Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.mft
File:                     8-u_tKk4D-CaVh_Gr6KhzCFIhhE.mft (raw, json)
Hash identifier:          Bo+OOTSoMDNe0jIf0sD+fSmsC/lfGZELlp2iaCBHcco=
Subject key identifier:   48:D4:2F:47:72:18:10:73:61:63:BF:AB:31:10:B1:5D:48:AC:B4:27
Authority key identifier: F3:EB:BF:B4:A9:38:0F:E0:9A:56:1F:C6:AF:A2:A1:CC:21:48:86:11
Certificate issuer:       /CN=A913A5AF/serialNumber=F3EBBFB4A9380FE09A561FC6AFA2A1CC21488611
Certificate serial:       DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.mft
Manifest number:          DB
Signing time:             Sun 01 Mar 2026 07:46:16 +0000
Manifest this update:     Sun 01 Mar 2026 07:46:15 +0000
Manifest next update:     Sun 08 Mar 2026 07:46:15 +0000
Files and hashes:         1: 8-u_tKk4D-CaVh_Gr6KhzCFIhhE.crl (hash: aipbBizMB9ZK14V4n+5bUGKIWT8n4/99n0x9hrK+vH8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.crl
                          rsync://rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:46:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 220 (0xdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A5AF, serialNumber=F3EBBFB4A9380FE09A561FC6AFA2A1CC21488611
        Validity
            Not Before: Mar  1 07:46:15 2026 GMT
            Not After : Mar  8 07:46:15 2026 GMT
        Subject: CN=69a3eec8-c936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b7:6f:fe:43:75:b2:b3:ae:d9:dd:56:36:a1:
                    4b:ab:2c:3b:6b:34:ec:11:6c:da:4e:a9:be:56:63:
                    61:51:5c:22:ca:c4:9f:2e:f0:3a:65:5c:a9:5f:40:
                    31:8d:33:04:37:a2:40:5f:8f:e5:e4:47:49:13:1d:
                    ad:6c:f3:1a:1b:68:d2:71:58:2e:2d:27:1a:98:1b:
                    48:c2:e4:91:65:9b:42:ac:0d:3d:da:29:ea:aa:3d:
                    b2:03:b9:23:7e:64:76:b0:62:c1:07:1c:29:19:75:
                    9e:86:2e:7c:eb:cf:10:31:f6:f2:dc:ba:c2:74:f9:
                    2b:69:df:3a:0f:c2:22:7d:1a:10:f9:fb:b9:52:01:
                    36:a8:e8:c2:5d:c4:7d:70:e2:d0:e8:b4:67:b9:2e:
                    16:b1:e3:fb:5c:08:98:46:c4:64:d2:e4:c4:33:e6:
                    6b:41:45:4e:cf:e5:33:3d:d1:cc:ee:58:3c:6b:fb:
                    43:3e:ce:b1:77:fa:70:4a:e4:92:a6:07:e6:82:ec:
                    77:a2:28:66:cb:5c:8a:59:c6:07:98:1d:4f:ec:c8:
                    b3:1c:da:ec:c4:79:60:19:01:2e:04:91:48:76:cc:
                    58:e7:6e:c4:88:d3:ca:81:77:94:7e:38:6b:48:7e:
                    51:6a:50:15:c7:38:21:bc:b4:cc:93:69:fd:48:15:
                    c0:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:D4:2F:47:72:18:10:73:61:63:BF:AB:31:10:B1:5D:48:AC:B4:27
            X509v3 Authority Key Identifier:
                keyid:F3:EB:BF:B4:A9:38:0F:E0:9A:56:1F:C6:AF:A2:A1:CC:21:48:86:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:26:a5:06:00:e2:ee:fc:e1:17:8e:72:02:dd:25:ff:76:21:
         b1:78:ed:ea:70:22:da:7f:57:c5:84:03:94:df:44:34:b9:e5:
         0d:49:43:ea:49:4a:ba:b0:01:a2:e1:ec:bd:89:44:ea:0f:db:
         bf:7b:f7:ef:09:bf:53:39:6c:7a:26:72:53:ce:7b:66:67:58:
         e1:88:84:19:f5:6e:2f:c7:81:a7:2b:31:d0:fe:94:eb:28:b1:
         d3:6f:e1:09:9a:a2:48:df:b6:90:b7:f9:9d:b3:e1:b2:52:64:
         7a:85:4d:22:ac:3c:4b:89:7d:bc:7c:1c:ba:35:4a:56:95:e7:
         a1:59:a4:f6:02:de:67:76:b1:5d:6e:d6:d9:23:ea:b7:f3:9a:
         94:0e:d3:91:fb:5d:81:6e:58:f7:b7:6a:5e:36:45:68:99:6d:
         ae:bd:12:aa:17:9a:f5:e4:73:3c:f3:c9:fe:12:73:6d:30:7a:
         4b:e9:1f:d1:c2:c3:5d:66:cf:d1:57:49:7f:1b:96:ca:12:ce:
         61:a8:96:84:f5:3e:78:6f:bd:ff:97:eb:fc:59:f5:f2:9b:ef:
         34:40:f3:e0:c8:42:19:a9:29:d6:ee:17:7d:bc:2c:de:b8:e0:
         5e:d0:6d:96:02:d4:3e:ad:b3:6f:fe:e0:b6:b5:6e:d5:4b:92:
         cc:46:12:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:07:33 2026 by rpki-client