Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140332/47E1C61665F211F081B9F11DC4F9AE02/8UL6kHTxVVk9RMPR0BSn3jlzcwU.mft
File:                     8UL6kHTxVVk9RMPR0BSn3jlzcwU.mft (raw, json)
Hash identifier:          BsawojtCDNQnJ8t8wTFOC4WSNxBzAfjFPocm66jbETU=
Subject key identifier:   85:D0:3C:9F:BB:5D:B1:C0:8E:7D:B8:B1:47:29:54:D8:8F:09:2E:83
Authority key identifier: F1:42:FA:90:74:F1:55:59:3D:44:C3:D1:D0:14:A7:DE:39:73:73:05
Certificate issuer:       /CN=A9140332/serialNumber=F142FA9074F155593D44C3D1D014A7DE39737305
Certificate serial:       CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8UL6kHTxVVk9RMPR0BSn3jlzcwU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140332/47E1C61665F211F081B9F11DC4F9AE02/8UL6kHTxVVk9RMPR0BSn3jlzcwU.mft
Manifest number:          C8
Signing time:             Mon 27 Jul 2026 09:06:21 +0000
Manifest this update:     Mon 27 Jul 2026 09:06:21 +0000
Manifest next update:     Mon 03 Aug 2026 09:06:21 +0000
Files and hashes:         1: 8UL6kHTxVVk9RMPR0BSn3jlzcwU.crl (hash: as+OLB3KXPzOZBc7aTTccrzUt7uvcluVjfNX6D7ZgrQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140332/47E1C61665F211F081B9F11DC4F9AE02/8UL6kHTxVVk9RMPR0BSn3jlzcwU.crl
                          rsync://rpki.apnic.net/member_repository/A9140332/47E1C61665F211F081B9F11DC4F9AE02/8UL6kHTxVVk9RMPR0BSn3jlzcwU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8UL6kHTxVVk9RMPR0BSn3jlzcwU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:06:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 204 (0xcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140332, serialNumber=F142FA9074F155593D44C3D1D014A7DE39737305
        Validity
            Not Before: Jul 27 09:06:21 2026 GMT
            Not After : Aug  3 09:06:21 2026 GMT
        Subject: CN=6a671f8d-fd1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:59:20:58:d9:3d:3f:97:c1:9e:6b:5e:41:10:
                    aa:7c:df:e9:32:0a:21:29:3c:91:a5:69:cf:f2:af:
                    0a:88:72:c2:71:19:0f:6e:79:52:9b:cc:31:f8:79:
                    d8:61:35:c8:bb:f7:93:2b:de:40:0e:a6:92:6e:ea:
                    fa:75:cb:c4:1c:b4:63:86:23:df:25:a8:49:32:33:
                    44:53:4d:b6:7d:37:36:de:d3:b7:9f:a3:2c:f4:52:
                    36:d3:9e:56:d6:b6:3b:71:99:78:a3:61:44:c7:24:
                    dd:b9:f4:9c:c2:c7:84:5c:17:fc:59:8e:e0:d6:0e:
                    74:24:93:13:32:32:a2:d4:30:6a:fd:cc:60:26:8a:
                    99:e5:c2:d1:47:88:ea:04:09:24:a4:34:48:49:38:
                    d8:f7:e7:7b:c1:e1:a5:24:94:6f:c7:dc:1a:a1:4a:
                    27:27:62:8b:6f:b3:77:3e:91:ef:ef:38:a9:42:70:
                    d6:c8:48:e4:6a:04:28:fb:d8:51:b7:dc:aa:b8:1a:
                    eb:88:2d:bd:8d:bd:49:30:d4:72:d2:08:89:3d:00:
                    fb:b7:d7:ac:9f:5e:12:d4:7f:af:26:7c:3c:b3:e9:
                    2c:d9:dd:ae:85:eb:1c:79:dd:ce:da:c9:85:9c:87:
                    52:83:f3:d6:f9:d1:37:27:e1:22:c6:3b:2f:50:c1:
                    c3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:D0:3C:9F:BB:5D:B1:C0:8E:7D:B8:B1:47:29:54:D8:8F:09:2E:83
            X509v3 Authority Key Identifier:
                keyid:F1:42:FA:90:74:F1:55:59:3D:44:C3:D1:D0:14:A7:DE:39:73:73:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140332/47E1C61665F211F081B9F11DC4F9AE02/8UL6kHTxVVk9RMPR0BSn3jlzcwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8UL6kHTxVVk9RMPR0BSn3jlzcwU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140332/47E1C61665F211F081B9F11DC4F9AE02/8UL6kHTxVVk9RMPR0BSn3jlzcwU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:4b:81:93:f1:f7:bd:3b:7d:e8:84:f1:9e:d6:74:c8:e5:a9:
         15:6d:26:9c:08:a7:ca:0d:54:ae:73:a7:9a:6e:95:90:30:a4:
         e8:07:4e:82:d1:f7:a4:66:31:b8:bc:e3:60:60:f4:ad:29:c0:
         36:17:73:5f:3d:73:47:45:44:7b:75:65:41:8c:81:67:00:c2:
         d2:58:05:0b:6f:82:62:aa:b8:da:45:8c:97:29:5f:6c:e4:d1:
         fe:dc:fc:07:2b:88:2c:c9:6e:61:76:b4:8f:de:bf:84:0a:70:
         ad:dd:87:13:31:21:70:48:51:fb:a0:6b:3e:35:aa:ec:02:ad:
         ed:7c:00:24:23:8f:47:de:db:cc:fe:bf:05:4b:ab:d0:5f:fb:
         f8:69:d0:f1:8c:5a:80:57:30:76:bb:56:28:4c:24:f9:1f:df:
         a0:11:35:50:54:52:83:c9:33:81:4c:ed:8f:da:5c:7b:8d:ba:
         99:23:63:8e:60:78:61:b2:a8:9d:ec:95:e6:38:e8:9f:1f:0a:
         8e:06:37:9c:ad:49:d4:e3:b6:24:49:95:09:2a:73:47:68:70:
         91:10:88:5c:e0:77:59:4c:a6:77:de:1d:89:e3:51:10:22:11:
         c0:f2:c3:ef:b5:d0:7a:01:32:e9:9b:ab:ec:ff:3f:b2:f6:a6:
         d6:35:07:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:40:59 2026 by rpki-client