Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAEAF/BE3521B833F111EDB8361086C4F9AE02/8ghPeg88CpH4Jf79nxA18zVBWEw.mft
File:                     8ghPeg88CpH4Jf79nxA18zVBWEw.mft (raw, json)
Hash identifier:          G/0yVI58B4qWNlnwlKT0ZFJzKCv7GVP5omC6SLi0NNc=
Subject key identifier:   D3:73:6F:56:3C:CA:12:63:7B:79:0C:D6:8D:B7:EF:C5:B2:91:B6:9C
Authority key identifier: F2:08:4F:7A:0F:3C:0A:91:F8:25:FE:FD:9F:10:35:F3:35:41:58:4C
Certificate issuer:       /CN=A91EAEAF/serialNumber=F2084F7A0F3C0A91F825FEFD9F1035F33541584C
Certificate serial:       02F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ghPeg88CpH4Jf79nxA18zVBWEw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAEAF/BE3521B833F111EDB8361086C4F9AE02/8ghPeg88CpH4Jf79nxA18zVBWEw.mft
Manifest number:          02F0
Signing time:             Thu 23 Jul 2026 02:11:35 +0000
Manifest this update:     Thu 23 Jul 2026 02:11:34 +0000
Manifest next update:     Thu 30 Jul 2026 02:11:34 +0000
Files and hashes:         1: 8ghPeg88CpH4Jf79nxA18zVBWEw.crl (hash: +pjC1l/YvjsThNbm9BDXJbWsS3UVCeje+6BbM6af6G8=)
                          2: EF0EFF5833F511EDA5C4F37DC4F9AE02.roa (hash: IG2v2fd9rTN5PBYJp2Z5UyST9QDIg6t5w3Te4y8DFac=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAEAF/BE3521B833F111EDB8361086C4F9AE02/8ghPeg88CpH4Jf79nxA18zVBWEw.crl
                          rsync://rpki.apnic.net/member_repository/A91EAEAF/BE3521B833F111EDB8361086C4F9AE02/8ghPeg88CpH4Jf79nxA18zVBWEw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ghPeg88CpH4Jf79nxA18zVBWEw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 02:11:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 760 (0x2f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAEAF, serialNumber=F2084F7A0F3C0A91F825FEFD9F1035F33541584C
        Validity
            Not Before: Jul 23 02:11:34 2026 GMT
            Not After : Jul 30 02:11:34 2026 GMT
        Subject: CN=6a617857-bfae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:09:15:93:b3:11:2a:b2:9a:b6:e7:7b:7a:03:
                    d8:88:f2:ff:a4:23:c9:08:5e:9e:66:14:d3:f3:05:
                    13:73:55:be:90:02:4f:65:e5:ff:f2:7f:c7:a8:ac:
                    02:bc:e8:c1:e2:52:a4:d2:db:b2:19:aa:bb:db:77:
                    d5:39:3c:98:1e:14:44:a8:c4:f2:29:b2:5c:95:fe:
                    9e:e4:e8:c6:b0:ca:55:05:db:6f:ff:45:f0:8b:0e:
                    c2:c6:3d:ec:5e:f7:f6:8d:9f:98:f3:f2:96:83:fe:
                    9e:c6:f5:35:25:fd:32:c6:da:74:76:3a:51:18:4d:
                    f3:dc:7a:f5:70:27:8d:b0:28:d1:7e:d6:a9:d0:f0:
                    21:86:1e:32:67:29:3f:f7:31:75:63:39:af:c2:b3:
                    af:9f:bd:0a:af:db:f3:27:f2:88:87:d4:ec:10:6c:
                    95:57:f0:4b:52:ce:d2:ea:ee:4c:c8:e4:a9:a3:7e:
                    2e:44:c2:88:df:8c:93:3d:ae:1f:8d:bf:fe:65:91:
                    ab:ff:38:77:e9:1a:8f:3f:99:71:c1:b6:c1:74:46:
                    e6:29:4f:c6:f0:65:80:32:ef:f1:98:cc:22:99:33:
                    68:a4:12:a6:a5:c0:3a:b3:61:b0:19:24:1b:bc:3e:
                    e9:2a:22:0b:38:bc:ca:b4:af:1f:0e:d2:fe:eb:ce:
                    17:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:73:6F:56:3C:CA:12:63:7B:79:0C:D6:8D:B7:EF:C5:B2:91:B6:9C
            X509v3 Authority Key Identifier:
                keyid:F2:08:4F:7A:0F:3C:0A:91:F8:25:FE:FD:9F:10:35:F3:35:41:58:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAEAF/BE3521B833F111EDB8361086C4F9AE02/8ghPeg88CpH4Jf79nxA18zVBWEw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ghPeg88CpH4Jf79nxA18zVBWEw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAEAF/BE3521B833F111EDB8361086C4F9AE02/8ghPeg88CpH4Jf79nxA18zVBWEw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:ef:f9:63:41:5d:ed:9f:fe:91:16:ed:e8:05:10:90:fc:78:
         dc:bb:d9:a6:f6:92:21:f1:df:d5:15:31:66:54:b3:cb:b9:3f:
         1c:00:f7:8b:68:af:d0:06:8e:ab:6a:df:e0:a4:ed:01:b1:37:
         32:ab:a9:e4:89:e0:2a:ae:59:d1:31:8f:ce:0c:2f:9b:ce:e6:
         a5:ac:b9:0d:b3:19:f0:71:e9:f4:fa:86:1c:60:50:1d:bd:d9:
         85:9d:8d:f5:f3:ee:14:19:65:fd:56:56:f6:34:88:3f:35:4a:
         76:d6:5b:5e:0b:4c:ef:47:9c:05:c5:84:1e:80:15:2b:51:1c:
         a1:43:22:3a:64:dc:72:47:14:45:5d:4d:3e:cb:34:06:68:62:
         f5:f8:ee:81:08:cd:f5:76:c3:16:18:90:cf:90:fc:0f:82:63:
         a1:29:2a:e1:c8:75:a3:17:d1:40:ad:86:dc:1d:e8:ea:9c:3d:
         90:f5:e9:77:7d:25:5b:20:d4:66:37:34:8c:f8:20:83:9c:9c:
         6d:b2:c3:d6:da:fe:a7:2b:aa:72:31:47:26:2f:95:72:d2:b5:
         b9:f3:7d:40:18:39:2c:dc:f8:be:78:24:a3:95:55:0d:a6:b5:
         ea:bb:3b:91:54:17:8c:00:7e:f4:a2:b7:ab:17:d2:b7:72:a9:
         db:0e:17:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:57:15 2026 by rpki-client