Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft
File:                     8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft (raw, json)
Hash identifier:          i61tabccH8UEAzNEPo50zXxYv4Cw222nhwJprRnhNtM=
Subject key identifier:   28:5C:0A:9F:65:86:0E:1C:3E:AB:A0:1A:69:3B:2A:D1:2D:62:E7:7A
Authority key identifier: F3:F2:73:F3:EF:CE:55:1E:E3:3C:84:4D:44:0A:A3:0E:DA:08:7E:2C
Certificate issuer:       /CN=A914E1F1/serialNumber=F3F273F3EFCE551EE33C844D440AA30EDA087E2C
Certificate serial:       0352
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft
Manifest number:          033D
Signing time:             Wed 13 May 2026 01:11:06 +0000
Manifest this update:     Wed 13 May 2026 01:11:06 +0000
Manifest next update:     Wed 20 May 2026 01:11:06 +0000
Files and hashes:         1: 8_Jz8-_OVR7jPIRNRAqjDtoIfiw.crl (hash: yFBjIdB7d4jqivDLLjstMQLrRIEkIpJhXAbWhDropXI=)
                          2: 4192339AF6A311EFBACC274CC4F9AE02.roa (hash: Wcc8ygmv+LZchyHQ4KBBITZJAV+Up2qfVQ07bd9vNtw=)
                          3: 1E00C58C145C11F094FADD38C4F9AE02.roa (hash: 26lbZitWRiEfeoyruNKhZHO3TiLuflGgqtfn2ftoTxQ=)
                          4: 33074190145C11F0B91D7C47C4F9AE02.roa (hash: MKjhR4piWDvUAuWp9pWEKUBXNQ2JX0nzoNNUeCqPGFU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.crl
                          rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 01:11:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 850 (0x352)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E1F1, serialNumber=F3F273F3EFCE551EE33C844D440AA30EDA087E2C
        Validity
            Not Before: May 13 01:11:06 2026 GMT
            Not After : May 20 01:11:06 2026 GMT
        Subject: CN=6a03cfaa-a4cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:09:06:27:a7:6b:ef:24:3f:7a:12:3f:08:d1:
                    f8:ef:92:b4:e7:4d:0b:ae:78:1b:6b:73:d7:43:8e:
                    af:d0:5f:9c:51:8e:36:37:92:1b:23:17:bf:d0:26:
                    ea:d4:e6:38:5d:21:df:77:b5:e7:e8:7a:04:1a:95:
                    a9:17:36:6a:5e:62:e5:4d:76:58:58:33:7f:92:43:
                    7c:b1:f8:d6:dc:38:f3:6e:20:61:c0:d1:25:1d:d0:
                    66:6e:72:d7:7e:af:e2:c7:22:f4:39:69:6f:23:95:
                    0f:b9:18:eb:46:c2:bd:81:10:f0:47:6c:6a:fd:53:
                    3b:3c:50:d0:96:ae:5c:cf:e2:ef:1e:d7:e1:b4:cd:
                    43:21:4d:b2:dd:2e:c0:ad:fc:c2:8a:34:52:8d:69:
                    2d:ea:09:bb:ee:00:b0:bb:21:82:da:a1:f4:1e:90:
                    b1:db:33:a9:b9:69:79:4c:52:7d:cb:bf:0d:f5:6f:
                    26:a8:f7:04:f0:c5:c4:f5:f2:63:aa:5a:b7:0a:01:
                    f2:74:1c:df:18:a9:e7:0e:76:f7:f5:f2:f9:36:c3:
                    e2:88:4f:5b:93:80:37:6c:7f:5d:ec:6d:2a:b1:57:
                    6b:70:e9:3c:75:6f:be:20:ec:34:e8:ed:3c:21:4c:
                    c2:dc:8b:cb:c3:85:31:b1:27:96:b0:a9:2c:e3:4e:
