Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft
File:                     L8Qw8eIVy9fgjyZDiDcDUALeMak.mft (raw, json)
Hash identifier:          7ftelV0UrcpLapB/Eu3gpl0C8v0D8gnBq4g2vp2fTiw=
Subject key identifier:   97:83:60:34:67:51:E4:8C:4A:46:6C:73:6F:C0:B1:F3:2A:4B:F5:CE
Authority key identifier: 2F:C4:30:F1:E2:15:CB:D7:E0:8F:26:43:88:37:03:50:02:DE:31:A9
Certificate issuer:       /CN=A91CB8A3/serialNumber=2FC430F1E215CBD7E08F26438837035002DE31A9
Certificate serial:       0395
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8Qw8eIVy9fgjyZDiDcDUALeMak.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft
Manifest number:          0383
Signing time:             Wed 29 Jul 2026 01:34:11 +0000
Manifest this update:     Wed 29 Jul 2026 01:34:11 +0000
Manifest next update:     Wed 05 Aug 2026 01:34:11 +0000
Files and hashes:         1: L8Qw8eIVy9fgjyZDiDcDUALeMak.crl (hash: QU255HX6IkW4g/8gGNcrqjFFssNimRr9dvKvgetkzSk=)
                          2: 5E616E44841711F0B7A8C63CC4F9AE02.roa (hash: 2bSuW/W2EAJDExuMn72UQi0Hj4wXVmW13H/TPfYijPA=)
                          3: 36B29DDC841711F0AB46F416C4F9AE02.roa (hash: wgip0DQGeaZ0QNSC6Osjp3LdtBXVxXRo5X2o3r8AIKo=)
                          4: CC1ACE7A6BC711F098C3B76CC4F9AE02.roa (hash: BahbEschYMgJrMF0BLS9CUwIvpM5/L/G8tn8FPtp9ik=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.crl
                          rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8Qw8eIVy9fgjyZDiDcDUALeMak.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 01:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 917 (0x395)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB8A3, serialNumber=2FC430F1E215CBD7E08F26438837035002DE31A9
        Validity
            Not Before: Jul 29 01:34:11 2026 GMT
            Not After : Aug  5 01:34:11 2026 GMT
        Subject: CN=6a695893-ee54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:63:f1:f7:86:2a:bb:6a:e1:2a:71:c0:44:b6:
                    c9:04:5f:22:0e:36:32:23:b9:f7:9f:d6:f0:20:3f:
                    47:2a:8c:33:6f:42:00:18:64:8e:78:46:fd:e7:47:
                    ad:e5:3c:0a:f0:7a:1e:a6:b8:23:41:78:6b:4a:70:
                    63:bb:04:ce:c4:16:8a:35:d5:fa:f5:21:56:2f:6c:
                    68:47:5a:45:21:4b:da:1e:57:cd:02:84:21:e2:7a:
                    5e:a9:9d:4b:51:60:37:b5:e7:ba:2d:52:a1:f2:6b:
                    93:eb:d0:33:f4:cc:77:64:26:7c:aa:81:7a:0d:54:
                    74:8f:05:0e:73:db:f8:05:70:ab:7e:5a:85:04:ce:
                    e0:b1:8b:ae:d5:3a:98:5d:28:24:27:6b:0a:1a:8c:
                    44:c1:9d:58:3f:d7:75:e3:12:51:a6:64:fb:a0:0c:
                    54:54:47:1a:cf:43:a8:20:e5:68:c2:79:df:cf:c7:
                    f8:f8:93:e8:cc:90:3a:97:0f:55:02:fb:30:78:00:
                    5d:71:cb:a0:0b:d4:7b:69:c8:44:cd:f4:cd:0d:6f:
                    0c:4e:f3:be:50:2b:e7:f6:9d:0b:11:52:7c:82:0d:
                    3d:90:f4:58:6d:57:a8:ee:52:90:04:2e:a0:49:61:
