Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0ECA/EB2C1B86819011F19BD4BAFB95A30FBC/rwPQUKmJPHMQyt20Cu2s2rXiOOA.mft
File:                     rwPQUKmJPHMQyt20Cu2s2rXiOOA.mft (raw, json)
Hash identifier:          cSBiNSladoYJ/7qz+6cc2MV5gNRad8z0E63tLsSOcsA=
Subject key identifier:   CB:13:1B:29:8C:19:E1:19:74:A3:75:76:84:B5:7A:C5:5D:DF:7C:74
Authority key identifier: AF:03:D0:50:A9:89:3C:73:10:CA:DD:B4:0A:ED:AC:DA:B5:E2:38:E0
Certificate issuer:       /CN=A91D0ECA/serialNumber=AF03D050A9893C7310CADDB40AEDACDAB5E238E0
Certificate serial:       0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwPQUKmJPHMQyt20Cu2s2rXiOOA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0ECA/EB2C1B86819011F19BD4BAFB95A30FBC/rwPQUKmJPHMQyt20Cu2s2rXiOOA.mft
Manifest number:          08
Signing time:             Thu 23 Jul 2026 11:19:01 +0000
Manifest this update:     Thu 23 Jul 2026 11:19:00 +0000
Manifest next update:     Thu 30 Jul 2026 11:19:00 +0000
Files and hashes:         1: rwPQUKmJPHMQyt20Cu2s2rXiOOA.crl (hash: nVmGSVBAzvicByZxOvrr99BmQQp4LWqKQiRiagLCEV8=)
                          2: BD22BBE0819111F19E01271496A30FBC.roa (hash: 8ErZg6ohMcZyXajrV7ek0726t8ekgrrUiQOSg+s1XoU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0ECA/EB2C1B86819011F19BD4BAFB95A30FBC/rwPQUKmJPHMQyt20Cu2s2rXiOOA.crl
                          rsync://rpki.apnic.net/member_repository/A91D0ECA/EB2C1B86819011F19BD4BAFB95A30FBC/rwPQUKmJPHMQyt20Cu2s2rXiOOA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwPQUKmJPHMQyt20Cu2s2rXiOOA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 11:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0ECA, serialNumber=AF03D050A9893C7310CADDB40AEDACDAB5E238E0
        Validity
            Not Before: Jul 23 11:19:00 2026 GMT
            Not After : Jul 30 11:19:00 2026 GMT
        Subject: CN=6a61f8a5-02f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:80:0f:8f:af:0e:50:70:eb:e1:fa:94:cd:5f:
                    5f:b5:ec:6a:7e:a7:fc:32:56:1a:ed:d8:60:4e:39:
                    cf:35:70:f4:8a:db:0d:29:57:16:67:d3:7c:f7:93:
                    54:24:01:7d:91:61:4d:8a:78:ac:e2:62:24:92:c5:
                    79:6b:6b:90:25:9f:5d:64:88:7c:05:e0:25:58:5b:
                    df:d5:7c:bf:ee:ff:c4:2d:20:b4:aa:7c:91:d5:87:
                    e5:bc:ba:ca:f9:65:28:1f:25:0a:9e:11:d1:00:30:
                    10:9b:5f:fa:5b:9f:37:d6:db:c3:04:9a:fb:b4:9a:
                    79:9d:92:5c:65:08:1f:df:21:11:f6:62:e4:34:4c:
                    2c:ef:99:d4:b3:45:31:77:8c:f2:fb:04:7d:44:f1:
                    9f:e7:d7:01:88:39:10:34:2d:cd:aa:5d:9a:83:60:
                    fa:16:4c:1a:4a:68:de:00:d9:3a:42:38:fb:3d:26:
                    e9:da:0e:e0:fc:46:7b:8f:20:c2:90:02:c3:7a:c3:
                    a9:56:55:97:41:f0:20:58:f4:70:21:3b:8b:d0:f1:
                    01:22:b3:33:a5:ef:f3:72:57:d7:8c:1e:1d:01:e1:
                    6d:6e:cd:41:85:cc:4f:15:09:0e:5d:2e:f1:f0:24:
                    a5:91:81:41:5e:bb:ec:84:d4:cc:31:bf:08:fb:25:
                    16:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:13:1B:29:8C:19:E1:19:74:A3:75:76:84:B5:7A:C5:5D:DF:7C:74
            X509v3 Authority Key Identifier:
                keyid:AF:03:D0:50:A9:89:3C:73:10:CA:DD:B4:0A:ED:AC:DA:B5:E2:38:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0ECA/EB2C1B86819011F19BD4BAFB95A30FBC/rwPQUKmJPHMQyt20Cu2s2rXiOOA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwPQUKmJPHMQyt20Cu2s2rXiOOA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0ECA/EB2C1B86819011F19BD4BAFB95A30FBC/rwPQUKmJPHMQyt20Cu2s2rXiOOA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:f6:cf:63:0b:02:8d:73:eb:11:48:cd:28:06:9a:13:a4:7c:
         bd:75:f4:2f:27:77:0f:e9:e7:fd:a6:94:e8:ed:3f:e2:5d:1f:
         a9:dc:d4:d5:b5:b0:f2:3d:69:d0:96:e8:bd:66:d1:4c:74:43:
         76:28:c1:60:29:88:fa:5d:68:3b:59:fb:88:52:37:7d:6d:42:
         ca:7d:d7:80:53:d7:3a:7d:b7:32:68:7a:44:bf:4e:78:29:e0:
         83:47:41:d6:61:37:7f:a7:1a:db:75:20:a2:1d:41:e9:c5:27:
         8f:fa:5e:c7:28:c3:e4:f5:b3:6e:dd:3a:a4:d8:15:cf:fa:0c:
         dd:39:1b:75:d7:19:63:8f:62:1f:ee:4b:94:3e:b7:90:b1:b1:
         27:eb:2f:c1:56:4c:bc:91:21:7c:ee:2a:e2:56:b3:de:d2:86:
         72:e8:01:57:5e:26:1f:51:d0:3d:b5:55:19:40:66:7b:97:88:
         f8:57:a3:4b:6b:c6:3f:1f:3f:45:04:1d:07:d8:c4:fa:85:f7:
         73:72:07:41:30:47:f7:45:d0:61:13:d4:5b:b9:2f:6c:79:22:
         cd:02:4e:bc:19:fd:76:7d:9c:08:79:b8:bd:ec:5a:1e:e8:ee:
         c6:7e:c7:98:84:f1:f1:0f:6a:90:17:a3:e6:82:0e:63:ca:f6:
         71:d7:12:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:58:44 2026 by rpki-client