                    c7:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:5C:0A:9F:65:86:0E:1C:3E:AB:A0:1A:69:3B:2A:D1:2D:62:E7:7A
            X509v3 Authority Key Identifier:
                keyid:F3:F2:73:F3:EF:CE:55:1E:E3:3C:84:4D:44:0A:A3:0E:DA:08:7E:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:92:be:56:d6:ed:d6:76:49:1f:7c:b9:8b:b1:4a:0d:a7:ef:
         54:18:8a:6d:18:90:0d:8d:65:44:a7:4f:c3:c6:08:77:3c:a3:
         c3:0f:ad:74:b4:88:56:f9:0d:bc:52:ac:e9:f7:cc:6c:81:ba:
         a7:f4:d6:62:91:2d:70:9c:ad:4c:29:6e:04:8d:7b:a6:41:e5:
         9c:0f:18:46:5a:95:56:ec:0a:6a:a8:59:e2:63:67:d0:45:84:
         4b:59:cd:86:be:2f:2c:60:a2:bd:4e:ed:de:e4:17:56:90:03:
         eb:c6:ce:b8:7c:08:14:6c:55:a3:29:0d:b3:bf:70:83:01:c2:
         cb:03:72:c3:04:51:e1:13:4b:be:ee:d2:fc:9d:8e:f9:7f:4c:
         2a:ce:10:7b:78:f8:8f:c6:a0:e4:15:73:26:79:8f:0b:14:bb:
         b3:6e:58:77:6f:64:1a:5d:68:2a:28:4c:f6:39:eb:b1:b7:f3:
         6d:d7:ee:45:7e:e3:00:5f:26:d8:26:12:bb:3e:f1:fc:4b:76:
         43:48:a9:0a:6a:d9:68:b1:d7:cf:e4:cf:ef:ff:09:9a:60:d1:
         aa:e4:a8:ef:89:b4:b8:e8:b4:4e:70:e9:2d:52:b0:0f:b3:2f:
         a0:98:de:ed:a6:8d:c8:b4:44:fe:8b:e4:ab:73:a8:d5:80:4d:
         d7:98:20:44
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA1IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEUxRjExMTAvBgNVBAUTKEYzRjI3M0YzRUZDRTU1MUVFMzNDODQ0RDQ0MEFBMzBF
REEwODdFMkMwHhcNMjYwNTEzMDExMTA2WhcNMjYwNTIwMDExMTA2WjAYMRYwFAYD
VQQDEw02YTAzY2ZhYS1hNGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0gkGJ6dr7yQ/ehI/CNH475K0500Lrngba3PXQ46v0F+cUY42N5IbIxe/0Cbq
1OY4XSHfd7Xn6HoEGpWpFzZqXmLlTXZYWDN/kkN8sfjW3DjzbiBhwNElHdBmbnLX
fq/ixyL0OWlvI5UPuRjrRsK9gRDwR2xq/VM7PFDQlq5cz+LvHtfhtM1DIU2y3S7A
rfzCijRSjWkt6gm77gCwuyGC2qH0HpCx2zOpuWl5TFJ9y78N9W8mqPcE8MXE9fJj
qlq3CgHydBzfGKnnDnb39fL5NsPiiE9bk4A3bH9d7G0qsVdrcOk8dW++IOw06O08
IUzC3IvLw4UxsSeWsKks407HhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFChcCp9l
hg4cPqugGmk7KtEtYud6MB8GA1UdIwQYMBaAFPPyc/PvzlUe4zyETUQKow7aCH4s
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTFGMS80RkVCRjI0QTA5
REExMUVEQTAzQzk4MTdDNEY5QUUwMi84X0p6OC1fT1ZSN2pQSVJOUkFxakR0b0lm
aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhfSno4LV9PVlI3alBJUk5SQXFqRHRvSWZpdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RTFGMS80RkVCRjI0QTA5REExMUVEQTAzQzk4MTdDNEY5QUUwMi84X0p6OC1fT1ZS
N2pQSVJOUkFxakR0b0lmaXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAW5K+Vtbt1nZJH3y5i7FKDafvVBiKbRiQDY1lRKdPw8YIdzyjww+tdLSIVvkN
vFKs6ffMbIG6p/TWYpEtcJytTCluBI17pkHlnA8YRlqVVuwKaqhZ4mNn0EWES1nN
hr4vLGCivU7t3uQXVpAD68bOuHwIFGxVoykNs79wgwHCywNywwRR4RNLvu7S/J2O
+X9MKs4Qe3j4j8ag5BVzJnmPCxS7s25Yd29kGl1oKihM9jnrsbfzbdfuRX7jAF8m
2CYSuz7x/Et2Q0ipCmrZaLHXz+TP7/8JmmDRquSo74m0uOi0TnDpLVKwD7MvoJje
7aaNyLRE/ovkq3Oo1YBN15ggRA==
-----END CERTIFICATE-----
Generated at Wed May 13 08:26:40 2026 by rpki-client