Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918BFB8/AB95B5A877D511E9ABC63A65C4F9AE02/SkTgEhvolIv3vEnLA6Y4F6W60YY.mft
File:                     SkTgEhvolIv3vEnLA6Y4F6W60YY.mft (raw, json)
Hash identifier:          ON5Mg+gg6FiJRvdFAlPPq9R4SMWvLHtFOueRC8PmcRo=
Subject key identifier:   C0:E1:CB:35:06:B1:56:4F:E1:4F:C4:75:BE:88:DA:31:1C:28:42:1F
Authority key identifier: 4A:44:E0:12:1B:E8:94:8B:F7:BC:49:CB:03:A6:38:17:A5:BA:D1:86
Certificate issuer:       /CN=A918BFB8/serialNumber=4A44E0121BE8948BF7BC49CB03A63817A5BAD186
Certificate serial:       0FF7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkTgEhvolIv3vEnLA6Y4F6W60YY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918BFB8/AB95B5A877D511E9ABC63A65C4F9AE02/SkTgEhvolIv3vEnLA6Y4F6W60YY.mft
Manifest number:          0FEC
Signing time:             Tue 28 Jul 2026 17:35:18 +0000
Manifest this update:     Tue 28 Jul 2026 17:35:17 +0000
Manifest next update:     Tue 04 Aug 2026 17:35:17 +0000
Files and hashes:         1: SkTgEhvolIv3vEnLA6Y4F6W60YY.crl (hash: WdVosCBoeSZ6KQKQr1OVWpYig3ZoLanqlMjqtYe0MNU=)
                          2: DBB5A81E77D611E98792C466C4F9AE02.roa (hash: QQaRw8VhWjtv5+iTZ71TRP+gKsecpysEZWYxDXGHx8Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918BFB8/AB95B5A877D511E9ABC63A65C4F9AE02/SkTgEhvolIv3vEnLA6Y4F6W60YY.crl
                          rsync://rpki.apnic.net/member_repository/A918BFB8/AB95B5A877D511E9ABC63A65C4F9AE02/SkTgEhvolIv3vEnLA6Y4F6W60YY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkTgEhvolIv3vEnLA6Y4F6W60YY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 17:35:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4087 (0xff7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918BFB8, serialNumber=4A44E0121BE8948BF7BC49CB03A63817A5BAD186
        Validity
            Not Before: Jul 28 17:35:17 2026 GMT
            Not After : Aug  4 17:35:17 2026 GMT
        Subject: CN=6a68e856-49e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:36:c5:16:c2:a3:dc:94:38:08:d8:29:ec:f3:
                    e6:5b:e3:27:b9:da:1a:91:25:cb:ed:b2:95:5f:ad:
                    08:c6:5d:76:d2:bf:4f:b2:b0:28:89:ea:4e:79:78:
                    1e:d9:3d:30:f7:e1:b0:7b:ed:da:64:1b:8d:19:8b:
                    43:ed:d7:6c:f9:1b:c5:8a:4a:3a:cf:2a:fd:ec:55:
                    67:84:a5:d2:0d:86:6c:a9:5d:9e:0a:51:61:3f:f3:
                    6f:69:8e:0b:df:b6:80:53:6e:27:08:ce:9c:21:0f:
                    6f:59:24:f7:67:b5:14:e1:89:21:c9:94:cf:c9:dd:
                    a9:0c:a5:92:a6:4d:7d:53:a0:37:38:73:d2:4b:7e:
                    04:d1:c4:f5:da:31:39:75:15:b5:52:74:ca:3c:7f:
                    d4:0d:eb:46:86:13:1c:11:8f:54:a9:63:99:8f:cb:
                    be:b0:98:a6:36:82:3f:52:66:d1:67:99:45:0f:b7:
                    27:8d:f8:d2:9f:4c:25:2f:7c:af:1b:c5:59:a5:25:
                    af:7e:92:af:ce:a4:62:de:4c:40:54:14:f1:3c:bf:
                    32:d7:6a:69:27:7d:9d:46:58:7f:06:74:c0:eb:af:
                    27:0c:08:cd:c7:25:60:4c:6b:bc:3a:d1:d9:65:76:
                    8b:a6:0f:7d:f3:f1:a3:e0:f3:3b:a6:4b:4d:c0:12:
                    9c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:E1:CB:35:06:B1:56:4F:E1:4F:C4:75:BE:88:DA:31:1C:28:42:1F
            X509v3 Authority Key Identifier:
                keyid:4A:44:E0:12:1B:E8:94:8B:F7:BC:49:CB:03:A6:38:17:A5:BA:D1:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918BFB8/AB95B5A877D511E9ABC63A65C4F9AE02/SkTgEhvolIv3vEnLA6Y4F6W60YY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkTgEhvolIv3vEnLA6Y4F6W60YY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BFB8/AB95B5A877D511E9ABC63A65C4F9AE02/SkTgEhvolIv3vEnLA6Y4F6W60YY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:11:2f:71:e4:7a:0e:5e:7b:5a:b1:f1:72:32:9e:9f:11:19:
         de:f7:14:0b:9c:1c:3b:aa:c7:0f:a8:58:da:ed:8f:13:a5:5f:
         8c:23:74:2d:03:45:59:e7:b8:74:2d:0b:96:53:bc:f6:37:54:
         c3:49:14:9a:e8:bf:c3:d1:f6:4b:2e:94:7f:7a:32:75:7e:78:
         89:0f:04:fa:e2:0f:24:db:bf:70:50:2a:88:79:4e:ca:c4:81:
         4b:65:26:74:2f:ec:0e:cb:3d:ea:e2:46:a4:b1:db:8d:aa:4b:
         f6:92:57:50:76:29:69:1e:40:54:32:5c:2c:04:f3:44:3e:ab:
         44:29:8e:fa:99:21:e3:ce:54:73:14:f0:76:9e:c3:8c:df:a9:
         97:9d:f2:62:03:ad:08:6e:2d:a5:16:b9:fb:8b:9f:3f:67:17:
         ee:f5:53:53:33:f1:0b:91:00:36:c7:ce:c4:86:0b:73:7a:9f:
         7e:26:12:44:63:60:0e:53:dd:38:17:3e:28:0e:ef:12:74:22:
         d4:af:fd:6c:c3:ce:12:e3:ef:5d:87:dc:8b:e9:28:a9:3f:36:
         c2:dd:21:e5:77:bc:03:b9:8a:2e:a1:09:8d:21:5c:00:ed:25:
         6d:d8:b8:8c:67:a5:02:97:86:37:8d:cb:94:81:1d:be:e1:18:
         f5:54:be:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:23:26 2026 by rpki-client