Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.mft
File:                     8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.mft (raw, json)
Hash identifier:          oRrkwqcAeH+QHrR5iZ/3RcVYSVkVgix6HDalMOIGwKk=
Subject key identifier:   05:CB:C7:3D:48:A6:2D:46:BD:5D:C7:4C:08:F2:3A:A8:51:E0:2C:35
Authority key identifier: F2:21:E9:43:2A:19:F2:85:07:83:1B:12:ED:86:BC:4B:B5:96:39:81
Certificate issuer:       /CN=A912963D/serialNumber=F221E9432A19F28507831B12ED86BC4BB5963981
Certificate serial:       1053
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.mft
Manifest number:          1084
Signing time:             Tue 28 Jul 2026 17:34:32 +0000
Manifest this update:     Tue 28 Jul 2026 17:34:31 +0000
Manifest next update:     Tue 04 Aug 2026 17:34:31 +0000
Files and hashes:         1: 8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.crl (hash: 4Sr7G8yeC0zacxgo27aHZ3PsdBdiJj9fL02D9p+7Eoo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.crl
                          rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 17:34:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4179 (0x1053)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912963D, serialNumber=F221E9432A19F28507831B12ED86BC4BB5963981
        Validity
            Not Before: Jul 28 17:34:31 2026 GMT
            Not After : Aug  4 17:34:31 2026 GMT
        Subject: CN=6a68e828-8b24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b9:c2:4a:5c:3b:9c:c2:d3:e7:28:28:e3:c1:
                    a7:dc:ff:d7:e6:87:89:24:9c:c8:07:a6:05:63:0d:
                    3b:17:87:29:7f:2a:0f:f7:a9:87:09:04:41:71:46:
                    f8:ea:dc:41:e1:cf:f8:94:07:b6:35:36:02:c6:0c:
                    85:33:dd:2e:40:f2:02:49:08:48:84:ee:88:8c:d7:
                    3c:81:1e:75:d3:ff:42:4b:cd:0a:39:92:c7:7f:2f:
                    59:7c:d0:7e:86:da:14:ea:46:a1:93:56:fd:9a:bc:
                    6b:6a:98:62:88:45:72:2f:8a:dd:5a:0e:db:b0:70:
                    d6:df:c0:7e:d0:ef:e1:34:c2:07:5e:0e:9b:2f:2f:
                    bc:37:e5:e0:8f:cd:bb:85:df:93:10:20:6e:f8:22:
                    3e:42:50:46:53:37:fc:7d:e7:6e:60:6c:c1:6d:73:
                    bc:e5:a5:ac:47:eb:35:d2:5c:6d:80:26:9e:3e:9d:
                    3e:f0:35:79:92:0c:66:5b:98:9a:75:09:59:f6:93:
                    1d:02:93:6e:8a:cc:45:0b:f6:22:8a:5b:43:44:6e:
                    04:fd:d4:d5:d2:31:35:6a:7e:8c:93:1c:6f:41:90:
                    d8:a3:f2:fb:b1:64:3e:9b:66:fb:c1:30:d4:58:44:
                    88:dc:51:70:73:08:a8:bd:16:d2:78:91:f6:e1:e8:
                    61:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:CB:C7:3D:48:A6:2D:46:BD:5D:C7:4C:08:F2:3A:A8:51:E0:2C:35
            X509v3 Authority Key Identifier:
                keyid:F2:21:E9:43:2A:19:F2:85:07:83:1B:12:ED:86:BC:4B:B5:96:39:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:38:6e:6a:58:a9:fa:1d:85:1f:34:3c:59:76:ea:01:af:9a:
         23:11:d3:0e:ba:b6:90:89:b5:d8:be:34:ad:5c:ee:87:4c:87:
         cf:43:f0:09:3f:d7:ff:04:5c:9e:74:fa:74:96:69:f9:0b:64:
         6e:3d:98:40:ec:e9:f6:6b:11:a8:5d:a7:ab:81:46:02:ca:f6:
         96:25:7b:2f:9d:ba:f8:47:90:0c:6b:1c:92:d2:97:d4:05:b6:
         55:34:28:08:f8:07:16:e4:52:75:05:3e:7a:65:12:05:e2:58:
         7a:81:ad:7b:d5:d2:ce:72:cc:4a:b4:ff:e9:49:10:5c:6a:41:
         58:9e:83:5e:d6:a5:4c:89:ee:84:ab:d2:97:c1:b1:64:28:d2:
         2d:88:2c:e2:60:22:9a:4a:d6:73:85:78:1a:94:42:90:e2:1f:
         12:ac:e4:1b:3e:2c:4b:b0:7f:40:6a:a2:26:2b:3d:40:48:dc:
         c9:71:e2:ad:43:76:cc:28:fe:73:80:1e:95:42:37:f8:d4:c8:
         10:7e:9d:fb:98:da:83:b8:38:b7:cd:ad:36:79:9a:f1:81:1b:
         82:34:dd:0a:87:26:40:80:a5:60:db:59:8c:e5:74:16:8a:98:
         eb:e6:89:0f:6b:b6:2d:56:5b:c1:37:c4:48:eb:99:9c:00:4c:
         c6:ed:4e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:44:45 2026 by rpki-client