Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft
File:                     8XD1e07KEpakIh1wemTkKYk7h9Q.mft (raw, json)
Hash identifier:          +mbcsaThlvTNScqKfikOtMcFI6HQACPnV8bbULkx+9Y=
Subject key identifier:   B4:CD:99:8B:BE:7A:FD:40:7F:D0:04:75:86:0D:4E:FC:7D:ED:68:30
Authority key identifier: F1:70:F5:7B:4E:CA:12:96:A4:22:1D:70:7A:64:E4:29:89:3B:87:D4
Certificate issuer:       /CN=A91C4F28/serialNumber=F170F57B4ECA1296A4221D707A64E429893B87D4
Certificate serial:       01E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft
Manifest number:          01DE
Signing time:             Sat 13 Jun 2026 03:31:11 +0000
Manifest this update:     Sat 13 Jun 2026 03:31:11 +0000
Manifest next update:     Sat 20 Jun 2026 03:31:11 +0000
Files and hashes:         1: 8XD1e07KEpakIh1wemTkKYk7h9Q.crl (hash: PaJBtQh9ilcUMN4oUp4ORxAk+obEqqJGLi5Q1UesziM=)
                          2: 6DAB109E8DF111EEA5BB4A1BC4F9AE02.roa (hash: p9m+Ky6KPaxoCxqhurBlkPRkCfywo+5r7qphI33Ipdo=)
                          3: B59362A28D5C11EEADDC522EC4F9AE02.roa (hash: yzwQF5BWuhV75DE3qzozKQNyER1bQqJr/dSB8bkYg7Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.crl
                          rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 03:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 488 (0x1e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C4F28, serialNumber=F170F57B4ECA1296A4221D707A64E429893B87D4
        Validity
            Not Before: Jun 13 03:31:11 2026 GMT
            Not After : Jun 20 03:31:11 2026 GMT
        Subject: CN=6a2cceff-a097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f2:5e:b1:ca:fd:f3:54:f0:b3:63:ca:54:33:
                    3f:31:5b:64:ac:b4:2c:6b:bd:3e:31:c3:59:2f:ca:
                    bb:58:c1:cb:3a:ee:03:1d:e0:35:52:86:06:0a:83:
                    d7:b5:f0:43:b5:ec:63:fa:07:42:00:89:d4:83:38:
                    3a:de:44:14:80:ce:6f:1c:f1:ff:c9:01:b0:60:57:
                    52:ec:25:c3:3d:bf:eb:d9:77:f7:52:21:2a:0a:e7:
                    de:6d:7f:7d:56:a3:63:69:ee:11:6f:a9:95:78:f0:
                    2d:0a:86:81:06:d1:1f:a3:76:28:4f:be:2e:85:86:
                    91:f1:58:f0:89:2d:2b:3e:34:63:10:ee:88:21:d2:
                    16:59:2f:e3:ba:73:b6:af:bf:38:9d:a8:c6:ec:c0:
                    c3:02:f7:7d:c5:b8:b0:75:67:f6:d7:ef:be:15:dc:
                    02:cf:92:89:c1:97:c5:5f:d3:45:44:d1:e7:69:d5:
                    9c:f1:83:1c:40:f9:e0:ba:de:41:b1:70:fd:40:33:
                    65:80:9f:fd:3e:25:c3:10:87:25:fe:57:e3:1a:29:
                    45:63:75:af:11:ac:78:f2:38:87:4c:90:63:27:50:
                    2c:a6:20:51:7a:02:95:9e:e6:90:5d:f4:ef:af:42:
                    b3:48:4a:b0:02:89:77:66:f3:8a:0b:26:10:dd:ad:
                    a8:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:CD:99:8B:BE:7A:FD:40:7F:D0:04:75:86:0D:4E:FC:7D:ED:68:30
            X509v3 Authority Key Identifier:
                keyid:F1:70:F5:7B:4E:CA:12:96:A4:22:1D:70:7A:64:E4:29:89:3B:87:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:36:40:78:48:33:9b:8d:0e:57:11:53:0c:77:68:46:1b:c3:
         06:b6:60:8c:79:33:ef:d5:dc:c4:bd:ff:c3:32:b1:8c:53:23:
         86:d2:16:bc:93:65:1c:b1:bb:2c:22:44:17:1c:ad:d2:3e:3d:
         cd:2d:41:2c:60:35:ad:72:45:9b:7f:a4:d6:c6:48:5b:2d:8f:
         a9:dd:67:14:9a:ee:a9:89:5b:36:5b:dd:40:46:4d:2e:f7:a5:
         f4:bc:b2:e7:ab:5c:1b:32:d0:64:3d:fa:4d:5d:89:b4:17:3a:
         20:73:f2:67:ea:73:d5:9e:31:4b:b6:35:29:d6:da:54:41:18:
         29:a8:11:a6:ca:53:ff:62:93:b0:07:49:12:60:ed:89:0f:74:
         1b:44:8c:51:9a:e4:f9:76:bf:f0:45:18:7e:fa:b2:29:6a:8a:
         35:cc:f4:35:7d:1e:b2:0e:9f:f9:02:72:d4:fb:e8:d4:5c:93:
         ec:e6:d2:4b:41:3d:aa:44:a6:86:3e:a2:87:d1:f5:d8:de:79:
         7d:49:c9:90:ed:de:03:98:b8:f8:a9:2c:08:ec:4e:ff:9d:de:
         3d:b2:f6:e4:eb:91:3c:8e:43:b6:2e:85:62:89:43:54:21:9e:
         7a:0c:ea:83:54:bd:a1:52:42:a2:80:69:ef:d6:3f:d9:ce:19:
         76:3e:d4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:00:33 2026 by rpki-client