Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919243F/E8DCA632B65411F09ECF4B7FC4F9AE02/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.mft
File:                     bh8SQJzzm_kTxDK1h2_6_Z_QYZU.mft (raw, json)
Hash identifier:          87Wur7J2bPr1wMIYrXG78rOBK0H0Blbm0rp+pB67m/Q=
Subject key identifier:   19:9C:44:A2:ED:C4:8A:DD:73:C5:F7:67:30:3E:17:9F:79:91:87:F4
Authority key identifier: 6E:1F:12:40:9C:F3:9B:F9:13:C4:32:B5:87:6F:FA:FD:9F:D0:61:95
Certificate issuer:       /CN=A919243F/serialNumber=6E1F12409CF39BF913C432B5876FFAFD9FD06195
Certificate serial:       8E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919243F/E8DCA632B65411F09ECF4B7FC4F9AE02/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.mft
Manifest number:          8B
Signing time:             Thu 23 Jul 2026 09:25:42 +0000
Manifest this update:     Thu 23 Jul 2026 09:25:41 +0000
Manifest next update:     Thu 30 Jul 2026 09:25:41 +0000
Files and hashes:         1: bh8SQJzzm_kTxDK1h2_6_Z_QYZU.crl (hash: x4tWPm8efTtoLM5VnRkAwPopy+QmzcAwNqbQ/owopMQ=)
                          2: 384B24AAB65511F0AE39E37FC4F9AE02.roa (hash: 5Y743cqmfS64WE3oNhO7FpcyGYqVQg0KBej2FkM8DC4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919243F/E8DCA632B65411F09ECF4B7FC4F9AE02/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.crl
                          rsync://rpki.apnic.net/member_repository/A919243F/E8DCA632B65411F09ECF4B7FC4F9AE02/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:25:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142 (0x8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919243F, serialNumber=6E1F12409CF39BF913C432B5876FFAFD9FD06195
        Validity
            Not Before: Jul 23 09:25:41 2026 GMT
            Not After : Jul 30 09:25:41 2026 GMT
        Subject: CN=6a61de16-c38f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:36:af:fe:ce:f2:68:36:ca:87:96:49:84:d5:
                    fb:ac:59:0e:b0:51:26:fd:e1:d0:68:b6:c5:51:92:
                    d0:e6:f0:1c:97:43:73:4d:17:cc:56:79:70:64:26:
                    05:fe:09:d6:19:04:df:cb:08:d5:e9:17:e2:53:7c:
                    0b:bb:4a:2d:82:34:b5:9d:75:19:a9:f8:f2:8f:1e:
                    75:3a:f9:5f:7d:b7:2f:37:f7:26:ac:9b:d9:86:4f:
                    6f:55:bb:a2:ab:01:50:96:3f:5f:30:fa:e7:9f:fe:
                    fc:e5:73:11:ef:61:7d:a1:e1:cf:94:16:15:6f:49:
                    87:a1:32:a3:2c:6f:61:13:b5:c6:c3:37:c6:e2:55:
                    c3:b1:1b:10:66:8c:89:08:57:cb:c0:e1:b7:16:38:
                    8a:ab:5b:a0:a8:28:ef:40:89:86:78:44:8b:32:be:
                    17:11:d8:48:e5:7b:66:35:ac:e8:1f:6f:bc:3a:2f:
                    69:e9:e5:9e:3d:4c:ce:fc:3e:19:bf:01:f9:6b:31:
                    3f:68:39:66:58:98:83:31:48:4a:48:ca:c1:8a:e3:
                    71:ca:48:27:ce:b4:eb:d4:24:06:ac:e0:13:59:b4:
                    6c:75:c9:9e:ed:cb:bf:5b:03:9c:0b:76:38:80:fe:
                    dc:6b:4b:1a:cc:ad:d1:27:01:43:f6:59:23:bf:38:
