Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft
File:                     Rm8RJELF0C5g8kaZGTriFRlbO6k.mft (raw, json)
Hash identifier:          nykCM7EHuSjebELHcSWEn1DD6CuPfliEFTnmcI6TGHQ=
Subject key identifier:   D3:B6:D0:6B:C1:F7:0A:DD:0F:FB:96:CE:43:00:82:C0:E6:63:C4:56
Authority key identifier: 46:6F:11:24:42:C5:D0:2E:60:F2:46:99:19:3A:E2:15:19:5B:3B:A9
Certificate issuer:       /CN=A915F89C/serialNumber=466F112442C5D02E60F24699193AE215195B3BA9
Certificate serial:       0E8C
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft
Manifest number:          0E5D
Signing time:             Wed 22 Jul 2026 14:23:22 +0000
Manifest this update:     Wed 22 Jul 2026 14:23:22 +0000
Manifest next update:     Wed 29 Jul 2026 14:23:22 +0000
Files and hashes:         1: Rm8RJELF0C5g8kaZGTriFRlbO6k.crl (hash: rm4Xbd+W8+5esL3DdvRtVuhCGH8z5ivQMC2rAe0Voqc=)
                          2: 91CA6CBC740111EFB5E97021C4F9AE02.roa (hash: d203/4qzc9h+hSrcLL8nLeuaomn8Z28uEnCu3k7Q+eU=)
                          3: 266ABA161E5811EF89038F3BC4F9AE02.roa (hash: w0JJZrGQyv8oK5rum9hMEp7rzJrhOm8IUGzDQDqo468=)
                          4: A2DC8C9A4F7B11F1A3D5282FCC833773.roa (hash: YUtSjt3WoGXo+IxfCpIihU+kCKwTBNB8WP+VlFPoQho=)
                          5: 1D3D0DC21E5811EFAC23683BC4F9AE02.roa (hash: BgJh4zD4wVA6vueDCVPTNC8t5x//InfjVE6PnSk4dVs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.crl
                          rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 14:23:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3724 (0xe8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F89C, serialNumber=466F112442C5D02E60F24699193AE215195B3BA9
        Validity
            Not Before: Jul 22 14:23:22 2026 GMT
            Not After : Jul 29 14:23:22 2026 GMT
        Subject: CN=6a60d25a-cb6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0c:50:03:78:06:02:21:96:ea:8d:7d:53:8a:
                    52:c0:d1:6e:25:30:9e:dc:ef:a8:5d:35:3a:8f:03:
                    b8:e0:fd:4d:e0:15:6d:e2:67:8f:16:30:5b:da:f8:
                    03:ae:8a:7e:eb:b2:27:71:f4:58:ad:16:90:be:b6:
                    8c:8c:df:dd:91:6d:b6:f5:cb:89:0d:dd:30:e2:0b:
                    2a:b1:a0:60:29:57:d5:cb:18:93:e8:13:76:e6:3f:
                    c9:dd:63:4c:cf:86:d0:02:5a:50:f9:1a:d1:ce:e7:
                    c9:78:33:22:52:66:11:f5:2c:6c:29:de:ad:f7:8b:
                    9c:d0:7c:0a:45:43:c4:49:05:3c:2c:82:87:6c:90:
                    0d:de:75:0b:b5:6b:8c:b6:5a:55:a8:c5:fa:b7:ed:
                    a1:18:13:e0:82:ea:1b:1b:1c:d7:e9:39:f8:45:16:
                    85:ac:7a:d1:03:02:78:bb:6d:59:89:ad:e5:4d:11:
                    e5:a5:54:d5:ba:e0:b7:e6:23:d7:8f:7e:5d:9f:03:
                    ce:39:44:2d:da:0f:b6:cd:4f:58:d6:49:f1:58:05:
                    8c:0e:1f:42:1d:03:8a:a7:af:69:2f:fd:31:61:ab:
                    26:3e:94:3b:f8:31:bf:bb:1b:d4:17:27:14:31:97:
                    29:2f:7f:6b:30:cf:43:ec:56:ac:d7:c9:ab:d4:32:
                    eb:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:B6:D0:6B:C1:F7:0A:DD:0F:FB:96:CE:43:00:82:C0:E6:63:C4:56
            X509v3 Authority Key Identifier:
                keyid:46:6F:11:24:42:C5:D0:2E:60:F2:46:99:19:3A:E2:15:19:5B:3B:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:ec:52:59:7f:e8:9a:6e:bc:d9:b9:ac:60:51:f2:b8:d3:d7:
         d1:cf:c5:78:1b:f0:6d:49:ea:10:32:45:e3:88:b3:13:05:5f:
         23:5e:3d:20:44:ae:4b:9a:65:e5:a0:35:d2:66:30:73:32:43:
         46:67:82:86:60:8e:5b:26:b9:f4:40:1f:38:5f:7a:89:f3:e0:
         f1:43:f4:7e:31:c5:8a:57:bb:ae:73:1b:d8:53:e5:a5:ca:c3:
         90:42:e2:61:ea:8f:05:26:63:72:f6:af:8f:89:b8:e2:cc:fa:
         9a:36:ad:7c:21:e6:2a:35:72:6f:70:d0:03:f1:1b:fb:50:fb:
         ac:43:55:b9:b5:b7:04:05:bd:fa:06:ab:8d:76:fd:2e:b9:f5:
         45:ad:0d:fc:ca:9f:ea:34:fe:fc:f6:9e:4f:b8:3b:a9:44:23:
         7d:61:52:7d:53:bf:82:c3:40:52:79:2d:d7:da:9f:f6:7f:92:
         46:12:8d:51:19:37:ab:16:1c:19:6c:8f:ca:bf:f8:f4:f3:06:
         8a:8d:d7:47:b0:31:44:db:f3:63:89:36:b5:5a:5a:4f:b9:73:
         e2:1f:62:2e:b1:40:e0:40:54:f9:49:27:ce:d3:24:1d:d1:54:
         1d:06:ac:01:a8:fd:e5:0f:9b:d1:72:bc:a7:39:59:58:ea:d4:
         9e:41:88:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:31:37 2026 by rpki-client