Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.mft
File:                     b8ItMPMZzWXbXj9v_F0UHNAWaII.mft (raw, json)
Hash identifier:          PAE0ncntamMd4veMKuPV8Ok+CtPEfF+RISytKzQegK4=
Subject key identifier:   92:D1:DD:9F:0E:52:05:B0:8F:A2:06:9C:9F:E4:14:3B:64:40:A2:D0
Authority key identifier: 6F:C2:2D:30:F3:19:CD:65:DB:5E:3F:6F:FC:5D:14:1C:D0:16:68:82
Certificate issuer:       /CN=A91A0916/serialNumber=6FC22D30F319CD65DB5E3F6FFC5D141CD0166882
Certificate serial:       E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8ItMPMZzWXbXj9v_F0UHNAWaII.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.mft
Manifest number:          DE
Signing time:             Mon 27 Jul 2026 08:40:37 +0000
Manifest this update:     Mon 27 Jul 2026 08:40:37 +0000
Manifest next update:     Mon 03 Aug 2026 08:40:37 +0000
Files and hashes:         1: b8ItMPMZzWXbXj9v_F0UHNAWaII.crl (hash: h6OCtBtFM8tK+oFnvpcRqTMCmwdGRGtGPMXavaeRPdQ=)
                          2: F5D3BEF837FA11F083B5FC7DC4F9AE02.roa (hash: THMYN1koeOfwnbK8AGxlReff3pZqD6xwEXO++zbayH8=)
                          3: F68ED40E37FA11F083B5FC7DC4F9AE02.roa (hash: EWbmDsTGqQLpUfNOlcyjqkg7ey8/2rO6qBfbLaQNH74=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.crl
                          rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8ItMPMZzWXbXj9v_F0UHNAWaII.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 08:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 228 (0xe4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0916, serialNumber=6FC22D30F319CD65DB5E3F6FFC5D141CD0166882
        Validity
            Not Before: Jul 27 08:40:37 2026 GMT
            Not After : Aug  3 08:40:37 2026 GMT
        Subject: CN=6a671985-b4fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c3:44:dc:ad:1c:5f:3a:92:53:b0:be:18:30:
                    94:ef:ee:1a:f5:be:17:7d:c8:39:89:fc:58:42:b4:
                    45:32:3b:45:33:3a:f5:db:05:ce:dc:50:a5:f7:92:
                    bb:57:6a:f4:b2:d2:63:76:58:d0:f9:ab:a7:69:e6:
                    65:3c:9e:03:8b:20:d6:5a:ff:8f:9c:66:78:92:3e:
                    41:9f:2a:9c:6c:9d:0c:d0:74:ec:a2:c6:83:4e:75:
                    86:f9:e0:1f:ff:6e:0c:25:cf:b5:40:9f:0d:60:49:
                    2e:34:1c:74:16:b2:1d:bb:d3:1c:92:ab:89:f7:05:
                    ac:dd:68:d6:cd:08:fa:a7:01:23:a7:7d:8b:70:31:
                    97:f0:72:f2:6d:1d:a7:90:ab:bf:63:b7:1f:b2:92:
                    24:30:c8:eb:05:3f:bf:e0:d4:00:3e:f6:51:f3:c9:
                    78:0a:82:f5:d3:56:e9:a3:94:96:da:2a:c6:50:d2:
                    0b:8c:07:26:ce:fe:89:64:37:67:2a:1d:a7:83:5f:
                    05:a6:13:8b:e9:94:bf:6a:b0:c8:8c:56:f3:58:1f:
                    c7:07:68:fa:04:90:38:59:2b:30:1d:a8:26:f3:57:
                    cf:17:ce:84:1f:dd:69:da:e0:97:e6:e1:53:6f:7a:
                    9f:31:55:b7:48:61:41:bc:70:89:0c:b0:11:4a:a4:
                    8c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:D1:DD:9F:0E:52:05:B0:8F:A2:06:9C:9F:E4:14:3B:64:40:A2:D0
            X509v3 Authority Key Identifier:
                keyid:6F:C2:2D:30:F3:19:CD:65:DB:5E:3F:6F:FC:5D:14:1C:D0:16:68:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8ItMPMZzWXbXj9v_F0UHNAWaII.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:d7:2f:a1:5f:34:63:09:55:d7:27:27:25:16:cf:08:af:87:
         38:c0:13:7b:79:68:52:98:66:a4:b9:82:d8:78:d6:b9:76:e5:
         ec:7d:7e:d3:c5:47:aa:7d:13:db:33:3d:92:1b:f8:99:69:d1:
         87:8e:40:61:50:48:a3:e9:61:fe:23:fc:90:dc:13:17:99:b7:
         f2:6a:95:ae:44:8e:50:dc:9b:5b:a5:4d:fb:6d:90:29:90:de:
         8c:14:89:7e:ea:fa:83:1d:25:8f:00:af:9b:40:3b:ab:c2:16:
         95:26:86:fb:23:d8:6d:af:74:ad:b9:2b:e3:fd:4d:f2:74:ab:
         bc:34:bb:ee:f9:a6:d4:ad:c0:d8:5b:79:15:c4:d2:de:d8:3a:
         b6:d5:38:04:ac:d6:99:36:29:6a:9a:43:97:04:10:a0:3b:e6:
         92:c4:1a:7d:7b:06:23:1b:e3:8d:91:66:7d:93:dc:74:13:f1:
         1f:82:79:2a:8c:89:92:c5:c9:d5:43:0b:90:96:38:88:a2:8d:
         e1:3b:cb:75:4c:1d:ec:b6:d3:d7:8d:a5:09:b5:aa:46:5f:51:
         52:9e:11:5f:a5:08:a2:b8:04:09:01:d1:27:33:8c:66:b7:97:
         47:76:97:5a:87:fe:36:14:c9:c2:a3:67:96:9d:d5:f8:74:c7:
         e1:f8:2e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:20:59 2026 by rpki-client