Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft
File:                     SdD0BpcqgFseep_CD7OpzLdmKs4.mft (raw, json)
Hash identifier:          tiHu59TU4GdTEH6GASuObHZgfltWHuWN91Ofyy7yAcc=
Subject key identifier:   09:B8:74:ED:69:77:14:25:4B:6C:C1:53:95:3C:DB:F7:B5:68:2F:38
Authority key identifier: 49:D0:F4:06:97:2A:80:5B:1E:7A:9F:C2:0F:B3:A9:CC:B7:66:2A:CE
Certificate issuer:       /CN=A919D396/serialNumber=49D0F406972A805B1E7A9FC20FB3A9CCB7662ACE
Certificate serial:       0270
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SdD0BpcqgFseep_CD7OpzLdmKs4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft
Manifest number:          026A
Signing time:             Wed 19 Aug 2026 02:39:03 +0000
Manifest this update:     Wed 19 Aug 2026 02:39:03 +0000
Manifest next update:     Wed 26 Aug 2026 02:39:03 +0000
Files and hashes:         1: SdD0BpcqgFseep_CD7OpzLdmKs4.crl (hash: 2hcjtDGs/CkDwmCrFuDOCgm/uPamoYZCqMwljhkEEjU=)
                          2: 110CB61EEFA211ED87AD1F0BC4F9AE02.roa (hash: EfG+36SStR0WHTDyKSDlepdPiSlIwRWgDKeiF4FZPTY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.crl
                          rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SdD0BpcqgFseep_CD7OpzLdmKs4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 02:39:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 624 (0x270)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D396, serialNumber=49D0F406972A805B1E7A9FC20FB3A9CCB7662ACE
        Validity
            Not Before: Aug 19 02:39:03 2026 GMT
            Not After : Aug 26 02:39:03 2026 GMT
        Subject: CN=6a851747-a839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:39:a2:03:17:22:5c:9b:5e:2d:5f:26:23:a3:
                    40:ff:f9:54:95:84:9c:09:e7:f1:da:d2:26:be:e9:
                    7d:df:d1:b1:d5:cf:c5:67:88:62:fd:46:79:6f:38:
                    17:07:9a:49:21:0e:c0:37:df:61:d7:26:aa:76:c8:
                    cc:c8:53:96:6b:b8:3f:36:cc:6c:55:0d:6f:5d:22:
                    0c:0b:d9:1a:32:5c:2a:c3:3c:ac:4d:5a:c6:30:5e:
                    de:03:2e:18:c9:1b:b9:a1:1b:22:6c:2c:60:83:91:
                    95:5a:6c:8b:e3:20:28:b1:41:63:a6:b6:95:90:73:
                    81:a5:2b:c5:ec:63:db:29:8e:6c:ab:49:2a:a8:11:
                    76:8f:da:5c:6c:a2:15:15:ac:29:62:c7:8f:5c:f8:
                    b9:30:84:04:60:22:02:db:0a:b0:fe:4a:f1:f2:09:
                    0d:55:be:da:4f:c9:11:f5:05:4b:2f:b8:98:c4:68:
                    60:e1:66:87:75:cf:96:84:8b:f1:f1:73:9a:ed:aa:
                    4d:66:74:61:a5:b2:46:92:37:8e:28:93:30:23:3d:
                    23:24:5f:78:ea:2f:ea:43:98:02:69:c8:e1:88:5d:
                    9f:d6:99:e4:8e:e4:4a:e2:6e:d5:a2:27:fb:2c:a5:
                    a9:3c:a2:43:0f:a2:60:e4:2a:03:e9:62:f0:93:77:
                    df:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:B8:74:ED:69:77:14:25:4B:6C:C1:53:95:3C:DB:F7:B5:68:2F:38
            X509v3 Authority Key Identifier:
                keyid:49:D0:F4:06:97:2A:80:5B:1E:7A:9F:C2:0F:B3:A9:CC:B7:66:2A:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SdD0BpcqgFseep_CD7OpzLdmKs4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:0b:81:27:a1:46:57:c8:55:4d:b7:3e:c4:a4:6e:d2:46:aa:
         b4:ef:2c:50:97:2b:8b:f0:b5:cc:f7:4b:f8:74:36:9d:76:83:
         0c:8f:20:a1:a3:d3:8d:58:a5:07:92:15:96:96:98:8f:0c:43:
         54:b3:15:9a:e0:d6:4e:a4:c3:49:e2:84:a0:85:f8:7a:2b:96:
         b6:f5:dc:24:c1:ac:de:e2:23:02:d0:a2:b0:1f:67:4a:bd:f4:
         e6:61:f3:64:2e:b3:6c:1f:a2:1a:56:08:1d:94:0d:ca:85:c3:
         bf:33:cf:80:0c:bd:e7:18:81:1b:3f:13:2e:e1:14:1e:8d:85:
         0c:4c:c7:bb:7c:d3:51:76:2b:b3:3b:ee:81:7d:88:8b:92:53:
         59:9e:7e:ad:1c:52:82:8e:66:bf:2c:c8:b7:1b:fa:65:bd:f3:
         7c:05:8e:f8:76:04:79:a6:6c:e8:d9:01:01:f4:47:17:9b:24:
         cc:f7:65:92:f8:17:56:bf:de:08:17:6c:c3:b1:c7:bb:67:c9:
         8e:68:d0:77:8b:f0:c6:92:bb:6b:e1:a3:95:b7:16:e9:15:c4:
         14:96:c5:fc:c2:ed:cc:e9:02:4c:bb:3a:96:30:c5:8d:c3:bf:
         f1:6f:ba:c9:00:32:26:78:67:a5:e3:1e:98:59:fe:8f:be:d5:
         e6:08:05:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:43:51 2026 by rpki-client