Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft
File:                     8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft (raw, json)
Hash identifier:          JqQQvL6yYdxB0c9apRJK8Btm0iHKcEn6DDopM6c5YIM=
Subject key identifier:   32:19:0E:3C:DD:01:6E:33:C7:D0:C9:F0:DA:56:E7:1E:B6:90:BB:26
Authority key identifier: F3:01:2C:ED:17:68:DE:AA:64:C4:E9:36:B8:6C:B3:1E:16:CE:FC:BA
Certificate issuer:       /CN=A91206B5/serialNumber=F3012CED1768DEAA64C4E936B86CB31E16CEFCBA
Certificate serial:       0A87
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft
Manifest number:          0A7F
Signing time:             Fri 12 Jun 2026 19:35:34 +0000
Manifest this update:     Fri 12 Jun 2026 19:35:34 +0000
Manifest next update:     Fri 19 Jun 2026 19:35:34 +0000
Files and hashes:         1: 8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.crl (hash: j3bkYCVVaOvM+Jb/Cvc+Hc9gss+SN5H0LzH9SddY2B0=)
                          2: 7F4DB79C82F211EAAC592A59C4F9AE02.roa (hash: fJPw+8jILHi38OrKB/eoJlQncOyg85Mi4es0uePIWEg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.crl
                          rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 19:35:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2695 (0xa87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91206B5, serialNumber=F3012CED1768DEAA64C4E936B86CB31E16CEFCBA
        Validity
            Not Before: Jun 12 19:35:34 2026 GMT
            Not After : Jun 19 19:35:34 2026 GMT
        Subject: CN=6a2c5f86-583a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:78:73:74:4a:e5:5f:1f:8c:d5:fc:10:9f:12:
                    c3:4e:53:68:44:4c:5f:00:85:f0:5d:e6:66:6b:5f:
                    9f:d2:f7:30:24:93:a7:d9:e3:50:8b:9a:1b:a4:b1:
                    b4:c7:de:f5:27:8f:75:6f:fc:c6:20:79:39:6e:31:
                    1d:77:9e:45:3f:5e:ec:01:7b:de:d9:f4:2d:5c:e2:
                    3f:6d:f6:2a:85:35:b8:d3:ad:dd:00:09:3f:00:17:
                    59:4b:37:82:c0:11:63:ba:de:d8:ca:03:84:b3:e8:
                    a0:2f:59:1c:71:ec:20:7b:4b:27:c1:f0:1b:59:b6:
                    be:05:ce:ca:32:49:b7:7a:99:d9:92:ff:94:ba:c1:
                    af:62:9b:56:38:33:99:cb:71:36:cc:a1:26:30:ce:
                    ad:58:cf:a8:21:8c:69:f3:2b:9e:c7:f5:d5:68:a2:
                    71:e1:f4:c0:b5:13:33:5f:d8:a1:4d:30:fe:df:ee:
                    a1:38:a3:3d:84:47:ff:0f:25:99:36:aa:fe:2a:03:
                    e0:1d:91:08:e7:ec:fd:b3:ad:a2:29:ca:0c:b0:06:
                    c9:85:84:b5:e4:41:2e:41:ad:b8:c3:b0:5e:7d:25:
                    ce:4b:de:06:bf:6f:c8:d9:b5:30:f8:6c:54:0b:f5:
                    26:1a:9c:3b:fe:2e:4b:8e:46:02:db:10:6f:e5:5f:
                    b6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:19:0E:3C:DD:01:6E:33:C7:D0:C9:F0:DA:56:E7:1E:B6:90:BB:26
            X509v3 Authority Key Identifier:
                keyid:F3:01:2C:ED:17:68:DE:AA:64:C4:E9:36:B8:6C:B3:1E:16:CE:FC:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:8e:fd:d7:7c:24:d1:6e:c0:25:94:2e:fa:9a:42:fe:82:18:
         0e:fd:20:d1:d9:68:1b:e6:73:f0:39:28:66:2c:32:26:3d:ed:
         6e:47:57:f3:45:95:32:30:07:c0:66:6d:2e:c5:03:8f:6a:dd:
         e0:d6:94:cc:7c:15:f7:9e:e0:6c:8d:04:59:5b:91:22:2f:93:
         06:09:ca:3f:ed:f8:4b:01:cd:36:00:49:28:e0:d0:fa:7f:b9:
         5f:a1:90:60:19:38:b5:97:05:af:18:3c:83:c2:2b:c8:9e:74:
         d9:e4:01:3a:28:99:88:1f:89:c9:b1:cd:7e:78:f4:31:cf:6a:
         7d:a0:2a:ff:7e:fa:87:a2:e2:3c:cf:1c:4c:d6:f8:fd:07:5f:
         a1:f3:33:57:2c:df:17:2e:f4:ca:04:d6:e2:71:59:90:29:fe:
         53:d9:c7:30:8b:61:3e:85:ef:51:37:5a:a6:80:c7:98:1d:58:
         52:c2:f9:a8:a3:4c:b4:42:f2:21:7d:c6:a2:aa:c2:9a:c4:1a:
         60:12:da:61:a5:96:a2:c2:5c:ac:ef:d2:59:a3:7b:94:13:5c:
         fd:6e:3d:2d:a0:5e:5b:14:4e:d9:dd:6e:5b:03:a3:61:cd:59:
         6c:f2:42:2d:f4:6e:56:26:63:22:e3:ad:cd:10:ad:8d:dd:89:
         5d:dc:f4:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:39:28 2026 by rpki-client