Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.mft
File:                     q8dSj86PeUX0YPdSdIJB2tVnilo.mft (raw, json)
Hash identifier:          rkU498A1yjXGfKSg8821xmdSmi6EbAPH3u11zpDPg/M=
Subject key identifier:   5A:18:AA:98:4F:69:20:87:21:27:16:42:09:BD:DD:CC:96:EB:AD:3D
Authority key identifier: AB:C7:52:8F:CE:8F:79:45:F4:60:F7:52:74:82:41:DA:D5:67:8A:5A
Certificate issuer:       /CN=A91F367D/serialNumber=ABC7528FCE8F7945F460F752748241DAD5678A5A
Certificate serial:       0885
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q8dSj86PeUX0YPdSdIJB2tVnilo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.mft
Manifest number:          087D
Signing time:             Wed 22 Jul 2026 21:13:42 +0000
Manifest this update:     Wed 22 Jul 2026 21:13:42 +0000
Manifest next update:     Wed 29 Jul 2026 21:13:42 +0000
Files and hashes:         1: q8dSj86PeUX0YPdSdIJB2tVnilo.crl (hash: AwRM2981LQC6+jkuLhWJfuAGw2c4am2ZXAgNYfW9VLw=)
                          2: AC1CD860039511EBBE8C7F47C4F9AE02.roa (hash: qS1ZoDt2aNwKGyjoFIpFYDmjrousmLlYXDWuZSQ3NCA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.crl
                          rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q8dSj86PeUX0YPdSdIJB2tVnilo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:13:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2181 (0x885)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F367D, serialNumber=ABC7528FCE8F7945F460F752748241DAD5678A5A
        Validity
            Not Before: Jul 22 21:13:42 2026 GMT
            Not After : Jul 29 21:13:42 2026 GMT
        Subject: CN=6a613286-df2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3b:05:b8:1f:0a:f5:14:6b:c1:20:1b:db:7a:
                    f9:42:ff:12:19:a8:78:de:e4:20:ba:64:a6:68:ec:
                    7f:66:69:76:90:60:57:e1:6b:71:1d:48:05:02:72:
                    a3:60:a3:41:f2:e9:d4:22:85:99:d6:a1:e3:d0:46:
                    09:28:18:d6:d4:29:db:79:74:ec:74:15:67:78:4c:
                    60:17:9d:a9:c6:6b:eb:4d:8f:24:41:46:2a:9a:8f:
                    f2:64:91:bd:11:cb:ad:f8:ea:52:0f:ae:36:15:01:
                    5b:62:c5:ac:99:b6:f0:85:24:f6:79:af:4f:52:5d:
                    4b:80:3f:02:df:4d:69:3c:6a:ab:3a:f9:9b:16:e0:
                    a5:6e:0e:5c:a2:42:6e:6e:04:3c:ff:8d:e0:3c:ea:
                    69:d2:05:67:ea:12:18:72:b0:14:b7:67:55:9f:e6:
                    70:b0:46:de:36:a4:33:21:51:84:98:6e:5a:9a:72:
                    c6:81:6a:1b:c2:96:16:c8:ab:9c:bc:0f:02:ed:91:
                    ad:63:02:f1:2e:38:5e:a0:0e:6c:57:6e:88:92:a0:
                    bd:89:d8:a7:6e:12:17:70:79:93:9d:ee:b2:92:76:
                    e6:6d:23:4d:53:76:4f:35:24:0e:ef:62:f8:02:df:
                    b3:6d:c9:64:05:24:12:5b:3c:d7:5c:6f:8f:a3:65:
                    2a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:18:AA:98:4F:69:20:87:21:27:16:42:09:BD:DD:CC:96:EB:AD:3D
            X509v3 Authority Key Identifier:
                keyid:AB:C7:52:8F:CE:8F:79:45:F4:60:F7:52:74:82:41:DA:D5:67:8A:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q8dSj86PeUX0YPdSdIJB2tVnilo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:f3:26:8d:f3:c0:8e:49:e4:39:54:8f:8c:e5:11:c7:e2:05:
         bd:4f:a9:60:29:2a:42:c9:5a:c5:ff:0d:0a:29:a2:e4:4b:6d:
         d1:52:d9:09:8b:99:f1:e0:3b:57:34:fe:06:19:14:b3:ad:49:
         84:c3:7a:59:ad:b2:0e:eb:ed:85:5f:23:f2:51:d2:82:8b:cb:
         81:28:ba:75:04:67:39:d9:c3:82:70:9e:b9:b1:e8:fc:b8:c4:
         ed:5a:0a:c8:f8:1d:86:44:45:2e:e4:3a:ff:b2:ee:27:55:9a:
         f5:6c:6c:d5:90:f7:ab:bd:c6:07:71:c9:33:a0:6f:74:78:bc:
         88:96:c4:e2:8c:9c:7d:3c:36:b5:8d:65:bf:e8:2a:96:dc:ec:
         32:34:ff:d6:79:e8:72:9d:4d:5c:b8:44:09:50:31:7f:72:a7:
         6b:0e:88:e3:1e:5f:1b:7a:8d:64:b3:ee:30:99:28:a3:bb:59:
         5e:c7:f0:cf:e1:10:53:d2:b6:ea:2b:b1:be:d0:a7:c4:5d:7a:
         47:e9:4f:11:91:95:f6:93:21:9a:ed:b5:8a:31:88:e3:aa:1f:
         bb:1f:79:84:e9:61:bc:39:85:57:d6:3f:e5:09:2f:28:0c:97:
         44:a1:90:f1:9c:f0:0f:92:a9:c5:9c:86:25:06:97:5f:84:f9:
         11:96:49:f8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjM2N0QxMTAvBgNVBAUTKEFCQzc1MjhGQ0U4Rjc5NDVGNDYwRjc1Mjc0ODI0MURB
RDU2NzhBNUEwHhcNMjYwNzIyMjExMzQyWhcNMjYwNzI5MjExMzQyWjAYMRYwFAYD
VQQDEw02YTYxMzI4Ni1kZjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwzsFuB8K9RRrwSAb23r5Qv8SGah43uQgumSmaOx/Zml2kGBX4WtxHUgFAnKj
YKNB8unUIoWZ1qHj0EYJKBjW1CnbeXTsdBVneExgF52pxmvrTY8kQUYqmo/yZJG9
Ecut+OpSD642FQFbYsWsmbbwhST2ea9PUl1LgD8C301pPGqrOvmbFuClbg5cokJu
bgQ8/43gPOpp0gVn6hIYcrAUt2dVn+ZwsEbeNqQzIVGEmG5amnLGgWobwpYWyKuc
vA8C7ZGtYwLxLjheoA5sV26IkqC9idinbhIXcHmTne6yknbmbSNNU3ZPNSQO72L4
At+zbclkBSQSWzzXXG+Po2UqQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFoYqphP
aSCHIScWQgm93cyW6609MB8GA1UdIwQYMBaAFKvHUo/Oj3lF9GD3UnSCQdrVZ4pa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzY3RC85OURBN0FCRTAz
OTQxMUVCQjY2NDg0NDZDNEY5QUUwMi9xOGRTajg2UGVVWDBZUGRTZElKQjJ0Vm5p
bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3E4ZFNqODZQZVVYMFlQZFNkSUpCMnRWbmlsby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MzY3RC85OURBN0FCRTAzOTQxMUVCQjY2NDg0NDZDNEY5QUUwMi9xOGRTajg2UGVV
WDBZUGRTZElKQjJ0Vm5pbG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAU/MmjfPAjknkOVSPjOURx+IFvU+pYCkqQslaxf8NCimi5Ett0VLZCYuZ8eA7
VzT+BhkUs61JhMN6Wa2yDuvthV8j8lHSgovLgSi6dQRnOdnDgnCeubHo/LjE7VoK
yPgdhkRFLuQ6/7LuJ1Wa9Wxs1ZD3q73GB3HJM6BvdHi8iJbE4oycfTw2tY1lv+gq
ltzsMjT/1nnocp1NXLhECVAxf3Knaw6I4x5fG3qNZLPuMJkoo7tZXsfwz+EQU9K2
6iuxvtCnxF16R+lPEZGV9pMhmu21ijGI46ofux95hOlhvDmFV9Y/5QkvKAyXRKGQ
8ZzwD5KpxZyGJQaXX4T5EZZJ+A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:56:26 2026 by rpki-client