Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft
File:                     xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft (raw, json)
Hash identifier:          ue5yhD3uQHY0pWQdfOu7t8LnBxP48F7pT7PmW09lCio=
Subject key identifier:   E3:40:DE:75:9F:B1:8E:96:2A:16:B6:3A:AF:34:1F:21:A7:31:48:B5
Authority key identifier: C6:54:FC:47:6C:DF:2E:30:6B:E2:77:0D:AE:91:04:23:61:1A:31:92
Certificate issuer:       /CN=A918A750/serialNumber=C654FC476CDF2E306BE2770DAE910423611A3192
Certificate serial:       024A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlT8R2zfLjBr4ncNrpEEI2EaMZI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft
Manifest number:          0246
Signing time:             Thu 23 Jul 2026 03:34:27 +0000
Manifest this update:     Thu 23 Jul 2026 03:34:27 +0000
Manifest next update:     Thu 30 Jul 2026 03:34:27 +0000
Files and hashes:         1: xlT8R2zfLjBr4ncNrpEEI2EaMZI.crl (hash: nPAb2Av786/hwVwp/3EaHhGYQ9/j/EWgt2wuRmRzHeA=)
                          2: CD377A6C06B411EE841D6C4AC4F9AE02.roa (hash: DSwrQXXqByoPFQJXpbDE85/HMdoqbU+SR14BjY//Wvs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.crl
                          rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlT8R2zfLjBr4ncNrpEEI2EaMZI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 03:34:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 586 (0x24a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A750, serialNumber=C654FC476CDF2E306BE2770DAE910423611A3192
        Validity
            Not Before: Jul 23 03:34:27 2026 GMT
            Not After : Jul 30 03:34:27 2026 GMT
        Subject: CN=6a618bc3-6459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:63:3d:3a:2b:e6:51:d9:de:c4:c0:5f:8d:ac:
                    a3:08:d5:b3:31:c3:55:d1:75:ce:62:ff:ec:b1:d5:
                    ec:01:b9:d0:6c:2c:f3:a5:e4:22:cb:3d:ca:92:cb:
                    e7:00:99:b5:7c:12:b9:3b:3e:02:ad:cb:a6:bf:a4:
                    73:56:62:dd:41:b1:05:5e:22:91:a6:7c:03:de:e7:
                    f1:0a:7e:50:a1:f5:60:da:bd:bc:59:a2:ac:d2:5e:
                    d7:05:23:07:8a:b2:a0:34:b4:e1:64:5c:e0:f7:61:
                    f6:91:77:4c:a0:57:da:8a:75:e9:e3:63:55:03:36:
                    07:fa:ea:8d:11:e4:1d:11:25:32:41:d5:8f:59:a1:
                    c7:77:cb:ee:ee:4a:91:4f:b9:20:00:75:8b:23:a9:
                    0b:f4:1e:22:99:71:6f:c2:67:e9:d7:7b:96:4d:af:
                    b6:ea:a3:32:78:95:7b:7c:06:63:a0:f6:3b:61:ff:
                    ef:21:f9:48:e1:82:56:12:16:f8:8a:b3:e1:21:6c:
                    c8:dc:d8:85:59:8c:c8:87:88:95:75:87:da:6c:c0:
                    4e:e9:46:1f:f7:fa:72:52:f0:ca:d0:43:52:ad:ef:
                    05:c6:b0:b4:10:21:1e:38:c9:5b:40:4c:7f:e9:e5:
                    1b:2f:71:8e:e4:07:b4:85:72:29:53:2e:41:25:cc:
                    df:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:40:DE:75:9F:B1:8E:96:2A:16:B6:3A:AF:34:1F:21:A7:31:48:B5
            X509v3 Authority Key Identifier:
                keyid:C6:54:FC:47:6C:DF:2E:30:6B:E2:77:0D:AE:91:04:23:61:1A:31:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlT8R2zfLjBr4ncNrpEEI2EaMZI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:ac:cd:91:3f:e4:80:79:b1:88:d6:69:99:fa:37:a6:3a:ad:
         78:7d:49:6e:c6:8c:db:99:bc:fc:7a:eb:56:f4:bd:13:eb:af:
         9d:57:e4:32:bb:b6:77:09:02:5d:68:1f:b8:c0:cd:c8:32:c8:
         69:fc:86:2f:b2:92:c3:9d:10:37:d1:d0:8e:c1:c1:77:8b:41:
         1a:7d:d5:24:25:fa:4c:c6:68:dd:fa:49:75:d8:3b:34:dc:71:
         c0:a9:28:61:e0:cc:68:10:36:ae:fc:a2:b0:f7:ce:6e:4a:02:
         b4:bb:44:7c:94:dd:5a:10:e3:5f:47:55:c6:ac:8c:bb:ef:de:
         35:b6:f8:e8:3b:db:34:a5:2f:e8:73:f7:ea:2e:c9:75:f8:4b:
         72:ec:59:09:dd:46:51:1b:7a:1b:22:85:3b:e4:01:38:35:af:
         b7:5a:db:e9:2a:b0:21:3d:d9:61:d5:e0:b3:5f:fa:0c:30:fb:
         51:f6:75:03:d1:9f:0a:be:94:ed:52:6c:6a:e1:d9:26:41:5e:
         f8:0c:ef:2f:73:5c:c0:3a:97:3b:ed:e2:69:76:20:5e:5c:5d:
         50:07:09:2c:6b:d4:c6:09:19:7a:57:79:1e:fc:9f:82:77:79:
         7f:d2:77:f6:66:97:da:4d:7b:c5:14:b3:5e:24:ab:d9:b1:86:
         29:88:af:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:36:47 2026 by rpki-client