Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft
File:                     CC8e6S_qY3P9odWuxG4vLYrorIc.mft (raw, json)
Hash identifier:          zhKc8KwEwCcYRCMvWhRVQT8LybpFb6E3jA0UxuiP46I=
Subject key identifier:   D9:DE:5C:EC:AE:E5:53:C8:0F:BB:ED:4C:FD:86:08:0C:65:34:5B:6F
Authority key identifier: 08:2F:1E:E9:2F:EA:63:73:FD:A1:D5:AE:C4:6E:2F:2D:8A:E8:AC:87
Certificate issuer:       /CN=A919F0DA/serialNumber=082F1EE92FEA6373FDA1D5AEC46E2F2D8AE8AC87
Certificate serial:       08E6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft
Manifest number:          61E2
Signing time:             Fri 04 Sep 2026 14:15:21 +0000
Manifest this update:     Fri 04 Sep 2026 14:15:20 +0000
Manifest next update:     Fri 11 Sep 2026 14:15:20 +0000
Files and hashes:         1: CC8e6S_qY3P9odWuxG4vLYrorIc.crl (hash: yaQRWDW6nBDrEw/p0CD3fjKCjYXT/ze3rOn0YKFILNE=)
                          2: 813E372A946711F081C10711C4F9AE02.roa (hash: +aXUNX9qlvBiYmtIZkuO8Q0af6FFXfqW610bes/6qYI=)
                          3: D64176D81B9911ECAB0E1678C4F9AE02.roa (hash: NApQDfsxt7jjKOoha5lUsKRVPKureaiiyrSOLJMc2s4=)
                          4: 8272E36003BD11EBB416B77DC4F9AE02.roa (hash: YDV7BZcSxL/GS299L5qq5wTtV0pYOQjm37aNEWD8Hpo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.crl
                          rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 14:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2278 (0x8e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F0DA, serialNumber=082F1EE92FEA6373FDA1D5AEC46E2F2D8AE8AC87
        Validity
            Not Before: Sep  4 14:15:20 2026 GMT
            Not After : Sep 11 14:15:20 2026 GMT
        Subject: CN=6a9ad279-c647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f1:98:ad:7c:46:03:6d:1a:63:c5:81:03:d3:
                    ae:0f:be:ca:c5:55:79:a1:62:6b:d5:c1:9e:49:fa:
                    35:fb:3e:de:18:7c:2f:37:76:85:11:5f:26:3c:d3:
                    51:2f:27:cd:a1:3b:a7:8c:af:e0:a0:23:1b:20:95:
                    7a:60:9d:80:05:b2:b0:62:51:d6:26:45:d5:87:72:
                    d9:86:84:23:95:ec:7c:1d:20:ad:1d:0b:a3:73:18:
                    95:6a:3f:d5:34:79:c8:1a:06:a1:f9:62:c9:8a:31:
                    51:59:5c:8b:f8:ac:b5:2f:48:6e:50:53:48:f3:e9:
                    95:3e:5e:e3:c3:f9:71:f7:29:72:cc:4d:fb:83:fc:
                    83:00:81:57:bc:bf:c1:fe:cd:23:2a:f3:1b:5a:e2:
                    4e:19:e6:1e:8f:f5:ab:b6:96:d3:4d:d5:93:d5:89:
                    c6:a9:e0:5f:4b:39:67:06:e8:13:c3:1b:ab:87:8a:
                    4c:b2:c9:f6:a7:6b:f8:95:17:a5:d4:11:bf:11:30:
                    7c:0e:62:55:a2:d6:5f:fd:cf:79:d9:ce:06:46:63:
                    53:51:9e:af:72:5f:9b:24:95:eb:a0:8f:df:9a:66:
                    57:75:20:40:4b:a2:b3:df:cf:c7:dd:c1:0e:cc:88:
                    bb:89:2a:83:0b:8b:2a:07:c2:e6:70:95:52:e1:d0:
                    fd:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:DE:5C:EC:AE:E5:53:C8:0F:BB:ED:4C:FD:86:08:0C:65:34:5B:6F
            X509v3 Authority Key Identifier:
                keyid:08:2F:1E:E9:2F:EA:63:73:FD:A1:D5:AE:C4:6E:2F:2D:8A:E8:AC:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:c0:71:0e:f3:9c:d1:81:5f:4f:84:30:83:21:6b:66:13:da:
         28:eb:9f:66:a9:92:11:8d:39:35:b5:e8:3d:9e:63:58:27:49:
         9a:78:52:14:f2:3b:b3:97:61:42:ba:4b:df:39:5c:36:c1:a9:
         d7:3a:27:47:cd:37:70:5b:40:64:8d:97:74:33:3b:ab:1a:32:
         03:2e:36:2b:46:a2:87:9f:c0:ce:a7:e6:f2:35:92:9f:3e:40:
         d6:ad:18:68:56:4c:b5:41:5b:52:bb:94:a5:cb:16:c5:a7:fa:
         04:d1:db:b9:e1:0b:a7:9d:e5:88:8d:3b:cb:80:84:09:78:86:
         b1:79:b7:6e:34:f4:7c:ba:16:41:54:03:dd:61:c5:76:ff:c4:
         82:20:7e:2f:69:19:c2:a2:a0:87:5b:f3:c7:c1:8f:99:bd:4c:
         5d:c6:34:78:4b:b1:30:4c:78:65:77:fe:07:9a:ce:17:33:8b:
         60:cb:ab:b5:32:ca:e6:1a:d7:a7:f5:a6:25:98:66:d8:be:c9:
         39:d1:a7:12:d8:4d:cb:d9:c5:dc:8b:3a:d3:b4:be:d9:d2:be:
         24:15:93:23:22:5d:d3:10:95:a9:bf:ed:55:35:33:45:7a:a2:
         cf:30:40:78:04:fb:d6:a7:28:a4:11:c4:67:0c:4f:55:b6:39:
         ec:09:3f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:51:27 2026 by rpki-client