Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E3F5/811B604C763111EA9715F860C4F9AE02/8bck5A2FxU9R1iHHL4lskXXJsRk.mft
File:                     8bck5A2FxU9R1iHHL4lskXXJsRk.mft (raw, json)
Hash identifier:          OH38f2STiynnVnbjOUFpRZP/pLNq1en5XS6s+fRvW3c=
Subject key identifier:   B9:19:DE:52:B2:10:5A:E6:34:3D:44:A2:BE:7A:AD:DF:D6:36:18:3D
Authority key identifier: F1:B7:24:E4:0D:85:C5:4F:51:D6:21:C7:2F:89:6C:91:75:C9:B1:19
Certificate issuer:       /CN=A914E3F5/serialNumber=F1B724E40D85C54F51D621C72F896C9175C9B119
Certificate serial:       0B11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bck5A2FxU9R1iHHL4lskXXJsRk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E3F5/811B604C763111EA9715F860C4F9AE02/8bck5A2FxU9R1iHHL4lskXXJsRk.mft
Manifest number:          0AFB
Signing time:             Sun 20 Sep 2026 19:18:19 +0000
Manifest this update:     Sun 20 Sep 2026 19:18:18 +0000
Manifest next update:     Sun 27 Sep 2026 19:18:18 +0000
Files and hashes:         1: 8bck5A2FxU9R1iHHL4lskXXJsRk.crl (hash: 1p8x5CkOy3njJzn1PG3ctfnmVtyVU/2NnuoPHJLUakg=)
                          2: 354725E6763311EABAE64466C4F9AE02.roa (hash: Q9E2SohQHAyGeXQSdbGe7wwkbtB6hL54JNkPQsa0EIg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E3F5/811B604C763111EA9715F860C4F9AE02/8bck5A2FxU9R1iHHL4lskXXJsRk.crl
                          rsync://rpki.apnic.net/member_repository/A914E3F5/811B604C763111EA9715F860C4F9AE02/8bck5A2FxU9R1iHHL4lskXXJsRk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bck5A2FxU9R1iHHL4lskXXJsRk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 19:18:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2833 (0xb11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E3F5, serialNumber=F1B724E40D85C54F51D621C72F896C9175C9B119
        Validity
            Not Before: Sep 20 19:18:18 2026 GMT
            Not After : Sep 27 19:18:18 2026 GMT
        Subject: CN=6ab0317a-b9ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:8a:91:8a:36:9f:46:41:3e:da:18:28:2b:a6:
                    a0:d7:be:9b:c3:a9:60:f4:28:14:ed:d1:d4:2b:4e:
                    de:1b:0b:b4:fd:86:1a:5a:1b:27:4b:ab:61:43:f8:
                    74:b0:cf:62:1c:90:c3:30:63:5c:a4:ed:0e:c3:f6:
                    ba:d9:24:47:fa:e7:3d:b5:62:9b:5b:c7:12:86:19:
                    92:44:13:d0:c8:9f:ba:aa:31:54:74:f7:f6:2b:75:
                    f9:ef:92:0d:59:64:81:00:37:68:44:c4:5c:38:73:
                    5c:ff:3f:5d:20:22:cc:a5:a5:69:17:81:6f:5f:4f:
                    79:d8:97:1a:d4:da:24:cf:1f:eb:fb:af:1a:d5:1d:
                    a0:ce:cf:cf:7c:5d:4e:11:07:85:00:30:1d:68:de:
                    56:ff:13:b8:17:5d:ee:77:fd:a7:86:f9:1c:94:e3:
                    24:88:06:32:94:80:52:39:33:17:38:e6:8e:b5:87:
                    7a:8a:19:46:00:b1:95:0b:98:9b:cc:20:7a:c2:c5:
                    20:a6:11:8f:30:55:d3:ab:32:b3:50:79:b2:7c:e8:
                    20:72:4e:ea:1d:10:23:85:09:23:57:7a:8b:56:d8:
                    9d:5b:23:61:7e:ea:ab:27:2f:03:25:7e:80:15:fd:
                    41:4f:52:a0:23:66:5f:01:0a:84:21:54:55:ab:fd:
                    bf:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:19:DE:52:B2:10:5A:E6:34:3D:44:A2:BE:7A:AD:DF:D6:36:18:3D
            X509v3 Authority Key Identifier:
                keyid:F1:B7:24:E4:0D:85:C5:4F:51:D6:21:C7:2F:89:6C:91:75:C9:B1:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E3F5/811B604C763111EA9715F860C4F9AE02/8bck5A2FxU9R1iHHL4lskXXJsRk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bck5A2FxU9R1iHHL4lskXXJsRk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E3F5/811B604C763111EA9715F860C4F9AE02/8bck5A2FxU9R1iHHL4lskXXJsRk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:ab:2c:40:fe:06:fc:57:f6:db:e6:4b:df:47:4e:ca:41:23:
         14:d4:e5:ef:7e:5e:9e:f3:62:46:31:dc:9b:39:5e:ab:88:66:
         80:00:44:a5:f8:34:f7:21:f0:73:80:62:b7:11:85:da:6d:49:
         c2:29:06:44:48:d8:20:9b:a5:0e:51:b3:17:72:a2:59:09:5d:
         55:cc:14:56:91:a5:1c:f0:54:2a:8f:be:c5:02:ae:af:f6:11:
         ec:a8:4a:ff:c3:e0:b4:91:d8:5b:e3:c8:6f:01:02:72:c3:00:
         89:89:fd:16:29:12:84:1c:13:17:88:d3:cf:b6:6a:c5:29:73:
         d6:31:cd:db:41:19:2a:42:cc:77:19:59:d0:27:fa:67:9d:0a:
         2f:82:5c:a7:97:c9:d0:06:d9:ae:c2:70:0e:d1:67:18:8b:0e:
         97:86:18:1a:99:a3:86:ce:c1:cb:23:38:c1:94:65:e8:c4:a9:
         d1:8a:a3:cb:46:ff:d3:f6:ab:29:28:07:2b:22:f3:c0:88:4c:
         1d:b9:09:ae:77:d5:06:45:e8:cf:7f:10:09:24:47:5b:d9:3e:
         13:f9:a2:3e:14:8e:bd:39:11:1e:8f:9c:48:9e:cc:20:28:a6:
         e4:7b:ce:01:42:36:e9:b1:65:d5:9a:3b:0f:6a:cd:8b:c4:08:
         b4:1d:a7:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:26:21 2026 by rpki-client