Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913B090/6B67243467F111EDBDC5852CC4F9AE02/s8lXWbAmAWnVga-ERmxca89vwds.mft
File:                     s8lXWbAmAWnVga-ERmxca89vwds.mft (raw, json)
Hash identifier:          ob8v2JyyN5YmIyPSDSNE5OMWX7vsY5IF0S4RKYbYVNg=
Subject key identifier:   6E:A8:B1:66:EC:33:78:FF:9D:5A:50:7C:6D:F9:3A:7A:B6:AF:7E:D2
Authority key identifier: B3:C9:57:59:B0:26:01:69:D5:81:AF:84:46:6C:5C:6B:CF:6F:C1:DB
Certificate issuer:       /CN=A913B090/serialNumber=B3C95759B0260169D581AF84466C5C6BCF6FC1DB
Certificate serial:       02F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8lXWbAmAWnVga-ERmxca89vwds.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B090/6B67243467F111EDBDC5852CC4F9AE02/s8lXWbAmAWnVga-ERmxca89vwds.mft
Manifest number:          02EC
Signing time:             Fri 13 Nov 2026 01:01:54 +0000
Manifest this update:     Fri 13 Nov 2026 01:01:53 +0000
Manifest next update:     Fri 20 Nov 2026 01:01:53 +0000
Files and hashes:         1: s8lXWbAmAWnVga-ERmxca89vwds.crl (hash: 4pzSCROvNBJAB8p8norf2rWs6VVgM74+p0iJa4eTLaM=)
                          2: B57CACF267F511EDA884E65BC4F9AE02.roa (hash: rd53I9p/WSE4c6AwU5a8hFcHTZZkVn7MtueB7HLYYks=)
                          3: OOD_2Hvw7O4e8T0psyZgoB-fkgs.asa (hash: +BMYn91I+hP4a5tf+LwWuegiQTQuQOYODEz75oMyLiw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B090/6B67243467F111EDBDC5852CC4F9AE02/s8lXWbAmAWnVga-ERmxca89vwds.crl
                          rsync://rpki.apnic.net/member_repository/A913B090/6B67243467F111EDBDC5852CC4F9AE02/s8lXWbAmAWnVga-ERmxca89vwds.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8lXWbAmAWnVga-ERmxca89vwds.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Nov 2026 01:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 756 (0x2f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B090, serialNumber=B3C95759B0260169D581AF84466C5C6BCF6FC1DB
        Validity
            Not Before: Nov 13 01:01:53 2026 GMT
            Not After : Nov 20 01:01:53 2026 GMT
        Subject: CN=6af66182-419e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:12:46:96:ee:58:08:a3:9e:bf:40:77:26:14:
                    d9:db:80:e5:ea:52:08:14:2e:86:3d:67:9b:f3:08:
                    30:22:bd:74:b8:89:f3:8a:eb:55:e5:26:b2:0a:02:
                    d7:7a:a1:90:d9:fd:50:b2:e9:b8:80:f7:c7:5b:c7:
                    e4:17:c7:99:c7:b6:96:65:9b:22:34:ee:fd:f0:98:
                    59:ff:b7:74:0c:49:9a:f2:e4:1e:83:94:54:c3:01:
                    6d:02:54:95:b1:a5:14:fb:7c:b2:94:73:b2:9f:02:
                    e7:01:73:39:18:d1:34:c1:97:d3:d2:2b:3f:36:5d:
                    1c:b1:56:fc:c5:be:d1:19:c4:d1:3f:99:e9:30:c5:
                    20:ba:93:1c:18:6f:66:54:f7:2f:a4:f2:de:9c:03:
                    24:4e:25:73:be:b7:2d:ab:2c:b1:c5:6e:55:86:3e:
                    b5:7d:d9:a8:b2:7a:5f:55:36:5d:04:d3:be:12:f5:
                    f2:84:19:26:06:ba:bb:12:16:bd:40:52:77:52:c1:
                    ba:77:a3:b4:f9:ee:c8:05:12:df:d5:fc:d2:77:7e:
                    dc:e1:28:e8:49:93:0e:56:c6:76:56:d2:46:cc:b0:
                    cd:55:9e:6c:5d:9b:79:6b:62:35:47:7c:17:c0:5f:
                    51:d1:66:4a:b0:60:59:df:67:84:d5:2c:e9:96:4f:
                    14:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:A8:B1:66:EC:33:78:FF:9D:5A:50:7C:6D:F9:3A:7A:B6:AF:7E:D2
            X509v3 Authority Key Identifier:
                keyid:B3:C9:57:59:B0:26:01:69:D5:81:AF:84:46:6C:5C:6B:CF:6F:C1:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B090/6B67243467F111EDBDC5852CC4F9AE02/s8lXWbAmAWnVga-ERmxca89vwds.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8lXWbAmAWnVga-ERmxca89vwds.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B090/6B67243467F111EDBDC5852CC4F9AE02/s8lXWbAmAWnVga-ERmxca89vwds.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:78:d3:17:89:08:9f:bf:19:0d:20:6c:d8:d1:7f:65:c6:44:
         74:67:bf:2b:12:37:c7:ad:62:2d:08:77:a8:61:88:dd:58:45:
         60:78:e6:d3:b1:29:15:26:17:3e:a2:de:c1:ba:4d:f6:06:2e:
         b7:11:b9:7e:c9:aa:f5:d4:96:fd:55:00:b1:9c:c4:a8:dc:0c:
         8e:0b:59:5c:12:d9:ff:93:e0:e9:b0:18:34:4d:f1:2b:3c:b3:
         db:f2:e7:94:97:00:3c:86:49:72:35:87:62:7d:02:e6:91:45:
         95:d3:9c:5a:63:88:e3:b3:44:92:2c:f1:7a:50:81:62:6f:40:
         b0:01:46:5a:ee:fa:21:85:3a:30:f3:09:3a:75:7c:97:8a:ee:
         14:44:57:8d:e2:da:1a:0b:9e:b3:6c:75:ae:0e:c4:f6:00:4e:
         4e:7d:2a:42:9e:00:ab:ba:98:84:cc:8b:ee:99:fc:58:e5:7b:
         07:39:eb:86:ba:45:f3:55:dc:2a:71:59:b0:32:aa:fc:58:f7:
         9d:c0:67:6d:ea:a6:71:dc:5e:2c:c6:44:50:96:03:46:92:01:
         ad:46:1d:15:82:1e:4a:46:29:1e:73:2d:95:d9:a3:bb:c7:b9:
         2f:bc:bb:bb:9a:34:a6:7f:73:e0:ee:1d:cb:34:82:06:33:75:
         19:5c:29:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:51:39 2026 by rpki-client