Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B090/6B67243467F111EDBDC5852CC4F9AE02/s8lXWbAmAWnVga-ERmxca89vwds.mft
File:                     s8lXWbAmAWnVga-ERmxca89vwds.mft (raw, json)
Hash identifier:          l8XLVaEWorCUzoU3srwPjmQlx+VLH+ALpLtW1ho2HFo=
Subject key identifier:   3B:D3:D0:46:F8:0F:50:50:AF:52:AE:28:3C:05:A7:D5:EB:FF:0A:65
Authority key identifier: B3:C9:57:59:B0:26:01:69:D5:81:AF:84:46:6C:5C:6B:CF:6F:C1:DB
Certificate issuer:       /CN=A913B090/serialNumber=B3C95759B0260169D581AF84466C5C6BCF6FC1DB
Certificate serial:       026B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8lXWbAmAWnVga-ERmxca89vwds.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B090/6B67243467F111EDBDC5852CC4F9AE02/s8lXWbAmAWnVga-ERmxca89vwds.mft
Manifest number:          0266
Signing time:             Sun 01 Mar 2026 23:58:24 +0000
Manifest this update:     Sun 01 Mar 2026 23:58:23 +0000
Manifest next update:     Sun 08 Mar 2026 23:58:23 +0000
Files and hashes:         1: s8lXWbAmAWnVga-ERmxca89vwds.crl (hash: XId3M3JQHO3T1ItzQATL2HYdZOvvBXZbMpOwAgn3XX0=)
                          2: B57CACF267F511EDA884E65BC4F9AE02.roa (hash: euANKi0FBonGo36Nw13/+KNAEhPHHNlMgJqTV7qix5E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B090/6B67243467F111EDBDC5852CC4F9AE02/s8lXWbAmAWnVga-ERmxca89vwds.crl
                          rsync://rpki.apnic.net/member_repository/A913B090/6B67243467F111EDBDC5852CC4F9AE02/s8lXWbAmAWnVga-ERmxca89vwds.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8lXWbAmAWnVga-ERmxca89vwds.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:58:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 619 (0x26b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B090, serialNumber=B3C95759B0260169D581AF84466C5C6BCF6FC1DB
        Validity
            Not Before: Mar  1 23:58:23 2026 GMT
            Not After : Mar  8 23:58:23 2026 GMT
        Subject: CN=69a4d2a0-b5ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:75:2a:85:01:5d:92:63:72:53:58:5f:95:b4:
                    78:e5:d0:11:10:66:2e:00:e1:1a:23:90:e2:4d:35:
                    4a:06:be:e6:f0:ff:a9:c9:22:c1:13:54:d8:4e:35:
                    ad:0e:a4:94:ce:13:2d:b1:b3:c2:98:6a:02:4a:80:
                    de:3e:fb:94:af:fc:d8:39:a0:ec:49:93:ac:1f:0e:
                    ea:5a:a2:a8:c3:d1:9c:40:44:00:b1:2d:56:2a:40:
                    5d:42:b4:8f:2c:b6:16:41:2c:98:d6:8f:7f:e1:67:
                    4d:2d:08:a3:31:94:e2:0d:88:d0:8f:b3:29:cc:f2:
                    28:8c:47:ec:61:1a:a6:ef:50:41:91:3e:86:80:39:
                    2f:8b:62:16:e8:d4:41:e9:fd:24:df:db:27:61:68:
                    fb:a2:82:8b:87:e5:37:f9:ac:af:d5:c3:69:05:c4:
                    a0:f3:65:1a:d9:bf:6c:ab:0a:b1:78:9d:d7:93:72:
                    c2:8b:2c:6c:60:f8:d4:55:00:98:60:58:71:eb:ac:
                    88:6d:bc:20:90:8e:39:61:64:38:65:2f:64:26:da:
                    33:4c:73:5c:b5:40:2f:38:51:f0:82:45:be:1b:21:
                    8c:82:49:1d:61:6a:ca:4d:2e:83:17:d9:27:65:93:
                    b4:27:83:18:a8:96:bf:af:19:b9:2f:54:18:49:6e:
