Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.mft
File:                     8bA7xYd_4tpPRGoGM9prjh93x9s.mft (raw, json)
Hash identifier:          x/9RCnaQySVzSQfyjIfHvz7XEvAKjjyNoMbFcG5UQSY=
Subject key identifier:   E6:A7:FF:8E:BD:5A:BD:2D:D7:21:C7:A3:91:AA:A4:8B:C2:61:5C:F3
Authority key identifier: F1:B0:3B:C5:87:7F:E2:DA:4F:44:6A:06:33:DA:6B:8E:1F:77:C7:DB
Certificate issuer:       /CN=A918E881/serialNumber=F1B03BC5877FE2DA4F446A0633DA6B8E1F77C7DB
Certificate serial:       06AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bA7xYd_4tpPRGoGM9prjh93x9s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.mft
Manifest number:          06A2
Signing time:             Tue 22 Sep 2026 22:09:28 +0000
Manifest this update:     Tue 22 Sep 2026 22:09:28 +0000
Manifest next update:     Tue 29 Sep 2026 22:09:28 +0000
Files and hashes:         1: 8bA7xYd_4tpPRGoGM9prjh93x9s.crl (hash: OW3dA6V4vMR2iD0O+Fi2By9xhWO1DNibV0M6A+ccgWA=)
                          2: F908A568CD1711EB84E11B24C4F9AE02.roa (hash: xrF9iYxFLm8QoyPwPp1CEUu5X+bl6oRWL8LFw8EK9r8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.crl
                          rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bA7xYd_4tpPRGoGM9prjh93x9s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 22:09:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1709 (0x6ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E881, serialNumber=F1B03BC5877FE2DA4F446A0633DA6B8E1F77C7DB
        Validity
            Not Before: Sep 22 22:09:28 2026 GMT
            Not After : Sep 29 22:09:28 2026 GMT
        Subject: CN=6ab2fc98-a460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2b:65:92:d5:ad:fa:67:ff:b2:ad:d3:c2:62:
                    f6:a4:82:af:15:58:49:3b:a4:2b:6c:66:0e:94:43:
                    be:b2:53:82:b7:2b:47:f8:60:ff:8b:33:f4:c2:fb:
                    1e:b6:6f:90:7e:cc:53:a3:1e:cb:d5:f9:6e:72:84:
                    36:47:8b:db:78:6a:e5:8c:54:72:85:39:c1:07:b4:
                    d1:3e:83:f2:2f:d5:88:4b:61:7a:f0:25:fa:cf:d5:
                    cf:72:8d:4d:ee:83:68:1b:f9:97:cf:2c:48:ba:5f:
                    72:30:b8:07:be:b5:6e:a7:cd:ae:f6:4b:cd:2f:bf:
                    d1:db:95:18:84:b5:8e:e5:73:b6:3f:0b:0c:9b:25:
                    47:ac:0a:f3:7a:2f:cd:97:18:49:f3:a2:00:0c:96:
                    9b:11:58:12:f3:9f:cd:74:1a:83:7a:bb:fa:78:a7:
                    6a:c6:4a:aa:30:c4:5a:30:2a:03:93:e0:ef:27:cd:
                    8f:ca:b9:43:2f:df:cf:f3:3d:39:82:02:97:d4:b9:
                    01:e2:f1:50:9d:42:d1:ca:c5:23:ab:ce:e2:2b:f3:
                    31:1b:3e:56:31:fc:f4:6d:58:cb:b6:55:71:95:2e:
                    c6:1a:45:5b:1c:f4:28:eb:fa:4c:3e:f8:d8:4d:bb:
                    e8:8a:25:2a:ff:ee:7b:e2:12:db:d9:2b:35:0f:8a:
                    08:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:A7:FF:8E:BD:5A:BD:2D:D7:21:C7:A3:91:AA:A4:8B:C2:61:5C:F3
            X509v3 Authority Key Identifier:
                keyid:F1:B0:3B:C5:87:7F:E2:DA:4F:44:6A:06:33:DA:6B:8E:1F:77:C7:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bA7xYd_4tpPRGoGM9prjh93x9s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:28:ed:bd:5f:74:54:12:df:b9:21:90:0c:33:41:f0:2d:b6:
         a1:02:c8:89:10:39:df:15:27:a7:63:14:af:d7:99:3d:c3:6a:
         59:00:44:99:fa:a0:f0:8c:6c:cf:f4:27:6f:67:81:9c:fa:34:
         02:f7:ec:7a:6d:e2:61:6b:e1:2d:34:a1:39:72:bc:20:96:57:
         dd:94:d8:a9:98:11:2f:28:ff:3a:e6:8d:78:04:eb:49:27:6b:
         ec:76:ba:29:93:03:5d:e1:84:2d:23:1c:80:1e:8e:c4:de:a9:
         fc:35:fc:79:02:ea:aa:2e:de:d2:84:c2:ef:7a:ed:d3:cb:1f:
         1d:d3:8d:a5:fb:39:99:a1:31:03:2e:32:b0:6f:89:d0:bb:47:
         5d:e1:6a:41:52:64:a6:d4:3c:8a:15:cd:25:aa:f6:11:77:60:
         5a:12:65:67:c1:80:c4:3c:43:18:60:b1:f6:ee:e6:60:3a:ea:
         65:f1:9f:af:0c:00:8c:91:73:0c:13:e5:35:c1:ef:b6:ab:21:
         f6:52:88:e8:56:5e:bc:97:15:ef:a8:8b:e3:41:c7:38:1f:a4:
         1d:c6:42:b4:f2:fc:2e:7f:a1:87:d9:1c:e0:a7:7a:df:36:59:
         28:86:88:c2:1f:b2:56:82:f1:e6:63:7a:86:13:48:1d:ab:ed:
         5a:72:6d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:45:11 2026 by rpki-client