Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft
File:                     8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft (raw, json)
Hash identifier:          DYto0QMsYAbHpAk7SqVFXAzNHgre+yi8XfQfL79ssqg=
Subject key identifier:   C0:D9:8F:E3:77:7F:CA:CE:F1:E1:03:34:C8:38:FA:8A:7E:76:D9:B2
Authority key identifier: F0:46:65:93:C2:B6:CE:A9:CB:F0:2E:26:AA:E6:BF:79:0F:52:7E:A8
Certificate issuer:       /CN=A91BF8D1/serialNumber=F0466593C2B6CEA9CBF02E26AAE6BF790F527EA8
Certificate serial:       0B1F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft
Manifest number:          0B15
Signing time:             Fri 12 Jun 2026 19:21:18 +0000
Manifest this update:     Fri 12 Jun 2026 19:21:17 +0000
Manifest next update:     Fri 19 Jun 2026 19:21:17 +0000
Files and hashes:         1: 8EZlk8K2zqnL8C4mqua_eQ9Sfqg.crl (hash: o2wpxj4UybD6RHx1o+9YUeZodq12edVembAvAHdmY+4=)
                          2: 19250B84675711EAA928E22DC4F9AE02.roa (hash: yAFGrO2x35rGErp9E92zZSEZN27Ua7PNYL2jUO6uhv0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.crl
                          rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 19:21:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2847 (0xb1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF8D1, serialNumber=F0466593C2B6CEA9CBF02E26AAE6BF790F527EA8
        Validity
            Not Before: Jun 12 19:21:17 2026 GMT
            Not After : Jun 19 19:21:17 2026 GMT
        Subject: CN=6a2c5c2e-019e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6d:b5:78:c6:86:2e:72:20:70:59:90:45:f3:
                    2a:74:29:3d:d7:68:84:34:84:79:07:90:36:9b:29:
                    d4:69:cd:ac:8b:bc:b1:15:23:e3:06:6a:e0:f6:bc:
                    8a:32:42:fb:70:c4:85:62:7e:0f:40:0a:85:94:68:
                    28:4d:0f:1a:ca:c0:54:0b:4a:96:a4:62:d7:47:25:
                    d7:ef:ee:c6:82:25:d6:01:28:0e:a8:cd:67:bc:82:
                    fa:24:09:d2:18:ff:c6:96:1e:48:d1:77:e8:e0:4d:
                    e4:0e:b7:d1:f8:ac:dd:58:b7:73:a6:ff:18:e6:bd:
                    69:16:21:80:a8:b9:94:44:ac:cf:12:2d:90:aa:79:
                    96:98:95:ec:8e:06:be:cd:db:72:eb:e3:2b:e6:8e:
                    e9:da:b9:8a:9d:1c:e5:24:a3:c0:c5:e3:8c:94:4e:
                    45:9e:aa:3f:6f:a4:1e:7e:cc:a7:0f:5d:df:8c:4f:
                    88:c7:10:30:48:d6:c7:46:cf:03:be:42:c5:a3:84:
                    9d:38:0d:d7:fa:7c:60:c4:bf:56:d8:36:9a:19:66:
                    9a:d3:86:6b:3b:5b:1d:26:23:c5:e3:da:46:9c:33:
                    59:c3:bf:cd:7e:31:83:10:27:c1:e2:f7:b4:e0:84:
                    31:3c:36:dc:e5:4a:e2:70:36:0f:c3:62:28:70:1a:
                    48:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:D9:8F:E3:77:7F:CA:CE:F1:E1:03:34:C8:38:FA:8A:7E:76:D9:B2
            X509v3 Authority Key Identifier:
                keyid:F0:46:65:93:C2:B6:CE:A9:CB:F0:2E:26:AA:E6:BF:79:0F:52:7E:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:55:20:0a:c2:5c:f2:66:18:95:bb:f9:7f:46:36:73:b6:5e:
         a9:3d:2a:74:98:90:87:d1:12:aa:39:fc:be:0a:a2:bb:e1:ee:
         08:05:92:3c:f5:3e:06:cd:cb:51:ee:5f:52:fd:fe:a7:d9:85:
         97:85:e4:02:b9:12:1a:3e:f9:22:91:b0:7e:62:7a:51:44:c0:
         39:25:e0:cc:f0:02:21:47:36:18:a2:da:5d:cb:ff:3d:ab:72:
         73:4a:3e:a5:bf:15:58:f3:c6:33:1d:fc:9a:15:be:66:00:b1:
         4e:02:26:a7:32:18:4c:c0:a9:89:06:e9:b8:3c:40:f8:bc:d9:
         7e:46:9c:b2:f8:1f:08:c1:7d:39:54:10:aa:fb:f8:97:b0:06:
         11:0e:f9:48:52:05:a2:7a:fb:91:3b:0e:8b:75:a8:67:df:9a:
         ff:7c:3e:14:22:35:10:5a:4f:93:a9:d4:05:8c:d9:e7:42:1d:
         f1:20:05:73:72:4d:9f:d0:a6:6c:ba:ba:1c:f1:fa:4b:51:62:
         f0:39:d6:4c:34:56:8a:d0:37:b4:2a:11:53:23:bf:09:9e:8f:
         99:87:8b:71:27:1f:b7:7c:e2:40:80:12:27:e2:d5:82:af:57:
         e8:17:4a:81:26:44:58:c7:91:ad:a3:3e:d1:22:7f:f4:97:06:
         3b:24:66:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:31:03 2026 by rpki-client