Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.mft
File:                     8bA7xYd_4tpPRGoGM9prjh93x9s.mft (raw, json)
Hash identifier:          CcRQvY+S0JomGmgTTtoFd+Ic13xVPTojW/2E+gcH1hk=
Subject key identifier:   74:9D:84:FF:62:32:60:E1:60:E9:95:DC:5B:BD:49:2B:30:62:26:C0
Authority key identifier: F1:B0:3B:C5:87:7F:E2:DA:4F:44:6A:06:33:DA:6B:8E:1F:77:C7:DB
Certificate issuer:       /CN=A918E881/serialNumber=F1B03BC5877FE2DA4F446A0633DA6B8E1F77C7DB
Certificate serial:       0659
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bA7xYd_4tpPRGoGM9prjh93x9s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.mft
Manifest number:          064F
Signing time:             Thu 16 Apr 2026 22:36:34 +0000
Manifest this update:     Thu 16 Apr 2026 22:36:34 +0000
Manifest next update:     Thu 23 Apr 2026 22:36:34 +0000
Files and hashes:         1: 8bA7xYd_4tpPRGoGM9prjh93x9s.crl (hash: TSsqLoYjXVodI5TqToVFqCI04F6HH44cDSqGmArtEBw=)
                          2: F908A568CD1711EB84E11B24C4F9AE02.roa (hash: 943YCQ0BPPVwVFIiiu3SQ73zJRB1bBdsLtyUQzPh8vM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.crl
                          rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bA7xYd_4tpPRGoGM9prjh93x9s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 22:36:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1625 (0x659)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E881, serialNumber=F1B03BC5877FE2DA4F446A0633DA6B8E1F77C7DB
        Validity
            Not Before: Apr 16 22:36:34 2026 GMT
            Not After : Apr 23 22:36:34 2026 GMT
        Subject: CN=69e16472-3c54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6d:27:ea:eb:06:ab:e3:1e:0b:1d:f3:da:cb:
                    cc:20:30:9b:d2:7f:dc:9c:dc:ce:64:d2:85:b7:bd:
                    27:71:64:d9:87:64:e7:c8:f5:6e:bf:85:40:d7:02:
                    2e:9f:6c:7c:81:7e:71:af:06:3c:cc:87:98:f7:6e:
                    ce:84:67:8d:1c:69:f7:9b:5c:9b:90:28:3b:9e:a6:
                    88:f5:3a:93:3b:8a:4d:25:d8:8d:d9:75:95:78:62:
                    96:99:11:d6:f6:c2:04:ab:48:fb:67:0d:43:be:9a:
                    4a:62:10:4d:c9:a4:96:97:54:2d:ba:c3:da:06:98:
                    6f:c5:4d:b2:ef:f6:a2:18:84:64:80:a5:d0:d7:a4:
                    8b:ef:d3:71:b9:ac:52:f5:1d:c0:9f:f5:a8:77:22:
                    2c:20:b7:f1:b6:e7:4f:f8:a8:ab:a0:86:a4:19:43:
                    d1:c2:67:62:a7:45:6c:20:f3:2d:74:e1:5b:5f:fc:
                    3e:33:01:ec:79:e6:71:47:f6:7f:f7:2a:9d:a0:1d:
                    48:5f:ba:81:af:54:d0:35:2e:6f:32:f5:ec:a1:c9:
                    5f:57:68:fc:88:a8:e2:63:b2:6a:c3:ef:4b:4f:3c:
                    c8:0d:c5:c4:42:5c:0d:3d:21:de:df:bd:6c:29:cf:
                    95:91:0d:76:99:c4:3f:a0:eb:a2:f5:46:97:1b:31:
                    ac:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:9D:84:FF:62:32:60:E1:60:E9:95:DC:5B:BD:49:2B:30:62:26:C0
            X509v3 Authority Key Identifier:
                keyid:F1:B0:3B:C5:87:7F:E2:DA:4F:44:6A:06:33:DA:6B:8E:1F:77:C7:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bA7xYd_4tpPRGoGM9prjh93x9s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:ce:b7:e0:42:90:ab:97:31:57:e0:f9:fd:f9:a5:32:05:8b:
         0a:a1:fb:53:23:0c:d6:a0:91:d3:e8:4b:66:30:d3:a2:5e:05:
         a5:8d:0b:41:87:43:4d:48:f2:38:c2:7d:c4:3e:cf:56:fb:e8:
         9d:32:22:9f:f7:e0:94:12:c3:84:d6:f8:0d:af:f0:ab:93:41:
         d3:c2:25:63:ec:61:84:b3:f7:bc:f2:1a:ef:7c:c2:dc:0a:04:
         c9:4d:49:18:b0:e1:88:88:34:8d:17:88:4c:12:db:b0:d6:f3:
         b3:ee:c4:f5:97:5e:fe:ec:70:f6:5b:be:8f:a1:40:ca:81:46:
         55:38:9a:70:24:45:46:5a:cc:28:63:e0:bd:ce:0b:75:73:5c:
         0b:fd:d7:12:1d:2b:14:5d:27:1c:fb:50:3f:8f:e1:32:a2:13:
         6c:b0:e0:91:ed:f5:49:24:f0:21:66:fe:77:14:68:a9:b8:95:
         a7:95:9b:0f:e6:aa:72:64:20:f4:d8:bb:56:d9:10:f8:dc:95:
         a3:e9:5e:60:49:03:8f:00:a5:db:ea:11:26:97:c7:68:2e:bf:
         5f:d7:d0:f2:7f:ad:ee:45:51:32:a1:67:bb:5b:2c:42:54:7c:
         1b:e3:88:0f:2b:4f:ef:cb:fc:94:06:51:ff:0d:89:75:06:94:
         f4:b7:ce:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:51:52 2026 by rpki-client