Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft
File:                     tbP8PnYId-9PjY6EO91ozg9AVTA.mft (raw, json)
Hash identifier:          qnc1tpHDgXnbwc5iHhZwrE9BLrb/VP7fG1t8tc19XRM=
Subject key identifier:   54:91:99:4A:60:8E:03:BB:27:04:1B:C4:8F:0B:6F:8F:62:29:C4:C2
Authority key identifier: B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30
Certificate issuer:       /CN=A918F8B1/serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530
Certificate serial:       0EEC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft
Manifest number:          0ED0
Signing time:             Wed 22 Jul 2026 17:53:40 +0000
Manifest this update:     Wed 22 Jul 2026 17:53:39 +0000
Manifest next update:     Wed 29 Jul 2026 17:53:39 +0000
Files and hashes:         1: tbP8PnYId-9PjY6EO91ozg9AVTA.crl (hash: j/u3YdRfhHa2+uQbZP3khfc2m9PlYAEin86KZbDioIo=)
                          2: AC549BBCD64C11F086D19BCFA9248E41.roa (hash: vvgoFlOLUvNpwk59Pxo0XUWthaxoz+rQXYsEb/78o8o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.crl
                          rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:53:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3820 (0xeec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F8B1, serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530
        Validity
            Not Before: Jul 22 17:53:39 2026 GMT
            Not After : Jul 29 17:53:39 2026 GMT
        Subject: CN=6a6103a4-9251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:94:d2:73:48:e7:95:84:bd:6c:3c:4e:4e:77:
                    4f:4e:73:9b:3c:3e:41:67:b4:4d:43:b0:4a:b6:3e:
                    3c:88:40:25:fe:5f:0f:78:f2:cb:33:c8:ba:b8:d6:
                    e5:27:ef:26:da:01:b3:0f:b2:07:95:55:b6:ee:13:
                    db:05:75:1d:26:56:5e:2a:51:21:91:8e:05:ab:a3:
                    3e:a4:6d:d8:fb:9d:7c:f5:42:ba:d8:07:f6:15:9b:
                    ae:76:01:a0:39:ba:a2:e7:21:02:9f:00:e4:e3:43:
                    c0:58:29:1c:1b:e0:86:57:9a:b0:c1:47:65:cf:d3:
                    49:e2:2b:4a:bd:be:8e:75:ae:e2:15:15:ac:b2:0e:
                    95:ef:89:49:da:a6:50:8c:92:3e:51:d2:cb:c4:fe:
                    e2:dd:30:52:c8:51:0a:81:90:82:af:8b:4a:64:29:
                    bc:23:4e:f5:dc:c3:67:8e:d5:d5:35:39:b0:91:f9:
                    7d:f3:12:54:43:18:98:c1:83:8e:99:15:b5:2f:d8:
                    54:d1:a6:3d:7f:5b:0b:91:0c:81:37:76:ce:a9:01:
                    27:01:ee:3a:44:b9:90:17:5f:5a:30:1f:c1:75:54:
                    4b:24:e6:c1:1a:4d:34:82:f5:97:f4:f6:56:c4:bd:
                    69:07:09:37:ca:10:d8:07:95:64:68:66:0b:39:0d:
                    a6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:91:99:4A:60:8E:03:BB:27:04:1B:C4:8F:0B:6F:8F:62:29:C4:C2
            X509v3 Authority Key Identifier:
                keyid:B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:1a:7e:b0:28:1c:ad:8e:51:96:f5:fe:81:1b:47:f6:e2:f5:
         96:8b:0d:ca:c6:31:b8:e0:a6:be:a6:46:da:f1:f0:4f:d3:23:
         fd:fc:8f:2f:37:32:4a:66:fe:72:cd:67:0c:11:74:ca:35:d3:
         cf:0d:8f:7b:bc:55:cf:8b:7d:f5:72:65:91:21:dd:38:d5:31:
         7b:8d:e6:93:46:13:f6:63:9f:b4:a0:b7:59:82:da:c2:34:3f:
         a9:2f:59:b9:2d:f4:9c:05:53:d4:58:4b:7f:a2:5c:d8:88:94:
         0d:8a:26:ba:e9:61:53:8c:4a:82:56:58:dd:c5:24:0e:4d:ba:
         21:42:06:d1:26:7e:2c:1a:f1:16:89:50:77:cd:3a:50:d7:9c:
         53:98:85:77:1e:a3:7e:c1:54:16:f1:17:18:ac:00:f7:e5:78:
         dc:b9:dd:fb:32:fa:2c:55:8b:e7:e4:9c:2a:b1:ab:c1:30:63:
         05:c0:9d:48:0f:d9:72:b7:1e:a9:e7:23:86:da:f4:7d:73:33:
         6c:de:59:68:ae:2a:02:e6:e0:74:e0:08:c1:32:60:1b:ce:64:
         d0:6f:8b:33:a4:cd:f8:48:fb:37:44:e9:a8:cc:a8:ea:d9:51:
         5d:52:21:7f:80:a1:f9:29:e8:c9:13:6a:43:40:b8:d6:42:d8:
         c9:2b:73:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:09:57 2026 by rpki-client