Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft
File:                     0wlAzG8MECS4QLu309gBJjYGylk.mft (raw, json)
Hash identifier:          3hObp4NJnLOm2W2fjIcyOa0bknURIzH77g27T4fyK2U=
Subject key identifier:   EF:E9:F6:91:A9:16:29:BE:1D:54:B5:88:8A:B6:59:91:FA:FF:5E:F5
Authority key identifier: D3:09:40:CC:6F:0C:10:24:B8:40:BB:B7:D3:D8:01:26:36:06:CA:59
Certificate issuer:       /CN=A91412BC/serialNumber=D30940CC6F0C1024B840BBB7D3D801263606CA59
Certificate serial:       EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wlAzG8MECS4QLu309gBJjYGylk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft
Manifest number:          E8
Signing time:             Mon 27 Jul 2026 08:31:57 +0000
Manifest this update:     Mon 27 Jul 2026 08:31:56 +0000
Manifest next update:     Mon 03 Aug 2026 08:31:56 +0000
Files and hashes:         1: 0wlAzG8MECS4QLu309gBJjYGylk.crl (hash: gqONo3ECXBqJD92NuFRvtFm4oFbPC8dKuJeX7MFaPbg=)
                          2: 936B147E248A11F0AD4B1179C4F9AE02.roa (hash: LyQfyLurnqqH+WScrTsxG9TtblSEPenqHyPotX69udU=)
                          3: 92F3063C248A11F0AD4B1179C4F9AE02.roa (hash: snLyJB1mtilsonSg8bolW4tfoO6cxLckhLrYHgEKQiQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.crl
                          rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wlAzG8MECS4QLu309gBJjYGylk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 08:31:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 238 (0xee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91412BC, serialNumber=D30940CC6F0C1024B840BBB7D3D801263606CA59
        Validity
            Not Before: Jul 27 08:31:56 2026 GMT
            Not After : Aug  3 08:31:56 2026 GMT
        Subject: CN=6a67177d-e302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2a:5c:be:8f:38:34:3f:5b:44:4f:ce:f8:42:
                    34:a7:03:06:89:6e:3e:7b:53:ec:76:2f:3f:aa:0e:
                    3c:47:45:02:b3:be:e7:31:89:6c:a2:f1:a2:97:1c:
                    c2:63:82:e6:62:36:fb:3d:ea:96:88:e9:c2:aa:6f:
                    3d:38:e4:ce:9a:e5:17:2e:14:3b:fd:1a:bd:f5:62:
                    6a:97:93:42:74:eb:36:07:11:ba:e4:5f:11:94:88:
                    37:8b:c0:72:f6:35:c8:e3:fc:ec:c1:07:62:b0:a4:
                    22:d7:f2:ac:57:6a:b5:04:68:72:bf:8f:00:eb:af:
                    b2:89:17:ee:46:7a:8c:84:03:e5:0e:22:c6:61:42:
                    b2:23:92:c8:75:98:df:03:ba:ad:a5:30:52:f4:e9:
                    3c:a1:ae:73:81:cc:df:29:11:80:d3:3f:33:96:26:
                    c0:9c:88:aa:f5:c7:09:51:65:a0:87:fd:df:cd:80:
                    c8:39:4a:48:e9:e2:27:27:cc:74:b3:49:e1:c4:5f:
                    bd:19:db:8b:69:73:4e:3b:8b:1b:14:d2:63:50:34:
                    7b:00:4b:da:e3:38:53:31:61:d7:22:e0:8a:19:a6:
                    3b:a3:f2:36:0c:54:f1:ce:d0:01:f1:08:bf:1e:62:
                    7b:3b:d3:07:46:5a:61:52:31:28:1a:29:17:98:77:
                    ce:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:E9:F6:91:A9:16:29:BE:1D:54:B5:88:8A:B6:59:91:FA:FF:5E:F5
            X509v3 Authority Key Identifier:
                keyid:D3:09:40:CC:6F:0C:10:24:B8:40:BB:B7:D3:D8:01:26:36:06:CA:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wlAzG8MECS4QLu309gBJjYGylk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:d6:ef:8f:34:b0:57:cc:d3:bc:02:48:c4:14:da:47:f1:02:
         1c:e4:66:ae:97:24:48:81:ce:c0:0e:a1:c4:6c:4c:04:6c:21:
         a4:ec:62:07:81:61:57:39:f6:41:f7:2f:f5:d8:ac:f0:8f:03:
         0a:48:c0:cb:f1:57:83:05:62:58:4c:e8:fe:8d:11:94:d3:e7:
         76:63:af:90:15:28:34:a0:f7:db:06:01:c7:73:c4:df:24:0f:
         00:b9:bb:bc:26:76:56:63:29:da:a1:a8:66:c1:4d:46:15:90:
         e0:37:09:02:c5:89:45:90:5e:74:57:3d:8e:18:bf:fe:a4:b8:
         7e:c8:da:3d:e0:04:63:62:c7:17:16:89:cb:0b:1f:73:2a:b7:
         75:df:82:c0:b4:05:93:c2:13:78:f6:7b:36:b1:7d:dd:9a:4e:
         e7:4b:d2:f7:d7:7d:ba:03:c5:83:13:5b:3d:e8:32:4d:10:6f:
         bb:4c:bc:cb:9e:8c:45:92:e5:f4:d6:a1:ef:1a:18:a9:6a:2e:
         82:e2:d6:c0:eb:c3:d9:ec:7f:17:a8:76:5c:7d:e6:cf:ef:5f:
         fb:b5:f2:12:12:6b:b1:f7:07:00:3c:f7:be:ef:ad:8a:28:59:
         d6:6d:ca:f4:67:55:40:e8:52:19:c0:1f:e7:47:f0:5d:a9:f2:
         f7:4b:46:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:54:22 2026 by rpki-client