Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.mft
File:                     72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.mft (raw, json)
Hash identifier:          1ZJOhKlLQ1KBUzGFDWptd0KCpBzc1DP7mFiL17yB84g=
Subject key identifier:   D0:D5:84:38:03:6C:72:B4:CE:52:E0:C2:E9:B6:C6:F4:41:84:A6:97
Authority key identifier: EF:6C:19:4B:B2:89:4D:33:E6:DE:06:42:23:2D:94:CE:4E:9E:F1:94
Certificate issuer:       /CN=A919FEA1/serialNumber=EF6C194BB2894D33E6DE0642232D94CE4E9EF194
Certificate serial:       0F3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.mft
Manifest number:          0F33
Signing time:             Tue 18 Aug 2026 17:46:22 +0000
Manifest this update:     Tue 18 Aug 2026 17:46:22 +0000
Manifest next update:     Tue 25 Aug 2026 17:46:22 +0000
Files and hashes:         1: 72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.crl (hash: 3HERBHhH/kEkjEfldquY4WAsjmdXLnajuMTiHbaQdlA=)
                          2: 0DFAD3529E1611E98059B049C4F9AE02.roa (hash: 6jkA83GPmT1sTdP9/+4bkkPNn9zJBgan8JssNW53vPg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.crl
                          rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 17:46:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3902 (0xf3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FEA1, serialNumber=EF6C194BB2894D33E6DE0642232D94CE4E9EF194
        Validity
            Not Before: Aug 18 17:46:22 2026 GMT
            Not After : Aug 25 17:46:22 2026 GMT
        Subject: CN=6a849a6e-289e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f1:f8:17:5d:eb:0c:aa:78:ec:16:ee:81:2a:
                    1f:b8:b1:c3:a1:46:46:57:43:50:69:3a:2f:05:c7:
                    c7:b2:93:77:04:00:18:19:e9:1d:a3:10:c7:ed:16:
                    88:cb:74:c1:43:06:7d:e1:8a:2b:7b:75:00:16:16:
                    cb:7f:a2:ce:e3:6e:7a:1a:d9:27:7e:bd:c1:da:a6:
                    4b:5e:e2:39:5e:d1:a1:d2:04:35:f1:23:ba:ef:fe:
                    a5:38:d2:17:5a:e4:bd:81:e9:d6:78:cd:d7:88:5f:
                    a1:ac:b6:76:bc:89:65:71:94:46:c0:13:43:c6:58:
                    d4:77:45:9f:51:2d:5f:c6:f6:22:66:11:38:5f:f2:
                    87:0b:14:59:e7:a1:01:8b:71:fa:0b:4b:98:fe:72:
                    4b:15:ff:12:e3:e7:fb:a1:6b:6d:6a:d5:6b:69:15:
                    9f:9d:19:52:1b:53:e2:4a:26:ea:05:a6:31:92:46:
                    d5:f9:72:f7:a2:45:b1:c0:5b:3b:a4:92:25:ce:e6:
                    32:5c:ab:31:00:bf:1a:d8:52:99:78:81:a7:72:66:
                    30:bc:d2:ee:92:68:db:a7:15:4e:33:d9:b6:f9:71:
                    87:64:8c:7c:8b:98:42:4d:00:7b:25:bf:55:e1:16:
                    76:1a:31:09:bd:29:2c:f3:e9:10:a3:3a:65:e4:02:
                    bb:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:D5:84:38:03:6C:72:B4:CE:52:E0:C2:E9:B6:C6:F4:41:84:A6:97
            X509v3 Authority Key Identifier:
                keyid:EF:6C:19:4B:B2:89:4D:33:E6:DE:06:42:23:2D:94:CE:4E:9E:F1:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:af:86:87:07:e0:d0:1d:3a:d8:f6:7e:61:ad:05:d7:b1:c1:
         2e:da:e6:49:cc:c1:0e:fd:eb:60:2e:d8:c1:c1:19:c8:45:15:
         0c:33:25:aa:df:4b:08:d6:0b:8c:86:e1:df:57:7f:e6:86:32:
         6f:90:4a:e2:20:c3:29:65:ca:39:ea:ff:a5:ab:22:91:40:15:
         ac:4f:e0:36:c0:96:f8:10:7b:69:d7:70:84:83:6f:06:b1:90:
         9e:25:4f:32:ff:87:91:ed:ec:80:8c:8b:92:4a:a3:3a:c8:ed:
         b2:72:e4:24:2c:18:f4:fe:56:6c:d4:04:6d:bc:a0:f2:6f:92:
         c4:2f:73:c5:74:6b:54:42:1e:90:88:18:de:9b:bb:61:30:26:
         d2:80:95:0e:38:ca:33:49:50:45:8a:c4:81:4b:a2:11:e8:5f:
         7b:b1:a1:b2:22:6f:1d:59:38:4f:cf:61:ce:7d:34:55:18:7a:
         c0:a8:27:6d:38:9c:13:d2:d0:66:52:b4:4c:04:37:76:63:cf:
         45:dc:51:6b:2d:cd:cb:ec:29:d3:45:72:ad:4f:a4:8a:5a:ac:
         71:8b:06:a9:8f:27:60:3b:42:d4:bc:94:73:43:04:dc:db:ae:
         83:1f:66:d0:ca:ca:bf:53:27:9e:2f:01:d9:ef:31:5b:b2:9b:
         03:6c:5c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:40:08 2026 by rpki-client