Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.mft
File:                     8YaDAEWuVIbpCXNDfanSB6VmhpE.mft (raw, json)
Hash identifier:          n/jtjwI7O1cRQAKBNw48D5QZeK7PK0fufbltEhGINIM=
Subject key identifier:   E7:46:09:07:93:9D:C6:3C:18:7E:54:4E:14:76:DE:F6:DA:6A:FE:10
Authority key identifier: F1:86:83:00:45:AE:54:86:E9:09:73:43:7D:A9:D2:07:A5:66:86:91
Certificate issuer:       /CN=A91F5AAA/serialNumber=F186830045AE5486E90973437DA9D207A5668691
Certificate serial:       32E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YaDAEWuVIbpCXNDfanSB6VmhpE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.mft
Manifest number:          32E7
Signing time:             Thu 24 Sep 2026 15:23:13 +0000
Manifest this update:     Thu 24 Sep 2026 15:23:12 +0000
Manifest next update:     Thu 01 Oct 2026 15:23:12 +0000
Files and hashes:         1: 8YaDAEWuVIbpCXNDfanSB6VmhpE.crl (hash: yCsku2vaygC9qopYuYWFetu9URM/f0AtyoxUfKpo0fI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.crl
                          rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YaDAEWuVIbpCXNDfanSB6VmhpE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 15:23:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13031 (0x32e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5AAA, serialNumber=F186830045AE5486E90973437DA9D207A5668691
        Validity
            Not Before: Sep 24 15:23:12 2026 GMT
            Not After : Oct  1 15:23:12 2026 GMT
        Subject: CN=6ab54061-d133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5b:e9:b7:8e:6d:ed:d5:0f:86:0c:52:3d:f7:
                    dc:be:15:40:09:fd:b8:b5:6f:d4:9a:75:1b:a2:55:
                    5c:2a:da:7f:65:0c:78:a4:62:78:43:51:34:41:93:
                    a3:43:f7:65:08:d1:6e:c3:d4:d3:d4:01:4c:b1:1b:
                    f8:e3:4c:fc:c0:9e:60:a7:14:54:e1:a4:2b:83:e1:
                    67:bd:d5:41:0a:e0:fd:c2:8a:67:5c:fc:9f:7e:1f:
                    0a:b7:e8:79:bf:ed:e5:1f:ae:91:aa:e0:90:f6:fd:
                    51:9d:00:9b:d1:42:1f:02:3d:cc:02:c4:c3:bb:46:
                    7a:4c:cb:a8:b5:85:73:fa:bb:de:61:97:3b:9f:c0:
                    76:27:64:19:2d:18:40:11:40:ea:1b:88:c8:58:69:
                    ae:d6:85:15:72:6e:ad:5a:d5:0c:e0:5e:55:8c:19:
                    be:4d:bf:fc:53:50:54:36:00:f0:68:50:ba:8f:09:
                    67:02:11:ef:dd:ac:7e:54:98:da:43:0b:80:df:6f:
                    8a:70:b6:ca:d7:01:6e:6c:b8:34:68:9c:41:66:eb:
                    8e:4a:04:93:f6:9c:fa:87:3c:6f:2f:a6:ab:77:74:
                    b7:ab:38:05:37:0c:49:8e:d3:e7:bf:1a:0f:4a:b6:
                    3b:32:fc:b8:64:aa:3b:24:a4:36:62:b3:52:ff:3f:
                    8a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:46:09:07:93:9D:C6:3C:18:7E:54:4E:14:76:DE:F6:DA:6A:FE:10
            X509v3 Authority Key Identifier:
                keyid:F1:86:83:00:45:AE:54:86:E9:09:73:43:7D:A9:D2:07:A5:66:86:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YaDAEWuVIbpCXNDfanSB6VmhpE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:1d:69:98:8c:2c:7a:9a:7e:a4:e5:ab:e4:b2:a8:23:ad:88:
         82:ae:42:2e:13:3e:20:1b:74:a6:9a:bc:fe:92:5c:82:be:b3:
         fa:de:c5:e7:9b:59:1e:3d:28:60:52:97:48:ea:bc:86:8c:5f:
         88:d3:83:ea:09:1c:fe:97:34:a2:2b:09:5b:04:b8:c2:36:3f:
         35:8f:51:9b:69:3e:c7:b9:0d:c1:45:fd:6b:d8:03:4c:bc:a1:
         c2:b9:95:15:7d:07:65:58:eb:c5:e3:8d:93:53:d5:3a:95:f6:
         2d:17:6f:bb:08:39:71:29:80:81:e5:5d:2d:7f:9c:f3:cb:89:
         38:16:57:2b:87:5b:4c:63:59:87:da:aa:d6:bb:d7:65:1c:1a:
         21:38:09:20:63:4c:61:a7:0e:83:d8:a9:3e:ad:a5:05:88:0e:
         ff:2b:8f:d3:08:d4:98:a7:1e:c0:e9:04:eb:79:c4:fd:43:75:
         71:0e:31:94:0a:60:e0:f4:e3:b7:68:5c:2e:81:22:f3:f2:0d:
         be:30:4f:ab:5f:3b:91:25:03:79:85:95:62:fc:db:d6:9b:dd:
         b5:44:dd:08:f7:77:df:62:57:83:fc:a6:a4:5d:02:ca:5f:e2:
         27:2d:31:bf:05:f8:42:43:7f:83:e4:60:40:ff:a1:bf:f8:94:
         63:ca:95:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:12:52 2026 by rpki-client