Manifest

$ rpki-client -vvf rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
File:                     mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft (raw, json)
Hash identifier:          /vWE+A7XgB0uin1xdaErnl7pYqDjRoykSdg449JN7as=
Subject key identifier:   93:2C:CE:E2:5A:5D:51:79:D3:AB:96:9B:6E:34:CE:DE:A4:82:B2:19
Authority key identifier: 98:14:2C:9D:0B:41:A3:B9:FB:60:3D:76:98:48:23:6F:D1:F3:19:24
Certificate issuer:       /CN=apnic-rpki-root-intermediate/serialNumber=98142C9D0B41A3B9FB603D769848236FD1F31924
Certificate serial:       0491
Authority info access:    rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
Subject info access:      rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
Manifest number:          0243
Signing time:             Thu 06 Aug 2026 22:56:21 +0000
Manifest this update:     Thu 06 Aug 2026 22:56:20 +0000
Manifest next update:     Sun 13 Sep 2026 22:56:20 +0000
Files and hashes:         1: mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl (hash: IFBk4I7427EiwMZCWuF2ijRwHPtTemX1gHBdXDn/Syg=)
                          2: DmWk9f02tb1o6zySNAiXjJB6p58.cer (hash: HvBVoi7peyVruKoMqA8m9fc5aNSsi6jivmqKbRjnsQc=)
                          3: dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer (hash: KRHs2RrRc3YcDF1ClItOOm70+wYqdkqzx5FicEZMPtA=)
                          4: NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer (hash: WVmxsOlDF0xat6+qJEYw0FI7gJpo7ipvHNwUyCZPWe8=)
                          5: DPzneFf88B852ZpitKpi5hWedvg.cer (hash: vvaR0uTWGD+EG3B0twf0JY+/sHOMVIsSNyq3DQyN8b8=)
                          6: lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer (hash: 2wvSf3mvkmBJarrorgDD4c1VL/vS28rDRIDRnYLdNAA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 24 Aug 2026 00:23:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1169 (0x491)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=apnic-rpki-root-intermediate, serialNumber=98142C9D0B41A3B9FB603D769848236FD1F31924
        Validity
            Not Before: Aug  6 22:56:20 2026 GMT
            Not After : Sep 13 22:56:20 2026 GMT
        Subject: CN=6a751115-c767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5e:be:17:ec:3f:74:58:0f:a5:f1:5b:2c:e2:
                    7b:4d:b7:ef:e3:01:73:23:8a:f6:ad:d3:2d:09:a6:
                    49:1c:68:82:fa:07:3d:8d:98:9e:9c:f7:7f:7c:ec:
                    d7:d5:62:0c:5f:86:b4:d9:78:93:2c:ef:63:81:12:
                    9b:2b:29:2c:9f:61:25:1e:0d:cb:5e:12:d9:a4:5e:
                    8c:97:8a:40:9a:d1:59:ce:67:e2:41:ab:ef:7c:fe:
                    89:85:aa:94:61:cb:04:ac:ee:23:2e:5e:82:d0:3b:
                    ab:50:0d:e0:c6:f9:4f:ce:6d:83:b1:d7:9b:28:71:
                    43:d3:db:f2:cc:e4:bc:7f:4a:04:f8:22:e2:6b:d6:
                    cd:1d:e2:3c:28:6f:6a:a6:5a:f8:02:79:f7:a6:b1:
                    e6:54:62:d5:a5:af:a9:cd:45:43:3e:b3:0e:27:43:
                    3e:58:d0:ad:1e:78:08:c7:00:d3:a4:9d:e0:d7:e8:
                    db:98:d4:38:7c:5c:7b:18:1e:79:92:da:1f:15:56:
                    b4:ab:bf:4f:e0:08:82:6b:e6:52:bc:61:3b:ef:85:
                    44:65:2c:d5:bd:3a:97:a8:5a:8e:b9:5f:f3:c8:cc:
                    92:6c:89:e6:12:db:64:a0:1a:74:f1:35:14:2c:d2:
                    e1:da:2f:a5:b3:c8:f9:08:bf:56:fb:25:bd:d6:7d:
                    ff:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:2C:CE:E2:5A:5D:51:79:D3:AB:96:9B:6E:34:CE:DE:A4:82:B2:19
            X509v3 Authority Key Identifier:
                keyid:98:14:2C:9D:0B:41:A3:B9:FB:60:3D:76:98:48:23:6F:D1:F3:19:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:c6:13:2e:73:be:7f:0b:2c:ce:46:89:89:4c:7b:7a:f9:16:
         89:83:32:95:7d:8b:f4:e0:8a:c1:80:a2:ed:0e:ed:14:c7:60:
         c7:87:22:26:e1:54:c6:43:fe:85:3b:20:9a:9b:34:a9:09:51:
         08:b1:74:b1:f0:4c:7a:f2:93:07:a9:94:9d:b3:a2:d0:ee:55:
         b2:59:3d:3b:10:07:f0:e1:75:3d:0c:17:cd:5d:43:3b:6c:50:
         f4:64:ae:d3:b1:bc:fc:a9:2b:fc:dc:9a:3c:f6:20:a2:0a:08:
         75:01:07:b8:87:fe:85:b9:db:50:c9:21:bc:50:fd:17:19:2f:
         63:df:0d:f1:d3:11:49:83:b8:f5:17:43:e4:03:b3:1b:a7:30:
         3d:5b:86:c0:f5:ac:a6:b4:d5:c8:5e:e7:d6:79:d1:f2:13:8b:
         76:52:7d:bf:4d:d5:7c:60:a0:35:82:3f:69:bf:85:c1:82:cf:
         12:ba:86:59:4e:4a:f5:e0:d7:97:49:b3:35:28:29:7d:5f:8a:
         f2:c4:d0:ed:15:4a:07:5a:00:50:38:67:cf:30:0b:b8:21:aa:
         a8:8c:ba:43:f0:35:09:60:c1:ad:ac:b8:a1:29:0f:3c:5e:cb:
         49:5a:43:bd:1f:46:cc:6e:8a:22:9b:25:08:f9:a4:3b:1d:a8:
         57:06:17:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 9 21:16:40 2026 by rpki-client