Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919243F/E8DCA632B65411F09ECF4B7FC4F9AE02/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.mft
File:                     bh8SQJzzm_kTxDK1h2_6_Z_QYZU.mft (raw, json)
Hash identifier:          GZb6x+9Npccf+F6ssMysvsX9imZMIX/XA9Pa1qFrais=
Subject key identifier:   DE:4E:58:E1:54:13:D0:9E:B2:E1:07:8C:92:2F:06:DE:37:6D:2B:11
Authority key identifier: 6E:1F:12:40:9C:F3:9B:F9:13:C4:32:B5:87:6F:FA:FD:9F:D0:61:95
Certificate issuer:       /CN=A919243F/serialNumber=6E1F12409CF39BF913C432B5876FFAFD9FD06195
Certificate serial:       90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919243F/E8DCA632B65411F09ECF4B7FC4F9AE02/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.mft
Manifest number:          8D
Signing time:             Mon 27 Jul 2026 09:42:08 +0000
Manifest this update:     Mon 27 Jul 2026 09:42:07 +0000
Manifest next update:     Mon 03 Aug 2026 09:42:07 +0000
Files and hashes:         1: bh8SQJzzm_kTxDK1h2_6_Z_QYZU.crl (hash: iq/+0dY4Wl5ZLPguKE6djlpuAcNdFMrSRQ8bZDVJPjs=)
                          2: 384B24AAB65511F0AE39E37FC4F9AE02.roa (hash: 5Y743cqmfS64WE3oNhO7FpcyGYqVQg0KBej2FkM8DC4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919243F/E8DCA632B65411F09ECF4B7FC4F9AE02/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.crl
                          rsync://rpki.apnic.net/member_repository/A919243F/E8DCA632B65411F09ECF4B7FC4F9AE02/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:42:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144 (0x90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919243F, serialNumber=6E1F12409CF39BF913C432B5876FFAFD9FD06195
        Validity
            Not Before: Jul 27 09:42:07 2026 GMT
            Not After : Aug  3 09:42:07 2026 GMT
        Subject: CN=6a6727f0-b0c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fb:eb:2f:3d:46:01:38:5e:01:e0:a7:f5:90:
                    ed:2f:96:40:e5:e3:4e:c2:6f:b0:54:62:33:5d:85:
                    cd:8b:3b:83:bb:31:1a:c5:8a:34:58:3f:4c:53:b8:
                    50:e2:81:ce:ef:bf:58:22:fb:f8:d0:ef:0c:80:9a:
                    d5:20:98:c5:46:48:b7:3c:17:20:8d:3e:e9:42:60:
                    79:f9:20:29:68:f1:3d:0f:3d:db:4f:8a:ce:4d:68:
                    0e:50:b9:15:18:34:60:ae:e7:1b:a0:b3:16:52:79:
                    7b:87:61:2b:29:aa:1f:f4:38:47:72:20:f6:7c:84:
                    71:3b:01:11:af:89:ae:09:ce:5b:53:eb:5f:82:9e:
                    35:d3:ce:11:72:ec:d6:8d:9b:64:98:f4:a7:0d:d6:
                    a9:bb:bb:76:12:9c:f6:68:ff:33:e1:42:42:71:3b:
                    4f:5c:f0:a2:ac:f9:c7:e1:79:bf:d5:e7:8a:98:41:
                    a8:68:56:3f:37:e1:c2:97:b5:95:ab:79:e1:e4:36:
                    d1:c1:cb:ed:ae:8b:f5:82:fa:ca:1e:cb:ad:20:e6:
                    34:db:85:10:c0:79:93:25:b8:0d:88:68:6f:b3:ef:
                    d9:c4:d0:71:d3:ed:e6:0a:57:f0:ee:8a:b9:4e:67:
                    e0:b0:e2:79:36:95:99:74:e0:b4:7a:81:54:cd:0a:
                    4e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:4E:58:E1:54:13:D0:9E:B2:E1:07:8C:92:2F:06:DE:37:6D:2B:11
            X509v3 Authority Key Identifier:
                keyid:6E:1F:12:40:9C:F3:9B:F9:13:C4:32:B5:87:6F:FA:FD:9F:D0:61:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919243F/E8DCA632B65411F09ECF4B7FC4F9AE02/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919243F/E8DCA632B65411F09ECF4B7FC4F9AE02/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:cd:a8:82:99:ff:47:91:73:70:e8:64:2e:8e:72:ec:39:dc:
         83:15:ae:b8:52:db:61:c7:51:63:a7:08:64:6c:cb:8a:8b:5a:
         71:1c:87:91:c5:54:34:f1:d7:b0:1b:d7:d2:e9:f7:15:f1:2d:
         65:16:29:bb:5d:9a:68:a2:38:6c:6e:bc:90:f2:66:a5:a4:98:
         85:ab:80:36:cf:fb:ba:98:27:8b:6f:96:e5:6e:9b:36:25:1a:
         8e:8c:be:c1:65:e1:d9:c9:45:51:9f:f8:c3:27:b4:2a:f9:53:
         96:a4:ca:c6:b7:ee:ac:ed:1b:66:f5:50:01:71:7f:a1:b4:ca:
         db:e5:30:fc:2a:2a:77:d9:f0:57:6a:34:b8:68:6b:d2:f2:0e:
         e4:f4:66:72:e3:5c:2f:c2:ef:bf:ee:01:57:c4:d4:e2:73:4f:
         6b:80:a9:4d:09:69:11:23:ae:82:fa:20:99:d8:e0:06:55:e7:
         06:95:3a:ce:5c:61:39:1c:c9:c2:6a:83:a3:44:2d:09:a6:20:
         1a:bd:90:ac:38:28:dc:3a:68:f0:52:72:6f:82:fe:1e:17:86:
         02:ed:c7:35:e4:8c:71:bd:15:51:4f:7e:a3:c8:70:db:03:49:
         18:21:64:21:95:ae:a4:fe:f5:ab:21:5d:4b:00:c1:86:81:ae:
         b4:d1:bf:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:18:32 2026 by rpki-client