Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.mft
File:                     jPQjmA_Tp_Z-xfSlQ6IDpT485nY.mft (raw, json)
Hash identifier:          xzbhwHc0Pm5ZXsjtvYVogLu0Ine+23FWEN321pEFXJg=
Subject key identifier:   83:6E:47:AE:D9:F6:39:BF:92:1A:D5:8E:68:15:FC:00:A1:A1:28:8D
Authority key identifier: 8C:F4:23:98:0F:D3:A7:F6:7E:C5:F4:A5:43:A2:03:A5:3E:3C:E6:76
Certificate issuer:       /CN=A919DD2D/serialNumber=8CF423980FD3A7F67EC5F4A543A203A53E3CE676
Certificate serial:       12E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.mft
Manifest number:          12DA
Signing time:             Tue 18 Aug 2026 17:13:49 +0000
Manifest this update:     Tue 18 Aug 2026 17:13:48 +0000
Manifest next update:     Tue 25 Aug 2026 17:13:48 +0000
Files and hashes:         1: jPQjmA_Tp_Z-xfSlQ6IDpT485nY.crl (hash: bX+EdrbdDZpothv7HysP4jal/RH98saLyZlQQAOuf1g=)
                          2: A295F860E71011E8899C3917C4F9AE02.roa (hash: 0mtH92tidj+S9C8pEF1gtwl/Ps40TYHu37CLwgbwKxc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.crl
                          rsync://rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 17:13:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4838 (0x12e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DD2D, serialNumber=8CF423980FD3A7F67EC5F4A543A203A53E3CE676
        Validity
            Not Before: Aug 18 17:13:48 2026 GMT
            Not After : Aug 25 17:13:48 2026 GMT
        Subject: CN=6a8492cd-e668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:53:c1:c7:aa:82:d6:8c:2a:79:23:6a:03:0f:
                    7d:12:c1:e9:97:d8:79:b1:2f:1f:c7:42:37:fa:7a:
                    46:08:73:83:49:41:72:c3:8c:bf:e2:30:b2:71:9c:
                    3e:3c:79:68:92:d8:af:83:9c:96:8b:a5:7a:ed:6c:
                    55:e7:69:c3:36:03:73:67:31:95:0c:ea:71:e5:51:
                    fe:21:d6:6c:65:af:e1:c5:b4:51:61:5d:2d:a0:a7:
                    84:22:45:12:a6:b3:63:1e:be:c2:18:fc:a9:42:96:
                    d7:86:c7:41:6d:22:68:49:93:38:e6:6b:df:a2:c8:
                    f1:7a:77:eb:dd:fa:7d:dc:69:67:c4:5c:73:b7:8a:
                    0b:67:89:f8:14:25:6b:3f:cd:e6:ab:ee:dd:7f:bc:
                    06:49:80:18:08:46:af:d1:97:6c:6f:d2:33:1c:59:
                    54:f2:d3:4f:7e:7e:98:17:9d:f7:bd:15:47:a6:d2:
                    b4:a5:5e:6b:67:f3:97:04:17:ab:5a:d2:52:95:09:
                    d3:4a:57:c6:7f:3f:db:44:cc:84:9a:ec:0a:2c:11:
                    79:f3:e5:98:a4:58:9d:8d:03:cb:d0:c5:c0:0e:77:
                    b5:8f:87:0d:65:25:01:ff:9a:3b:2f:31:d5:c4:66:
                    99:f4:ec:72:98:11:f6:6b:55:19:c4:7f:cc:92:88:
                    62:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:6E:47:AE:D9:F6:39:BF:92:1A:D5:8E:68:15:FC:00:A1:A1:28:8D