                    9b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:9C:44:A2:ED:C4:8A:DD:73:C5:F7:67:30:3E:17:9F:79:91:87:F4
            X509v3 Authority Key Identifier:
                keyid:6E:1F:12:40:9C:F3:9B:F9:13:C4:32:B5:87:6F:FA:FD:9F:D0:61:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919243F/E8DCA632B65411F09ECF4B7FC4F9AE02/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919243F/E8DCA632B65411F09ECF4B7FC4F9AE02/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:c1:a0:69:65:01:66:72:6e:c8:a3:3c:af:bc:f7:c7:f8:0d:
         ed:fb:b4:f4:c3:28:37:58:5f:d7:77:fc:88:ae:3e:65:f3:97:
         6b:0f:30:a8:9b:ae:86:36:19:98:a7:8d:29:f2:aa:0d:51:1d:
         a1:c2:32:7e:9c:a7:f7:af:78:76:17:38:8d:6a:1c:4b:9a:78:
         ce:e2:f0:91:c2:83:73:d3:17:03:6c:f6:52:1b:a5:cd:59:b3:
         ce:59:b2:16:63:91:28:b4:63:db:a9:18:01:8a:bd:ac:6e:8c:
         a6:a9:4b:35:d7:6e:b1:7c:bf:07:b5:cd:27:79:63:4e:77:66:
         ef:01:fa:c4:2c:23:b5:64:c2:4c:42:7f:67:ec:d2:cd:df:d3:
         4e:e0:6b:04:a1:3a:c0:28:84:86:c3:90:92:f2:32:5c:98:62:
         6c:62:12:5d:21:6f:56:8e:ce:28:b8:fc:13:78:50:77:43:34:
         f5:cf:06:bf:ad:18:7e:fc:11:e6:2e:33:63:52:30:1a:44:6c:
         32:45:d3:90:29:70:c1:cd:9c:c1:4d:4a:61:6c:70:0b:c4:83:
         a4:da:d0:1d:04:6d:c3:2f:64:24:ac:90:60:86:f8:9b:0e:28:
         ec:a8:f9:4d:9b:60:81:b6:87:f7:f8:37:85:12:c4:31:a1:bb:
         2d:fb:0f:5b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTI0M0YxMTAvBgNVBAUTKDZFMUYxMjQwOUNGMzlCRjkxM0M0MzJCNTg3NkZGQUZE
OUZEMDYxOTUwHhcNMjYwNzIzMDkyNTQxWhcNMjYwNzMwMDkyNTQxWjAYMRYwFAYD
VQQDEw02YTYxZGUxNi1jMzhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0zav/s7yaDbKh5ZJhNX7rFkOsFEm/eHQaLbFUZLQ5vAcl0NzTRfMVnlwZCYF
/gnWGQTfywjV6RfiU3wLu0otgjS1nXUZqfjyjx51OvlffbcvN/cmrJvZhk9vVbui
qwFQlj9fMPrnn/785XMR72F9oeHPlBYVb0mHoTKjLG9hE7XGwzfG4lXDsRsQZoyJ
CFfLwOG3FjiKq1ugqCjvQImGeESLMr4XEdhI5XtmNazoH2+8Oi9p6eWePUzO/D4Z
vwH5azE/aDlmWJiDMUhKSMrBiuNxykgnzrTr1CQGrOATWbRsdcme7cu/WwOcC3Y4
gP7ca0sazK3RJwFD9lkjvzibJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBmcRKLt
xIrdc8X3ZzA+F595kYf0MB8GA1UdIwQYMBaAFG4fEkCc85v5E8QytYdv+v2f0GGV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjQzRi9FOERDQTYzMkI2
NTQxMUYwOUVDRjRCN0ZDNEY5QUUwMi9iaDhTUUp6em1fa1R4REsxaDJfNl9aX1FZ
WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JoOFNRSnp6bV9rVHhESzFoMl82X1pfUVlaVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MjQzRi9FOERDQTYzMkI2NTQxMUYwOUVDRjRCN0ZDNEY5QUUwMi9iaDhTUUp6em1f
a1R4REsxaDJfNl9aX1FZWlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnMGgaWUBZnJuyKM8r7z3x/gN7fu09MMoN1hf13f8iK4+ZfOXaw8wqJuuhjYZ
mKeNKfKqDVEdocIyfpyn9694dhc4jWocS5p4zuLwkcKDc9MXA2z2UhulzVmzzlmy
FmORKLRj26kYAYq9rG6MpqlLNddusXy/B7XNJ3ljTndm7wH6xCwjtWTCTEJ/Z+zS
zd/TTuBrBKE6wCiEhsOQkvIyXJhibGISXSFvVo7OKLj8E3hQd0M09c8Gv60YfvwR
5i4zY1IwGkRsMkXTkClwwc2cwU1KYWxwC8SDpNrQHQRtwy9kJKyQYIb4mw4o7Kj5
TZtggbaH9/g3hRLEMaG7LfsPWw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:48:46 2026 by rpki-client