Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.mft
File:                     8ue_m6mnxEF7217_IXMMXshAJA0.mft (raw, json)
Hash identifier:          7Sx+9Px40F1SFAyZw+ccXZdghsQiaKCmB8cTJpiaopc=
Subject key identifier:   C8:41:1D:29:75:AC:6B:81:F4:62:11:78:6A:5E:5B:3F:9F:B5:C4:A9
Authority key identifier: F2:E7:BF:9B:A9:A7:C4:41:7B:DB:5E:FF:21:73:0C:5E:C8:40:24:0D
Certificate issuer:       /CN=A914E6AA/serialNumber=F2E7BF9BA9A7C4417BDB5EFF21730C5EC840240D
Certificate serial:       06AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ue_m6mnxEF7217_IXMMXshAJA0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.mft
Manifest number:          0B77
Signing time:             Sat 18 Apr 2026 22:20:11 +0000
Manifest this update:     Sat 18 Apr 2026 22:20:11 +0000
Manifest next update:     Sat 25 Apr 2026 22:20:11 +0000
Files and hashes:         1: 8ue_m6mnxEF7217_IXMMXshAJA0.crl (hash: CWtBbWl7dZYojIeNtSxvBCzYZZOm+2ASGG4ienlsvns=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.crl
                          rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ue_m6mnxEF7217_IXMMXshAJA0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 22:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1711 (0x6af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E6AA, serialNumber=F2E7BF9BA9A7C4417BDB5EFF21730C5EC840240D
        Validity
            Not Before: Apr 18 22:20:11 2026 GMT
            Not After : Apr 25 22:20:11 2026 GMT
        Subject: CN=69e4039b-9481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f5:63:8d:68:85:7b:0f:ca:65:9b:d2:40:44:
                    47:66:9e:d9:ff:b8:31:26:71:bf:a9:01:4d:ac:19:
                    83:9f:69:fc:80:2d:31:c4:cc:a5:55:2e:57:90:fc:
                    b1:fd:c5:55:fe:20:b2:6c:a1:a8:3a:cf:af:4e:d4:
                    49:06:f3:4d:dd:dc:d7:41:e3:42:14:ae:07:2a:e6:
                    ba:25:33:75:ca:60:54:bc:1f:15:e2:9c:6c:38:16:
                    f8:30:c1:c6:21:0e:20:05:75:4b:19:f9:c8:d7:ec:
                    f2:79:a8:fd:3a:d3:18:18:a5:95:fb:0a:e5:fc:6e:
                    92:45:52:e8:6d:6b:53:04:aa:62:17:be:35:8c:30:
                    58:4d:27:ce:3c:ea:96:4e:d5:b4:a6:4a:24:c8:81:
                    3a:d8:16:fb:ec:a3:5f:69:10:a8:e2:1e:f5:64:9b:
                    1a:d3:5f:1a:44:12:a1:d5:94:6b:62:fb:7c:95:04:
                    bf:c9:87:be:c8:df:82:b0:40:c3:ad:c0:c0:db:41:
                    4e:a9:c7:c4:08:4d:01:ad:bd:87:1a:a3:14:2e:d1:
                    5d:bb:13:13:ea:67:b1:6d:5f:16:c2:19:0e:94:dc:
                    e3:da:6a:0f:19:44:f7:b9:db:d4:da:7d:fb:a7:0a:
                    31:16:53:b9:a9:ec:47:82:ec:eb:23:2d:5d:c0:75:
                    24:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:41:1D:29:75:AC:6B:81:F4:62:11:78:6A:5E:5B:3F:9F:B5:C4:A9
            X509v3 Authority Key Identifier:
                keyid:F2:E7:BF:9B:A9:A7:C4:41:7B:DB:5E:FF:21:73:0C:5E:C8:40:24:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ue_m6mnxEF7217_IXMMXshAJA0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:d1:95:70:33:05:b4:80:57:d9:49:49:42:ea:cc:3f:a1:f9:
         fd:f4:b8:5b:28:b4:16:16:e0:b1:a7:db:e2:24:87:ce:f8:82:
         0d:f8:b2:c1:bc:ab:fb:c7:5c:5a:85:85:20:a5:3a:7b:e0:49:
         71:b1:6e:4e:3a:d0:f1:9d:db:1a:3a:b8:01:46:81:0c:eb:1d:
         6d:f8:6a:53:b4:8d:4a:a4:e3:c9:04:63:c2:47:38:a5:cf:39:
         2f:75:23:98:ee:83:d9:e3:64:ab:0e:a2:ef:39:ec:7d:34:2b:
         a8:ae:a0:f0:b6:f8:6c:01:9b:3c:4d:22:f4:86:1f:86:4c:37:
         a1:50:65:73:c0:d0:25:23:ba:1e:d4:21:ec:75:0f:04:bf:e1:
         07:e7:df:df:75:aa:f6:e5:87:82:06:e0:6e:5f:de:79:85:01:
         36:ac:57:9f:3d:ee:cb:8f:43:51:7e:05:04:cd:0e:ab:6b:f5:
         c8:c5:50:c6:81:51:09:16:69:5f:c4:d7:d1:cc:c9:84:3a:5e:
         d6:b8:1c:46:59:e4:d1:4c:fb:77:c6:b2:93:41:ec:7f:57:94:
         94:09:3d:0c:e3:e5:41:64:27:99:77:a2:6e:10:a9:b0:b7:e9:
         a1:2d:ce:f9:9f:82:8b:cb:18:c4:83:7a:2a:20:13:77:4c:3e:
         44:32:19:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:59:56 2026 by rpki-client