Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.mft
File:                     8-u_tKk4D-CaVh_Gr6KhzCFIhhE.mft (raw, json)
Hash identifier:          ebKJT7A9rjgZPvE0Wb6gPvtfAJUVTI+zDTnUoJhwabM=
Subject key identifier:   9A:73:E0:86:64:A2:CC:91:07:E7:08:FE:DB:81:49:12:86:DB:C8:AD
Authority key identifier: F3:EB:BF:B4:A9:38:0F:E0:9A:56:1F:C6:AF:A2:A1:CC:21:48:86:11
Certificate issuer:       /CN=A913A5AF/serialNumber=F3EBBFB4A9380FE09A561FC6AFA2A1CC21488611
Certificate serial:       0145
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.mft
Manifest number:          0144
Signing time:             Mon 21 Sep 2026 05:24:55 +0000
Manifest this update:     Mon 21 Sep 2026 05:24:54 +0000
Manifest next update:     Mon 28 Sep 2026 05:24:54 +0000
Files and hashes:         1: 8-u_tKk4D-CaVh_Gr6KhzCFIhhE.crl (hash: 7GjV14krnXT3gGpwLHZ3rwQ4elcvzZELR6aNhtMQex8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.crl
                          rsync://rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 05:24:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 325 (0x145)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A5AF, serialNumber=F3EBBFB4A9380FE09A561FC6AFA2A1CC21488611
        Validity
            Not Before: Sep 21 05:24:54 2026 GMT
            Not After : Sep 28 05:24:54 2026 GMT
        Subject: CN=6ab0bfa7-d535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:27:6c:20:87:44:29:c4:e0:67:cb:4b:0c:63:
                    f0:77:20:57:2a:d7:30:2e:b6:6a:98:7e:5c:d0:71:
                    54:47:c5:33:e3:08:ce:c8:fc:cb:f8:fc:62:7f:e2:
                    11:88:1e:f4:a2:c6:87:86:ab:84:ca:7e:8d:1e:46:
                    44:9a:76:e7:ea:f5:55:67:b5:30:ad:af:4a:15:db:
                    62:ec:18:af:40:1d:57:8f:b0:18:20:f5:0b:50:90:
                    ce:1f:df:a9:ff:6f:ee:05:13:65:f7:44:78:6b:9b:
                    a8:56:c8:d6:f0:e0:3e:72:39:30:fd:5d:ec:15:95:
                    4b:75:4f:07:42:33:23:c6:99:06:e9:44:ec:20:e5:
                    e1:fc:c1:d8:d9:2d:52:ba:dc:ad:0c:ca:2e:e2:af:
                    07:56:87:d3:d4:ee:d2:cf:9f:f5:07:82:27:f0:f6:
                    3f:ff:a0:97:b1:1e:1c:57:42:79:14:97:7c:89:9e:
                    9a:75:a1:c0:a2:1c:ae:34:d8:e9:66:ea:f7:a2:09:
                    01:68:02:49:96:74:3a:48:35:e7:56:7c:7b:a9:a7:
                    c6:ca:d6:4f:17:5b:4a:5c:79:47:34:d0:86:aa:3c:
                    26:15:86:29:1e:09:1e:52:59:47:50:47:06:07:fd:
                    10:7c:3c:47:d8:5a:b8:9d:f3:e9:e6:0a:6e:eb:aa:
                    09:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:73:E0:86:64:A2:CC:91:07:E7:08:FE:DB:81:49:12:86:DB:C8:AD
            X509v3 Authority Key Identifier:
                keyid:F3:EB:BF:B4:A9:38:0F:E0:9A:56:1F:C6:AF:A2:A1:CC:21:48:86:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:ca:03:19:75:e5:94:d7:17:ea:69:22:dc:05:51:61:9f:e3:
         f3:8f:f4:60:bd:6f:41:1d:cd:6c:36:b8:c4:1f:9c:08:48:d0:
         93:d5:94:9d:73:5d:59:6b:d1:bc:6e:89:60:92:c1:26:07:a6:
         c1:53:64:41:e6:2d:1b:0b:b4:7b:17:45:e0:f9:b4:99:00:09:
         91:8f:f8:8d:25:18:18:2d:b6:f8:4c:f3:8a:f3:37:4b:8d:d6:
         e8:ce:4a:a8:50:ef:6f:dc:85:ba:89:41:e0:81:78:f5:29:4c:
         5e:58:7f:0f:5e:85:fb:6a:5f:a2:e6:cf:27:7d:8a:1f:36:b4:
         ae:ea:c5:a9:f0:4e:dd:80:84:04:f2:ac:55:31:65:b4:1b:ab:
         fd:2b:53:ea:b1:ee:d8:45:58:0e:e5:8f:fe:8a:a5:ea:60:c9:
         ac:a8:89:ee:1d:7a:23:f8:24:c4:0a:4c:29:a3:61:67:33:32:
         a0:5d:21:97:07:3d:90:7d:70:93:a9:8a:46:0d:94:5b:1a:f5:
         e4:7a:1f:62:c6:3d:7d:f1:bf:5c:48:1d:51:b6:3c:64:b1:d4:
         aa:d0:10:c7:6d:f1:84:8d:13:28:6b:b9:58:ee:63:a7:e3:3a:
         53:ef:bd:1b:a7:46:83:6a:1b:9a:40:65:ef:17:32:1a:b4:f1:
         01:1c:7c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:21:58 2026 by rpki-client