                    82:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:D3:D0:46:F8:0F:50:50:AF:52:AE:28:3C:05:A7:D5:EB:FF:0A:65
            X509v3 Authority Key Identifier:
                keyid:B3:C9:57:59:B0:26:01:69:D5:81:AF:84:46:6C:5C:6B:CF:6F:C1:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B090/6B67243467F111EDBDC5852CC4F9AE02/s8lXWbAmAWnVga-ERmxca89vwds.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8lXWbAmAWnVga-ERmxca89vwds.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B090/6B67243467F111EDBDC5852CC4F9AE02/s8lXWbAmAWnVga-ERmxca89vwds.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:b4:df:82:40:94:a8:fb:fe:86:46:82:c4:11:c8:c9:ac:9a:
         e6:a6:82:6a:91:66:78:20:84:a0:0a:5e:f6:cd:b3:7c:65:2c:
         15:cd:53:00:ab:1f:cc:ca:15:4f:8f:87:14:e5:2b:00:44:21:
         9a:3c:09:45:6f:38:68:a9:70:e3:a8:af:cd:bc:8f:0b:26:e4:
         35:64:ee:c4:fb:5b:b2:73:8f:c1:f9:f8:fa:1b:ef:cb:9e:56:
         c5:eb:b8:b7:f9:23:b8:68:a6:f4:6c:f2:26:33:2c:7d:dc:5c:
         cb:83:42:6e:f8:63:9c:bc:a9:4a:8d:a8:25:9f:e1:a0:e4:ca:
         62:7a:2c:15:ba:27:69:30:70:78:26:e8:a8:1b:ec:b0:ab:67:
         31:c9:5f:85:fd:26:cf:04:60:84:9e:0f:76:5d:d4:fa:e9:2f:
         50:43:71:4e:0c:02:17:fe:14:e7:87:e7:08:3f:bc:50:5c:d7:
         86:b2:d7:f3:91:e0:27:f8:ce:88:4c:a5:9d:5c:65:23:c9:20:
         b3:e2:38:66:87:e4:49:47:80:43:9b:5b:88:ea:6b:48:91:6c:
         8a:df:9b:c5:e6:fc:05:ab:7c:91:c7:46:e8:7b:1f:a5:2f:d3:
         f8:d2:f6:74:a4:7f:df:48:4d:26:89:66:7c:b0:4e:b2:c6:d4:
         5a:7c:4e:de
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAmswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0IwOTAxMTAvBgNVBAUTKEIzQzk1NzU5QjAyNjAxNjlENTgxQUY4NDQ2NkM1QzZC
Q0Y2RkMxREIwHhcNMjYwMzAxMjM1ODIzWhcNMjYwMzA4MjM1ODIzWjAYMRYwFAYD
VQQDEw02OWE0ZDJhMC1iNWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1nUqhQFdkmNyU1hflbR45dAREGYuAOEaI5DiTTVKBr7m8P+pySLBE1TYTjWt
DqSUzhMtsbPCmGoCSoDePvuUr/zYOaDsSZOsHw7qWqKow9GcQEQAsS1WKkBdQrSP
LLYWQSyY1o9/4WdNLQijMZTiDYjQj7MpzPIojEfsYRqm71BBkT6GgDkvi2IW6NRB
6f0k39snYWj7ooKLh+U3+ayv1cNpBcSg82Ua2b9sqwqxeJ3Xk3LCiyxsYPjUVQCY
YFhx66yIbbwgkI45YWQ4ZS9kJtozTHNctUAvOFHwgkW+GyGMgkkdYWrKTS6DF9kn
ZZO0J4MYqJa/rxm5L1QYSW6CtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDvT0Eb4
D1BQr1KuKDwFp9Xr/wplMB8GA1UdIwQYMBaAFLPJV1mwJgFp1YGvhEZsXGvPb8Hb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjA5MC82QjY3MjQzNDY3
RjExMUVEQkRDNTg1MkNDNEY5QUUwMi9zOGxYV2JBbUFXblZnYS1FUm14Y2E4OXZ3
ZHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3M4bFhXYkFtQVduVmdhLUVSbXhjYTg5dndkcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QjA5MC82QjY3MjQzNDY3RjExMUVEQkRDNTg1MkNDNEY5QUUwMi9zOGxYV2JBbUFX
blZnYS1FUm14Y2E4OXZ3ZHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAV7TfgkCUqPv+hkaCxBHIyaya5qaCapFmeCCEoApe9s2zfGUsFc1TAKsfzMoV
T4+HFOUrAEQhmjwJRW84aKlw46ivzbyPCybkNWTuxPtbsnOPwfn4+hvvy55Wxeu4
t/kjuGim9GzyJjMsfdxcy4NCbvhjnLypSo2oJZ/hoOTKYnosFbonaTBweCboqBvs
sKtnMclfhf0mzwRghJ4Pdl3U+ukvUENxTgwCF/4U54fnCD+8UFzXhrLX85HgJ/jO
iEylnVxlI8kgs+I4ZofkSUeAQ5tbiOprSJFsit+bxeb8Bat8kcdG6HsfpS/T+NL2
dKR/30hNJolmfLBOssbUWnxO3g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:05:45 2026 by rpki-client