Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.mft
File:                     jWEfLNc3lK-AHBv2nYhICROAtKU.mft (raw, json)
Hash identifier:          At1f3HLJ6bN5sLsFhG0XcZAE9YX6JhWIAT+KXQc2yNY=
Subject key identifier:   0A:1E:AC:B7:97:F9:D1:CB:8F:78:43:4C:55:A5:6C:9B:74:30:86:A0
Authority key identifier: 8D:61:1F:2C:D7:37:94:AF:80:1C:1B:F6:9D:88:48:09:13:80:B4:A5
Certificate issuer:       /CN=A919FF19/serialNumber=8D611F2CD73794AF801C1BF69D8848091380B4A5
Certificate serial:       0150
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWEfLNc3lK-AHBv2nYhICROAtKU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.mft
Manifest number:          0146
Signing time:             Wed 19 Aug 2026 06:10:45 +0000
Manifest this update:     Wed 19 Aug 2026 06:10:44 +0000
Manifest next update:     Wed 26 Aug 2026 06:10:44 +0000
Files and hashes:         1: jWEfLNc3lK-AHBv2nYhICROAtKU.crl (hash: c5jjUBcamQQXa4iDVGwSOLEPOkunX7QA1QP2hNd96fg=)
                          2: 5090FDECFF2E11F099E36B6D89EE528E.roa (hash: tFmVyxLPe9LweX5qcVeiaMmpxSpLasD23mQMkZdFpoI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.crl
                          rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWEfLNc3lK-AHBv2nYhICROAtKU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 06:10:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 336 (0x150)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FF19, serialNumber=8D611F2CD73794AF801C1BF69D8848091380B4A5
        Validity
            Not Before: Aug 19 06:10:44 2026 GMT
            Not After : Aug 26 06:10:44 2026 GMT
        Subject: CN=6a8548e5-6ca0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:48:3c:2c:26:a5:a4:1b:f2:29:ec:60:3a:bc:
                    58:68:e9:af:a5:fb:43:76:d5:f3:bc:1b:dc:8f:d0:
                    f8:fb:44:ca:c7:be:59:97:20:fa:f6:78:77:94:53:
                    39:09:3b:95:c3:a8:14:ca:ba:28:ed:6d:ec:08:f3:
                    46:9e:71:5c:90:ed:ea:ad:de:23:5b:2d:d0:b5:b6:
                    6a:f3:f7:6c:c0:cc:e0:03:04:06:83:0d:94:3b:63:
                    69:79:0c:ee:eb:7b:18:85:01:4d:e5:b2:df:35:74:
                    84:8f:3d:25:60:a1:fa:b4:f1:34:82:26:46:74:9d:
                    4b:5f:3d:28:1a:52:45:73:5e:8d:8a:9a:fa:8a:47:
                    b4:13:99:d5:00:38:30:ab:99:9e:6a:a8:5c:04:a5:
                    9a:6a:20:10:e8:6e:b4:60:16:12:c7:70:4e:5e:d1:
                    de:1b:19:7d:e2:26:88:3f:7e:fe:1f:ff:d6:6a:14:
                    e2:fd:93:1f:7e:3a:4a:0d:b5:21:73:eb:a6:a9:fa:
                    26:ef:dd:d9:3b:2c:49:2f:64:9b:08:5b:cf:4e:1c:
                    13:2e:d3:ec:dd:b8:60:d5:98:6b:ec:f0:08:78:b9:
                    f6:9a:d1:10:81:60:b2:83:f6:15:65:0d:49:cb:4e:
                    ad:e5:81:aa:30:90:75:47:35:9d:a4:4f:5c:42:b0:
                    d9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:1E:AC:B7:97:F9:D1:CB:8F:78:43:4C:55:A5:6C:9B:74:30:86:A0
            X509v3 Authority Key Identifier:
                keyid:8D:61:1F:2C:D7:37:94:AF:80:1C:1B:F6:9D:88:48:09:13:80:B4:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWEfLNc3lK-AHBv2nYhICROAtKU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:0e:68:da:e3:60:b4:e9:12:17:78:35:01:30:03:40:11:51:
         96:a0:96:02:7c:80:c3:2f:e5:8b:f6:c4:b4:56:a4:7b:ba:ce:
         ea:bf:4c:53:be:a5:2e:0b:03:ca:03:5b:79:ae:50:19:1f:37:
         81:cb:31:7d:36:70:a9:eb:92:7d:28:e9:f0:e8:9a:4b:9d:73:
         93:4e:24:ea:b0:ff:e8:24:e1:52:67:37:68:25:1a:de:9d:01:
         93:14:01:25:e9:ae:91:c2:8b:79:48:10:39:88:08:50:98:74:
         9a:3e:51:af:38:fd:c6:2a:85:9e:14:5d:06:82:33:64:8f:84:
         de:88:08:e4:aa:75:ff:63:50:5c:33:ff:bb:da:d2:8d:4f:9d:
         b1:70:a6:73:78:d8:90:b1:1a:4f:b3:65:05:cc:c3:58:59:7e:
         7d:a4:e8:14:5d:98:11:4f:b6:aa:3f:4e:49:74:cc:12:69:e6:
         b2:c3:cd:09:fe:d5:31:81:98:2d:d9:43:41:ef:73:a7:90:17:
         8a:fd:80:76:d5:eb:cd:49:74:2a:ab:08:5c:f9:38:dd:f4:50:
         a2:e2:64:fb:4e:92:d8:9f:8f:73:66:f2:a2:ee:0d:c5:a1:06:
         13:c1:6b:37:cc:a6:a2:c5:b2:95:86:9c:6d:ff:47:eb:e7:14:
         dc:bd:87:10
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUZGMTkxMTAvBgNVBAUTKDhENjExRjJDRDczNzk0QUY4MDFDMUJGNjlEODg0ODA5
MTM4MEI0QTUwHhcNMjYwODE5MDYxMDQ0WhcNMjYwODI2MDYxMDQ0WjAYMRYwFAYD
VQQDEw02YTg1NDhlNS02Y2EwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmkg8LCalpBvyKexgOrxYaOmvpftDdtXzvBvcj9D4+0TKx75ZlyD69nh3lFM5
CTuVw6gUyroo7W3sCPNGnnFckO3qrd4jWy3QtbZq8/dswMzgAwQGgw2UO2NpeQzu
63sYhQFN5bLfNXSEjz0lYKH6tPE0giZGdJ1LXz0oGlJFc16Nipr6ike0E5nVADgw
q5meaqhcBKWaaiAQ6G60YBYSx3BOXtHeGxl94iaIP37+H//WahTi/ZMffjpKDbUh
c+umqfom793ZOyxJL2SbCFvPThwTLtPs3bhg1Zhr7PAIeLn2mtEQgWCyg/YVZQ1J
y06t5YGqMJB1RzWdpE9cQrDZTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAoerLeX
+dHLj3hDTFWlbJt0MIagMB8GA1UdIwQYMBaAFI1hHyzXN5SvgBwb9p2ISAkTgLSl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RkYxOS9EMjNDQjBCQUMx
QUYxMUVGQkU3QTE0NURDNEY5QUUwMi9qV0VmTE5jM2xLLUFIQnYyblloSUNST0F0
S1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pXRWZMTmMzbEstQUhCdjJuWWhJQ1JPQXRLVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RkYxOS9EMjNDQjBCQUMxQUYxMUVGQkU3QTE0NURDNEY5QUUwMi9qV0VmTE5jM2xL
LUFIQnYyblloSUNST0F0S1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACA5o2uNgtOkSF3g1ATADQBFRlqCWAnyAwy/li/bEtFake7rO6r9MU76lLgsD
ygNbea5QGR83gcsxfTZwqeuSfSjp8OiaS51zk04k6rD/6CThUmc3aCUa3p0BkxQB
JemukcKLeUgQOYgIUJh0mj5Rrzj9xiqFnhRdBoIzZI+E3ogI5Kp1/2NQXDP/u9rS
jU+dsXCmc3jYkLEaT7NlBczDWFl+faToFF2YEU+2qj9OSXTMEmnmssPNCf7VMYGY
LdlDQe9zp5AXiv2AdtXrzUl0KqsIXPk43fRQouJk+06S2J+Pc2byou4NxaEGE8Fr
N8ymosWylYacbf9H6+cU3L2HEA==
-----END CERTIFICATE-----
Generated at Wed Aug 19 16:52:36 2026 by rpki-client