Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.mft
File:                     8ue_m6mnxEF7217_IXMMXshAJA0.mft (raw, json)
Hash identifier:          FZF60CR5yiBCAg7K7bJ36ULMYSIk7svskVCjfVogaDo=
Subject key identifier:   48:2C:30:2B:63:E3:36:A2:2C:47:50:F3:A4:78:FF:CB:CF:87:59:79
Authority key identifier: F2:E7:BF:9B:A9:A7:C4:41:7B:DB:5E:FF:21:73:0C:5E:C8:40:24:0D
Certificate issuer:       /CN=A914E6AA/serialNumber=F2E7BF9BA9A7C4417BDB5EFF21730C5EC840240D
Certificate serial:       06A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ue_m6mnxEF7217_IXMMXshAJA0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.mft
Manifest number:          0B43
Signing time:             Tue 24 Mar 2026 22:10:33 +0000
Manifest this update:     Tue 24 Mar 2026 22:10:32 +0000
Manifest next update:     Tue 31 Mar 2026 22:10:32 +0000
Files and hashes:         1: 8ue_m6mnxEF7217_IXMMXshAJA0.crl (hash: 9MElzszcm4q+WAKuKzQjqcYvcGt3SawW8MOnencDjyM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.crl
                          rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ue_m6mnxEF7217_IXMMXshAJA0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:10:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1698 (0x6a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E6AA, serialNumber=F2E7BF9BA9A7C4417BDB5EFF21730C5EC840240D
        Validity
            Not Before: Mar 24 22:10:32 2026 GMT
            Not After : Mar 31 22:10:32 2026 GMT
        Subject: CN=69c30bd9-adaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:32:9a:d3:30:0a:fd:f5:6a:95:c6:b9:46:43:
                    fc:63:c2:17:00:5b:9a:05:cd:ed:e6:98:84:35:76:
                    b9:df:a6:c4:13:c3:37:6e:c4:cd:df:ec:0f:7c:9f:
                    a0:4a:d6:34:6e:2a:d5:78:42:b9:f5:ad:61:84:3e:
                    bc:c1:e9:4f:c4:4c:fd:1e:2c:22:cb:7f:89:02:0e:
                    48:93:42:a8:b9:2b:03:23:29:a9:e9:b7:2d:04:8a:
                    f2:5b:a4:06:f7:08:23:c7:9a:f0:46:df:84:4d:d9:
                    13:cb:27:a4:fc:3c:57:31:3f:1e:59:f1:10:05:0c:
                    6b:6b:14:6f:4c:e0:86:65:1e:06:ed:20:66:f8:94:
                    27:36:88:de:ac:9e:bb:7f:2a:e6:8f:7e:a1:9c:5e:
                    ed:a7:ef:ae:47:2f:6d:68:5b:f9:39:f0:1e:00:1a:
                    f9:77:fd:41:b7:e1:c4:7f:82:b2:00:b0:32:5b:06:
                    f9:a8:e8:72:09:85:fa:92:57:bb:cc:bc:fb:3e:e0:
                    5c:a2:a0:57:6a:63:44:e8:72:b1:96:fc:91:1f:29:
                    8c:ab:8e:5f:ac:7a:a6:68:66:78:1d:a4:02:b2:9e:
                    c9:b7:c8:ad:72:81:2a:5d:47:26:a5:0d:72:32:42:
                    b9:03:93:7f:b2:90:86:2f:8e:fc:c4:5e:9a:a7:21:
                    26:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:2C:30:2B:63:E3:36:A2:2C:47:50:F3:A4:78:FF:CB:CF:87:59:79
            X509v3 Authority Key Identifier:
                keyid:F2:E7:BF:9B:A9:A7:C4:41:7B:DB:5E:FF:21:73:0C:5E:C8:40:24:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ue_m6mnxEF7217_IXMMXshAJA0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:20:3a:60:e4:17:f5:c6:9d:09:5b:16:59:ff:52:f5:6c:49:
         06:f4:1c:26:31:c3:e7:ab:f2:09:54:74:1b:6d:6e:28:d3:06:
         be:c7:db:f7:0e:34:2e:99:9d:a1:83:c3:29:67:a3:5b:c9:84:
         07:5a:60:05:fc:d5:fb:91:16:46:0d:d2:2a:3b:b8:54:41:db:
         1f:72:7e:c5:f8:d4:d1:e9:80:7c:c0:fc:a1:bb:af:2f:58:ba:
         fb:f8:81:5f:94:15:4a:dc:d2:53:8e:ad:96:fc:65:89:31:0c:
         fd:c8:71:8b:ba:b6:92:98:47:61:d4:66:1a:c8:75:3b:d7:7b:
         75:3e:b6:21:71:17:bf:bb:39:91:a1:45:33:63:37:7f:65:1a:
         f7:51:e4:8e:43:6b:91:78:a5:6d:6c:fc:10:27:8e:2b:d6:a4:
         20:b2:4c:5c:e9:e0:56:c8:6d:0d:2e:24:64:3b:77:8e:13:7c:
         c0:20:a1:39:43:82:95:e2:bc:75:f0:87:43:0c:d9:55:62:72:
         7b:47:07:64:96:8d:ce:b5:c8:10:b6:74:5a:8e:c1:b2:f3:9e:
         4a:02:dc:80:11:d3:44:a1:80:d9:4f:22:d5:85:b9:3e:4f:52:
         64:d1:e6:57:2d:5b:07:f3:7c:6c:31:80:70:09:ba:58:f4:cf:
         50:a6:fc:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:50:55 2026 by rpki-client