Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.mft
File:                     S8VilW0H0G-q3JIziLmGYPcofJo.mft (raw, json)
Hash identifier:          6UywkKYfazK2QnOimpNnHZLPVy2vTP7wqKk1dsT11Mc=
Subject key identifier:   83:C0:D4:A3:7A:EA:8C:3E:5B:75:A7:AE:DD:D8:3B:57:EC:C9:8C:15
Authority key identifier: 4B:C5:62:95:6D:07:D0:6F:AA:DC:92:33:88:B9:86:60:F7:28:7C:9A
Certificate issuer:       /CN=A91BF039/serialNumber=4BC562956D07D06FAADC923388B98660F7287C9A
Certificate serial:       0BDD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S8VilW0H0G-q3JIziLmGYPcofJo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.mft
Manifest number:          0BD3
Signing time:             Sun 26 Jul 2026 19:23:56 +0000
Manifest this update:     Sun 26 Jul 2026 19:23:56 +0000
Manifest next update:     Sun 02 Aug 2026 19:23:56 +0000
Files and hashes:         1: S8VilW0H0G-q3JIziLmGYPcofJo.crl (hash: v8msABQX57bJVJMgitN4hHuKLrFrsvaFhkNPqr3Ut/o=)
                          2: 6D49440845BC11EAB591BD20C4F9AE02.roa (hash: zPalni0azpF/zlC0w+aS0ngHnlgcsl2xEhMwm9vK8X0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.crl
                          rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S8VilW0H0G-q3JIziLmGYPcofJo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 19:23:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3037 (0xbdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF039, serialNumber=4BC562956D07D06FAADC923388B98660F7287C9A
        Validity
            Not Before: Jul 26 19:23:56 2026 GMT
            Not After : Aug  2 19:23:56 2026 GMT
        Subject: CN=6a665ecc-6c09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:6e:a3:ff:d5:cf:ea:f0:e8:cf:7c:53:62:fe:
                    cf:c8:92:3e:fb:bd:f0:0b:1d:de:9c:cd:eb:62:6a:
                    c7:cd:92:1f:d8:ee:76:a6:1f:aa:10:46:2d:c2:79:
                    2a:63:64:40:8d:fb:17:05:c7:35:2b:ca:38:1b:89:
                    2f:58:19:4c:df:ab:06:82:6b:c1:25:5c:ec:4a:51:
                    3d:5c:e2:36:45:31:73:0a:f4:13:7e:65:bc:83:5d:
                    d7:40:c3:03:3a:ac:f7:7e:34:cc:37:e0:eb:1a:ae:
                    e3:a7:11:3c:82:c4:1d:19:a8:e6:8f:bb:22:8f:9f:
                    c6:5f:27:7f:d3:0e:c2:0d:0d:ef:3b:8f:af:92:ad:
                    8f:fd:7c:0f:b5:e8:88:96:eb:07:dc:26:1a:58:1d:
                    24:84:cc:83:ef:a6:eb:ab:a2:19:e0:33:e2:65:16:
                    95:d9:9e:7c:89:59:3e:64:c8:84:6b:7d:91:67:06:
                    cf:2d:65:ec:18:58:14:96:c3:c6:7d:7d:7c:72:5d:
                    03:c2:3d:eb:69:c1:ae:ff:a7:10:27:9e:4e:a1:84:
                    13:e6:e8:63:19:b2:68:46:38:71:be:0b:ad:26:f9:
                    c7:02:28:10:ac:d0:27:1a:e4:a6:8a:75:2b:ca:60:
                    4d:68:08:be:91:11:48:d6:62:4c:52:ca:26:05:35:
                    fb:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:C0:D4:A3:7A:EA:8C:3E:5B:75:A7:AE:DD:D8:3B:57:EC:C9:8C:15
            X509v3 Authority Key Identifier:
                keyid:4B:C5:62:95:6D:07:D0:6F:AA:DC:92:33:88:B9:86:60:F7:28:7C:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S8VilW0H0G-q3JIziLmGYPcofJo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:44:8a:07:d7:ac:ab:fb:f8:f9:be:42:5a:22:b3:b0:d5:bf:
         6c:25:6d:d0:7e:1e:09:c4:ac:25:8b:75:2c:32:19:38:32:1e:
         a8:36:8c:99:3f:bc:23:ca:8a:5c:6a:c2:68:d8:31:b0:2a:97:
         09:02:ee:1c:33:7b:08:f5:b0:c8:dd:4c:c3:7a:46:cc:97:52:
         42:ea:55:21:cb:0b:02:4d:b1:e5:c3:0a:24:d8:f9:49:ca:0b:
         01:99:5f:95:60:96:73:ee:47:17:f6:a1:1a:04:08:2d:93:38:
         61:e5:68:a7:1a:55:6d:2b:dc:46:e9:ae:44:c4:ba:82:b1:c9:
         d5:3d:7c:cd:8d:64:ee:4e:25:e1:ad:9a:e2:92:b2:d5:04:f7:
         4d:56:25:c8:32:74:62:11:13:1f:67:ae:f7:9e:3c:16:94:ee:
         8f:0b:f5:0b:94:03:d8:e2:1e:77:d6:4e:f9:f9:94:9b:bf:ad:
         59:8f:fb:82:4f:20:29:92:35:c6:c0:40:3e:07:39:d0:1a:c6:
         eb:ce:46:40:16:16:3b:52:d7:77:29:c2:84:2c:e5:e1:ac:06:
         33:b1:1d:9c:b0:60:b5:4b:7f:f5:fb:8f:e4:a2:f1:a0:be:f5:
         0c:8e:0d:fb:97:13:04:67:43:1a:8b:77:a4:4e:f1:b6:4f:a1:
         37:05:5b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:12:46 2026 by rpki-client