            X509v3 Authority Key Identifier:
                keyid:8C:F4:23:98:0F:D3:A7:F6:7E:C5:F4:A5:43:A2:03:A5:3E:3C:E6:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:df:f2:e9:47:18:25:ec:80:4a:05:b8:9e:cf:87:22:2c:65:
         25:20:b0:1d:3e:75:36:65:17:18:a8:98:5b:74:de:5b:d5:00:
         c2:20:29:7f:63:de:cb:3c:69:ba:d1:19:a1:12:1e:46:d9:fa:
         ec:66:fc:a5:23:dc:0d:00:92:2f:7b:f3:32:14:78:4a:bf:64:
         6c:4e:90:38:a6:a4:ec:65:da:a4:eb:81:1d:57:fa:66:75:69:
         5c:16:eb:24:f7:40:ba:2e:a4:93:ae:8c:87:75:f2:94:5d:48:
         ad:92:67:5e:e7:10:62:80:a2:37:c6:58:d3:31:d1:27:7b:c0:
         99:60:90:c5:9b:a0:94:13:4e:28:17:5c:c4:89:f7:b5:c1:2e:
         9c:e3:fa:ff:4f:b2:17:ea:2b:4d:4a:87:a7:f5:7d:bf:d0:f2:
         63:dd:6e:81:95:cb:f8:4b:13:fe:d5:2d:b7:07:1f:83:76:f0:
         0e:b6:9b:fd:91:dc:a3:47:81:db:86:3e:66:37:86:0a:7f:73:
         bc:ff:06:9e:f3:ed:b0:f8:8f:55:7a:f3:64:9e:64:9e:b3:4e:
         3c:8c:9a:a3:ee:5f:61:08:6b:0e:97:71:4b:b3:fc:4c:60:80:
         b0:3e:2d:6b:99:76:21:3f:a3:b7:2d:7c:86:ef:41:f5:56:4d:
         31:ce:bb:4f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEuYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUREMkQxMTAvBgNVBAUTKDhDRjQyMzk4MEZEM0E3RjY3RUM1RjRBNTQzQTIwM0E1
M0UzQ0U2NzYwHhcNMjYwODE4MTcxMzQ4WhcNMjYwODI1MTcxMzQ4WjAYMRYwFAYD
VQQDEw02YTg0OTJjZC1lNjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0FPBx6qC1owqeSNqAw99EsHpl9h5sS8fx0I3+npGCHODSUFyw4y/4jCycZw+
PHloktivg5yWi6V67WxV52nDNgNzZzGVDOpx5VH+IdZsZa/hxbRRYV0toKeEIkUS
prNjHr7CGPypQpbXhsdBbSJoSZM45mvfosjxenfr3fp93GlnxFxzt4oLZ4n4FCVr
P83mq+7df7wGSYAYCEav0Zdsb9IzHFlU8tNPfn6YF533vRVHptK0pV5rZ/OXBBer
WtJSlQnTSlfGfz/bRMyEmuwKLBF58+WYpFidjQPL0MXADne1j4cNZSUB/5o7LzHV
xGaZ9OxymBH2a1UZxH/MkohiQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFINuR67Z
9jm/khrVjmgV/AChoSiNMB8GA1UdIwQYMBaAFIz0I5gP06f2fsX0pUOiA6U+POZ2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REQyRC85RDEyNjk1Q0U3
MEUxMUU4OUE5NjNEMTFDNEY5QUUwMi9qUFFqbUFfVHBfWi14ZlNsUTZJRHBUNDg1
blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pQUWptQV9UcF9aLXhmU2xRNklEcFQ0ODVuWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
REQyRC85RDEyNjk1Q0U3MEUxMUU4OUE5NjNEMTFDNEY5QUUwMi9qUFFqbUFfVHBf
Wi14ZlNsUTZJRHBUNDg1blkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADt/y6UcYJeyASgW4ns+HIixlJSCwHT51NmUXGKiYW3TeW9UAwiApf2Peyzxp
utEZoRIeRtn67Gb8pSPcDQCSL3vzMhR4Sr9kbE6QOKak7GXapOuBHVf6ZnVpXBbr
JPdAui6kk66Mh3XylF1IrZJnXucQYoCiN8ZY0zHRJ3vAmWCQxZuglBNOKBdcxIn3
tcEunOP6/0+yF+orTUqHp/V9v9DyY91ugZXL+EsT/tUttwcfg3bwDrab/ZHco0eB
24Y+ZjeGCn9zvP8GnvPtsPiPVXrzZJ5knrNOPIyao+5fYQhrDpdxS7P8TGCAsD4t
a5l2IT+jty18hu9B9VZNMc67Tw==
-----END CERTIFICATE-----
Generated at Wed Aug 19 16:48:19 2026 by rpki-client