Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.mft
File:                     1h14JILiVI0iXRvIiINjk97jmBI.mft (raw, json)
Hash identifier:          KHxKu6WouEKaXnD8ea8kbjyu1tYB4+0EDSfYgGEf/MY=
Subject key identifier:   8B:7B:A9:11:FC:EC:20:D8:4B:CB:30:8C:B8:9E:C7:88:9C:77:8C:7A
Authority key identifier: D6:1D:78:24:82:E2:54:8D:22:5D:1B:C8:88:83:63:93:DE:E3:98:12
Certificate issuer:       /CN=A91F0A98/serialNumber=D61D782482E2548D225D1BC888836393DEE39812
Certificate serial:       0237
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h14JILiVI0iXRvIiINjk97jmBI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.mft
Manifest number:          0237
Signing time:             Wed 19 Aug 2026 03:06:49 +0000
Manifest this update:     Wed 19 Aug 2026 03:06:49 +0000
Manifest next update:     Wed 26 Aug 2026 03:06:49 +0000
Files and hashes:         1: 1h14JILiVI0iXRvIiINjk97jmBI.crl (hash: f2214Yc09C8TmMJhUItxHAWCiz4Nc3Xidk3rdWGmlG8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.crl
                          rsync://rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h14JILiVI0iXRvIiINjk97jmBI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 03:06:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 567 (0x237)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0A98, serialNumber=D61D782482E2548D225D1BC888836393DEE39812
        Validity
            Not Before: Aug 19 03:06:49 2026 GMT
            Not After : Aug 26 03:06:49 2026 GMT
        Subject: CN=6a851dc9-acb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a0:be:98:7d:8a:ec:3d:f1:c8:1f:36:2d:cd:
                    83:34:9e:85:e9:30:7a:2f:0b:75:9d:3f:0c:84:43:
                    72:64:63:2c:8a:6a:05:1d:23:90:cc:cd:cc:89:e2:
                    3a:8d:48:8b:0b:da:7f:c1:d8:26:e9:2b:37:9d:4f:
                    9a:85:c4:d7:30:c6:73:7c:3a:ea:9f:b1:aa:ae:23:
                    32:e3:cd:01:e5:3d:76:ec:fb:32:0f:41:2f:fe:8c:
                    14:ea:6e:cd:78:eb:9c:e2:c4:f3:20:34:1d:a2:08:
                    bb:9b:c2:a5:50:32:7c:1f:0d:ce:e5:88:be:b1:34:
                    6b:d9:37:b3:7f:33:a3:21:ac:88:f7:03:c0:3c:06:
                    4b:fb:fb:c3:71:39:d4:a7:aa:1d:80:d0:10:a0:52:
                    cf:9e:39:6f:20:f5:e6:a3:26:ae:b4:5a:28:c9:3c:
                    74:5c:14:42:ab:7d:a7:d0:79:34:b7:f3:b3:5f:d0:
                    9b:4f:37:b5:f7:26:61:9c:94:5f:c4:6e:ed:07:77:
                    90:25:9a:7b:63:d2:d7:91:24:6b:a5:c7:b9:72:e0:
                    49:dd:0f:04:c0:a0:d1:91:90:af:a7:fc:28:28:91:
                    ce:84:4b:bd:d6:88:11:c3:e1:1d:8f:3c:5e:d9:c4:
                    cd:e9:c0:d1:48:6a:01:8f:87:4c:d1:b0:42:32:07:
                    24:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:7B:A9:11:FC:EC:20:D8:4B:CB:30:8C:B8:9E:C7:88:9C:77:8C:7A
            X509v3 Authority Key Identifier:
                keyid:D6:1D:78:24:82:E2:54:8D:22:5D:1B:C8:88:83:63:93:DE:E3:98:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h14JILiVI0iXRvIiINjk97jmBI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:8f:aa:d9:71:37:a3:45:ac:ab:ec:a5:fb:12:ae:2a:60:28:
         a3:17:14:26:4c:30:4a:8d:43:9e:61:a4:7c:41:fb:3f:73:ff:
         95:96:4f:d7:1b:85:e4:b7:20:0d:98:92:5a:e9:10:56:e0:5f:
         1a:59:4e:82:60:0d:57:56:7d:4b:a9:7b:59:3e:49:dc:11:00:
         59:85:b7:1a:ce:53:30:11:82:96:fb:18:14:33:2c:92:64:cd:
         f0:2a:4c:a6:c2:b2:61:5c:f5:71:c6:f7:cd:b4:8c:3b:0f:07:
         fb:c4:91:ac:43:5d:67:a4:02:30:0a:b3:0c:fe:4c:ae:75:f2:
         39:43:ff:46:40:e5:99:00:33:1b:0e:f1:2f:9c:fc:59:b7:6b:
         e0:d9:dc:25:1e:48:22:0d:38:c4:c7:6c:57:87:81:7c:e3:bc:
         39:a6:fc:62:82:47:4c:2a:a4:0c:b1:fc:07:0b:4a:05:4f:d4:
         28:1c:a6:b8:ba:32:f2:a4:cf:dc:06:d2:33:cc:4d:3f:58:d1:
         d1:2a:6c:47:7c:5f:53:7c:1c:0e:33:c7:b5:39:5e:b3:4e:9b:
         b7:2e:df:28:4a:7a:30:81:bf:86:1d:7a:88:80:01:08:c4:a3:
         c8:2b:d8:01:69:83:c6:42:2b:c7:4f:29:76:5b:d5:5f:0f:e4:
         b0:88:68:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:56:14 2026 by rpki-client