Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.mft
File:                     l8hXp1yabimLCaBh2PfOEHv50zM.mft (raw, json)
Hash identifier:          T74OeNXTAP1WRkBqx+vLmuKLY1ym48s/tpSnA0owY1g=
Subject key identifier:   EF:84:A6:1D:F8:7F:6C:0F:65:24:18:B7:D3:C4:43:9E:2D:25:74:50
Authority key identifier: 97:C8:57:A7:5C:9A:6E:29:8B:09:A0:61:D8:F7:CE:10:7B:F9:D3:33
Certificate issuer:       /CN=A918E4B7/serialNumber=97C857A75C9A6E298B09A061D8F7CE107BF9D333
Certificate serial:       9E
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l8hXp1yabimLCaBh2PfOEHv50zM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.mft
Manifest number:          9B
Signing time:             Mon 27 Jul 2026 00:01:16 +0000
Manifest this update:     Mon 27 Jul 2026 00:01:15 +0000
Manifest next update:     Mon 03 Aug 2026 00:01:15 +0000
Files and hashes:         1: l8hXp1yabimLCaBh2PfOEHv50zM.crl (hash: zD2/j7Lm7jqYE+/TcwQM8prm27wSoDA5uvckwMwHiuQ=)
                          2: B8E35E8AD8C811F08AAE626967D3641D.roa (hash: wByl5sWHW/uk2KewJI/ZeESKskm3ECQG9nciHeh8yK4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.crl
                          rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l8hXp1yabimLCaBh2PfOEHv50zM.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 00:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 158 (0x9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E4B7, serialNumber=97C857A75C9A6E298B09A061D8F7CE107BF9D333
        Validity
            Not Before: Jul 27 00:01:15 2026 GMT
            Not After : Aug  3 00:01:15 2026 GMT
        Subject: CN=6a669fcc-e7aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2c:e7:db:90:dd:62:73:33:0e:b4:59:51:9d:
                    5b:b0:6d:fc:1c:17:6c:b7:81:cf:9f:13:25:29:9a:
                    43:0c:ba:d7:4d:b6:6c:90:2b:01:bf:7a:0e:cf:5b:
                    6d:fe:16:af:e3:36:bd:2b:7e:b8:6b:17:db:ba:5c:
                    19:24:2b:98:84:78:2a:9e:97:1d:25:29:82:2a:7c:
                    68:d2:68:7b:f1:e7:8f:70:96:f9:49:94:e4:1a:d5:
                    a8:1e:b4:05:55:04:e7:a8:6e:ab:4f:ac:fe:22:5c:
                    13:0b:94:30:c3:7a:45:38:6b:4b:e9:07:8b:42:17:
                    f6:3f:01:ca:c0:0b:71:11:03:43:da:b0:2d:88:45:
                    78:b0:82:8e:f8:cb:9c:2d:0f:5e:c1:54:95:3b:be:
                    88:99:b4:5c:52:59:35:46:67:a1:27:78:f6:81:35:
                    3e:60:03:43:7d:10:13:c9:6f:03:9f:e5:98:77:85:
                    c5:8c:8f:5f:71:4b:9b:f0:c3:84:ee:2c:2f:95:ed:
                    b8:41:41:17:35:60:fc:43:8b:3a:fd:21:67:05:30:
                    dc:82:a6:1a:c8:46:5a:29:eb:e8:22:1f:35:97:38:
                    ff:53:d6:5f:c9:8d:6d:ff:0a:88:08:92:b3:97:b3:
                    9a:b2:4f:e4:cd:65:7b:3a:c2:b6:86:38:16:f7:b5:
                    15:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:84:A6:1D:F8:7F:6C:0F:65:24:18:B7:D3:C4:43:9E:2D:25:74:50
            X509v3 Authority Key Identifier:
                keyid:97:C8:57:A7:5C:9A:6E:29:8B:09:A0:61:D8:F7:CE:10:7B:F9:D3:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l8hXp1yabimLCaBh2PfOEHv50zM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:29:b1:68:7a:ac:8b:54:20:ae:fd:b3:77:d9:e4:6c:a6:71:
         0c:a8:4e:5a:6e:e7:b5:88:77:98:42:db:5a:6d:ec:99:17:30:
         ab:43:2f:f2:e7:27:e6:29:99:9a:d8:f5:a9:32:e5:3d:e7:df:
         76:fb:cb:a4:24:8a:1b:67:e1:0c:dc:30:f2:d3:03:48:27:ce:
         dd:d0:b9:d7:3d:d5:da:8c:05:a4:2f:9d:ca:d0:de:76:0b:23:
         e7:3e:31:d4:3a:e1:4e:e0:7c:5c:40:58:5a:30:e9:b9:2e:0d:
         bd:a4:66:1e:c0:f2:fb:7c:8d:c3:af:1f:84:ab:fd:95:bc:dc:
         f1:79:d9:16:1c:71:df:8e:8f:6d:a8:31:1f:62:b3:7f:64:e8:
         02:d2:de:61:c5:9c:34:06:d4:6a:08:f3:97:cf:6f:1e:6e:e2:
         9b:e8:61:e6:14:36:e6:f8:f9:43:46:6b:c7:ef:7d:4f:15:2e:
         e6:af:c2:7f:1f:34:b3:57:ec:de:a9:16:5e:b7:0d:f4:04:44:
         f2:13:93:9c:8c:89:e8:c9:90:41:01:80:13:c9:f8:48:29:df:
         9c:5c:3b:4d:ef:3b:dc:ab:bc:cf:bb:7d:a1:2a:18:76:49:9b:
         21:c9:f0:f5:ef:0d:07:03:06:5e:4e:1e:90:8d:4c:97:07:66:
         35:cb:bf:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:44:00 2026 by rpki-client