Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.mft
File:                     i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.mft (raw, json)
Hash identifier:          hbiWkUpLZfElrkBQYReoifOcFKcbfyeBv9gc4Jy+TP4=
Subject key identifier:   2B:86:C8:BC:62:CB:39:EB:29:CB:22:B5:33:C9:2F:BE:FF:83:CE:57
Authority key identifier: 8B:C0:1C:EA:44:D3:ED:88:F4:15:31:72:B7:92:45:67:15:C5:26:0B
Certificate issuer:       /CN=A91BE056/serialNumber=8BC01CEA44D3ED88F4153172B792456715C5260B
Certificate serial:       0627
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.mft
Manifest number:          0618
Signing time:             Tue 28 Jul 2026 23:28:28 +0000
Manifest this update:     Tue 28 Jul 2026 23:28:27 +0000
Manifest next update:     Tue 04 Aug 2026 23:28:27 +0000
Files and hashes:         1: i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.crl (hash: pkPwFnc3EgKqgdDNt90ympnY4p7rlX6BUzr54KkFxxA=)
                          2: F18DB130603911EF930C0567C4F9AE02.roa (hash: fyJmP2+tjH5jmHypwbkY3sx8LmyTBoCFRhQ62M+DiAM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.crl
                          rsync://rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 23:28:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1575 (0x627)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BE056, serialNumber=8BC01CEA44D3ED88F4153172B792456715C5260B
        Validity
            Not Before: Jul 28 23:28:27 2026 GMT
            Not After : Aug  4 23:28:27 2026 GMT
        Subject: CN=6a693b1c-cd0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2c:9c:7d:61:90:7c:38:d3:2c:db:72:6c:db:
                    1c:2e:3b:dc:76:df:06:39:09:38:56:fc:b4:40:82:
                    7f:09:ab:43:c7:46:be:de:9b:b7:69:ee:4c:0b:de:
                    4f:aa:5e:7e:8b:0a:fa:5c:5f:0f:f4:bb:e8:2e:30:
                    93:6e:51:2f:c7:c9:7f:dc:5b:ee:1d:76:85:30:5c:
                    c2:f5:a6:86:81:34:55:fe:5c:c4:61:cd:ab:ac:aa:
                    f7:0d:93:b7:dd:03:d7:c8:e3:aa:3f:15:ce:d5:b6:
                    bf:d0:71:ad:94:4c:7a:46:31:ce:40:bf:91:64:ce:
                    0e:57:04:44:01:08:1d:cf:4d:ce:94:2a:ed:7f:a8:
                    24:82:52:6c:3c:89:fb:f7:c1:78:90:9f:da:65:92:
                    9e:64:9e:6e:1b:dd:a7:b8:48:9c:d2:48:69:1a:23:
                    62:83:28:2c:b5:c5:a2:d0:5d:05:06:86:70:49:ad:
                    fc:0d:68:76:42:52:7b:3c:5d:b1:e5:b3:58:27:a5:
                    ff:2d:df:53:22:37:92:a5:6b:3b:6c:e8:fa:49:cb:
                    ed:13:b7:fc:86:09:f0:75:e7:60:8f:21:a1:cd:e0:
                    3e:98:cb:fc:c4:5c:52:8e:2e:23:33:95:e6:91:f6:
                    4e:89:07:ea:40:cc:a2:2b:60:6c:6b:f9:8f:e6:fe:
                    a6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:86:C8:BC:62:CB:39:EB:29:CB:22:B5:33:C9:2F:BE:FF:83:CE:57
            X509v3 Authority Key Identifier:
                keyid:8B:C0:1C:EA:44:D3:ED:88:F4:15:31:72:B7:92:45:67:15:C5:26:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:d7:ce:81:73:fb:48:59:c5:99:08:0d:92:5f:47:01:a9:4b:
         46:96:e4:c5:83:8a:a8:c4:1e:89:bd:9b:d2:70:b0:af:57:a0:
         00:46:98:77:ca:63:19:7d:aa:3a:3b:c0:0b:ff:21:e2:d2:4b:
         90:25:2e:19:35:14:56:ee:06:91:31:df:5f:d8:b1:9d:cc:c3:
         3a:81:d0:8c:a8:0a:1a:5e:43:fc:cf:23:ca:0f:02:9f:a9:2f:
         f1:fd:9b:15:0c:ff:db:7e:a1:e0:81:43:b9:f0:f6:1c:f1:cf:
         d8:a6:43:f2:00:87:ed:98:70:12:47:b3:8b:38:ab:7c:bb:4a:
         ec:c5:a8:fc:01:31:26:74:f3:17:b1:54:44:84:e7:56:51:97:
         f7:33:fc:0c:39:b3:4b:fa:84:87:da:1f:18:bc:42:34:b0:65:
         29:69:8a:de:2c:bf:f4:96:cf:54:d7:6f:ff:4a:a0:70:99:a0:
         90:4d:d3:09:0b:d6:01:55:9d:38:48:50:cb:c9:68:e6:87:81:
         b0:c3:34:26:6b:52:c5:e2:3a:43:fd:62:e5:25:30:68:75:ee:
         36:41:e3:30:95:37:ef:93:20:5c:21:a7:2c:ba:d6:e3:5d:95:
         b0:16:0a:fc:c1:85:62:b7:00:f3:55:8e:3e:b4:3b:b6:c2:1f:
         50:ad:13:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:43:35 2026 by rpki-client