Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9124096/08B40C3ABB9F11F0AF9A5D1AC4F9AE02/voedoSIo9Sr7TRD2P4DgJvSFFqA.mft
File:                     voedoSIo9Sr7TRD2P4DgJvSFFqA.mft (raw, json)
Hash identifier:          cUUL0X6YhWs4HAD5SB49pHnw17CMslRmvM2rHIZDxvc=
Subject key identifier:   41:56:39:8E:14:E9:62:68:5D:F3:E9:E5:0A:D2:EA:80:6A:10:AC:B1
Authority key identifier: BE:87:9D:A1:22:28:F5:2A:FB:4D:10:F6:3F:80:E0:26:F4:85:16:A0
Certificate issuer:       /CN=A9124096/serialNumber=BE879DA12228F52AFB4D10F63F80E026F48516A0
Certificate serial:       8E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voedoSIo9Sr7TRD2P4DgJvSFFqA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9124096/08B40C3ABB9F11F0AF9A5D1AC4F9AE02/voedoSIo9Sr7TRD2P4DgJvSFFqA.mft
Manifest number:          8A
Signing time:             Mon 27 Jul 2026 09:44:39 +0000
Manifest this update:     Mon 27 Jul 2026 09:44:38 +0000
Manifest next update:     Mon 03 Aug 2026 09:44:38 +0000
Files and hashes:         1: voedoSIo9Sr7TRD2P4DgJvSFFqA.crl (hash: bvYQsxoqUr7Kx0B0Zxeedqc1WBjEsZHUeq6eVxMoCUs=)
                          2: 0E3F5E5CBBB811F0B7A3E30BC4F9AE02.roa (hash: 4zRuuR1sO9CKHH38Jna18wV19qizi3M0wtTY0eQl8yM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9124096/08B40C3ABB9F11F0AF9A5D1AC4F9AE02/voedoSIo9Sr7TRD2P4DgJvSFFqA.crl
                          rsync://rpki.apnic.net/member_repository/A9124096/08B40C3ABB9F11F0AF9A5D1AC4F9AE02/voedoSIo9Sr7TRD2P4DgJvSFFqA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voedoSIo9Sr7TRD2P4DgJvSFFqA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:44:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142 (0x8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9124096, serialNumber=BE879DA12228F52AFB4D10F63F80E026F48516A0
        Validity
            Not Before: Jul 27 09:44:38 2026 GMT
            Not After : Aug  3 09:44:38 2026 GMT
        Subject: CN=6a672886-0a48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ff:a6:20:a4:29:3d:12:c8:ae:d3:17:dd:23:
                    4d:2b:a0:1e:49:1e:be:68:05:e6:6e:3a:83:e0:48:
                    4f:7f:6c:02:2c:91:49:72:a9:1d:76:0f:1b:a9:2d:
                    ac:c0:15:68:b8:48:98:d5:ef:8b:e8:22:0d:4e:e6:
                    20:4d:4a:8b:d6:b2:7f:d2:ef:8e:af:bb:de:e0:d1:
                    c9:ef:da:53:e0:f1:73:19:68:22:5c:65:ae:8b:dc:
                    07:36:b0:22:88:ec:ac:c4:ad:9f:6c:92:08:d1:cc:
                    80:53:26:0c:2c:ea:97:cb:77:af:5b:83:83:b8:b3:
                    06:37:ff:fe:2e:0f:c4:cd:81:49:08:f4:b9:fe:71:
                    57:cd:aa:b8:71:ee:aa:60:b1:2b:3b:d7:a6:89:12:
                    b7:54:b3:04:50:fa:32:b1:8b:12:e0:ef:15:12:5f:
                    c1:f0:6b:5c:1b:34:00:38:f3:22:b0:9a:09:ef:82:
                    bd:92:f3:81:23:d1:4b:0d:9e:5f:3a:60:66:14:65:
                    90:cb:63:2c:23:dd:c3:df:ac:0d:5c:16:bd:e0:2c:
                    7f:d3:38:78:c5:75:a7:6e:4d:8c:37:22:46:18:fc:
                    00:95:bd:04:51:d4:c7:01:6f:4e:9a:85:e2:eb:70:
                    50:71:98:4d:83:32:6c:5a:06:cb:e6:1b:a8:27:ff:
                    88:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:56:39:8E:14:E9:62:68:5D:F3:E9:E5:0A:D2:EA:80:6A:10:AC:B1
            X509v3 Authority Key Identifier:
                keyid:BE:87:9D:A1:22:28:F5:2A:FB:4D:10:F6:3F:80:E0:26:F4:85:16:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9124096/08B40C3ABB9F11F0AF9A5D1AC4F9AE02/voedoSIo9Sr7TRD2P4DgJvSFFqA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voedoSIo9Sr7TRD2P4DgJvSFFqA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124096/08B40C3ABB9F11F0AF9A5D1AC4F9AE02/voedoSIo9Sr7TRD2P4DgJvSFFqA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:77:70:96:9a:1b:72:23:62:a4:f3:43:cc:85:f9:71:96:b4:
         68:92:98:62:cc:8f:4c:7c:45:24:4f:8f:f3:39:87:9f:78:9b:
         81:a4:66:dc:e4:9f:ca:96:e7:69:8d:d4:3c:67:3a:c7:38:f1:
         7b:ad:6e:8a:ea:bc:aa:7c:f5:2e:f4:b6:32:8d:8e:7e:f5:a0:
         5a:ec:7d:5b:3a:85:68:30:db:89:5c:b1:e9:4a:2e:b6:5c:3e:
         aa:02:8d:fb:b5:07:19:7d:fe:98:c5:0e:70:b9:3e:e1:00:d7:
         38:10:58:df:03:c3:a1:12:ed:38:a1:a3:05:c9:09:fd:5f:84:
         5f:05:a7:be:17:87:a0:30:76:6c:f0:8b:28:30:e4:c2:37:4e:
         62:51:29:67:d1:cd:c1:48:b6:f5:89:73:30:33:b7:8a:dd:47:
         fe:04:c9:5d:fa:9b:af:73:21:10:d2:9b:6e:05:b5:29:be:2c:
         29:0b:66:7e:f2:eb:e5:0c:9c:26:7a:00:01:b4:34:78:b0:a6:
         b2:5d:63:f6:a3:d0:1b:20:d4:36:ee:cc:e9:ba:f1:ba:7e:4d:
         76:80:eb:9d:29:e1:38:3e:fd:22:fe:15:25:6e:b4:6d:33:e8:
         b7:a9:85:68:aa:b6:58:a6:bf:8b:ab:13:89:c0:d9:92:32:77:
         3c:1f:96:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:56:27 2026 by rpki-client