92:d3:a8:04:b8:eb:5a:9a:
         75:51:79:4f:2e:70:10:38:92:a6:29:cf:27:ba:24:76:85:44:
         48:2c:da:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:59 2026 by rpki-client