                    30:69:d0:61:2c:d8:48:c8:9d:13:2f:39:1a:94:2d:
                    b6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:83:60:34:67:51:E4:8C:4A:46:6C:73:6F:C0:B1:F3:2A:4B:F5:CE
            X509v3 Authority Key Identifier:
                keyid:2F:C4:30:F1:E2:15:CB:D7:E0:8F:26:43:88:37:03:50:02:DE:31:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8Qw8eIVy9fgjyZDiDcDUALeMak.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:02:46:7b:73:ee:e3:ae:52:12:f4:7b:80:2e:0c:a7:b4:4a:
         f6:31:36:fb:c2:5f:87:5e:81:45:a8:f7:4e:01:dc:16:89:41:
         b7:77:27:7d:03:72:23:90:f8:e1:14:51:d4:f7:40:5d:ef:57:
         fb:01:ff:af:4c:2b:e4:b3:36:2e:9b:68:4e:02:a2:05:7a:04:
         bd:d2:14:ef:31:23:cd:22:83:b2:7a:6e:03:c6:34:55:0e:18:
         c1:7a:64:6c:f3:bd:f1:c2:41:0b:be:eb:73:b1:6b:bc:1a:72:
         8c:c1:28:88:c8:6a:02:c3:ea:e7:9f:ec:91:4f:5c:01:57:29:
         b0:99:09:00:af:b5:97:2c:92:48:ea:8e:fa:c8:30:19:a9:57:
         b5:98:e9:d0:8d:f6:57:a4:b2:b8:43:dd:26:a8:3a:95:c2:2f:
         d8:ef:ac:ca:23:12:a6:26:4a:10:73:be:2f:d1:bb:05:37:84:
         54:fc:56:68:29:cc:78:d2:68:b9:7e:b5:91:1b:13:35:60:13:
         cb:8b:55:2c:97:97:81:5b:3e:73:78:83:c0:cc:bd:4f:03:e5:
         ab:f7:cc:8a:3e:7e:5e:6c:72:ed:1e:51:0d:18:76:97:cc:d3:
         d4:0f:73:cc:d7:08:d3:17:4b:36:52:35:2f:a7:70:a5:37:24:
         c3:2e:d1:03
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA5UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0I4QTMxMTAvBgNVBAUTKDJGQzQzMEYxRTIxNUNCRDdFMDhGMjY0Mzg4MzcwMzUw
MDJERTMxQTkwHhcNMjYwNzI5MDEzNDExWhcNMjYwODA1MDEzNDExWjAYMRYwFAYD
VQQDEw02YTY5NTg5My1lZTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArWPx94Yqu2rhKnHARLbJBF8iDjYyI7n3n9bwID9HKowzb0IAGGSOeEb950et
5TwK8HoeprgjQXhrSnBjuwTOxBaKNdX69SFWL2xoR1pFIUvaHlfNAoQh4npeqZ1L
UWA3tee6LVKh8muT69Az9Mx3ZCZ8qoF6DVR0jwUOc9v4BXCrflqFBM7gsYuu1TqY
XSgkJ2sKGoxEwZ1YP9d14xJRpmT7oAxUVEcaz0OoIOVownnfz8f4+JPozJA6lw9V
AvsweABdccugC9R7achEzfTNDW8MTvO+UCvn9p0LEVJ8gg09kPRYbVeo7lKQBC6g
SWEwadBhLNhIyJ0TLzkalC22iQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJeDYDRn
UeSMSkZsc2/AsfMqS/XOMB8GA1UdIwQYMBaAFC/EMPHiFcvX4I8mQ4g3A1AC3jGp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjhBMy85NjY1MEYzOEZE
MTcxMUVDODI4OTgzNjVDNEY5QUUwMi9MOFF3OGVJVnk5ZmdqeVpEaURjRFVBTGVN
YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0w4UXc4ZUlWeTlmZ2p5WkRpRGNEVUFMZU1hay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QjhBMy85NjY1MEYzOEZEMTcxMUVDODI4OTgzNjVDNEY5QUUwMi9MOFF3OGVJVnk5
ZmdqeVpEaURjRFVBTGVNYWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaQJGe3Pu465SEvR7gC4Mp7RK9jE2+8Jfh16BRaj3TgHcFolBt3cnfQNyI5D4
4RRR1PdAXe9X+wH/r0wr5LM2LptoTgKiBXoEvdIU7zEjzSKDsnpuA8Y0VQ4YwXpk
bPO98cJBC77rc7FrvBpyjMEoiMhqAsPq55/skU9cAVcpsJkJAK+1lyySSOqO+sgw
GalXtZjp0I32V6SyuEPdJqg6lcIv2O+syiMSpiZKEHO+L9G7BTeEVPxWaCnMeNJo
uX61kRsTNWATy4tVLJeXgVs+c3iDwMy9TwPlq/fMij5+Xmxy7R5RDRh2l8zT1A9z
zNcI0xdLNlI1L6dwpTckwy7RAw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:07:07 2026 by rpki-client