Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.mft
File:                     8YaDAEWuVIbpCXNDfanSB6VmhpE.mft (raw, json)
Hash identifier:          8VCqW3rlMRWX9e4RgzKT1twMxWurYDJuporFncQ86XA=
Subject key identifier:   91:6E:5B:B6:4F:43:8A:CA:81:46:C3:45:4E:46:26:C9:07:50:D6:AE
Authority key identifier: F1:86:83:00:45:AE:54:86:E9:09:73:43:7D:A9:D2:07:A5:66:86:91
Certificate issuer:       /CN=A91F5AAA/serialNumber=F186830045AE5486E90973437DA9D207A5668691
Certificate serial:       32C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YaDAEWuVIbpCXNDfanSB6VmhpE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.mft
Manifest number:          32C8
Signing time:             Tue 28 Jul 2026 15:29:40 +0000
Manifest this update:     Tue 28 Jul 2026 15:29:40 +0000
Manifest next update:     Tue 04 Aug 2026 15:29:40 +0000
Files and hashes:         1: 8YaDAEWuVIbpCXNDfanSB6VmhpE.crl (hash: jW4PFgpBQQ8uI0lIuuT1zf6w302AwMTlpWd+6R4f++Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.crl
                          rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YaDAEWuVIbpCXNDfanSB6VmhpE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:29:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13000 (0x32c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5AAA, serialNumber=F186830045AE5486E90973437DA9D207A5668691
        Validity
            Not Before: Jul 28 15:29:40 2026 GMT
            Not After : Aug  4 15:29:40 2026 GMT
        Subject: CN=6a68cae4-48c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9e:98:a3:aa:11:58:b2:45:19:71:85:98:4c:
                    fc:79:f2:ed:02:57:79:9d:5d:9c:6c:98:0a:e8:38:
                    82:67:f9:5e:67:a4:ba:9a:3a:4d:23:b3:6a:7d:93:
                    1d:f6:52:38:79:21:12:0c:86:c3:bb:7a:39:99:77:
                    48:7b:fd:69:49:50:f7:e5:82:a4:f2:c1:64:e5:23:
                    95:14:20:bb:b6:2a:27:7a:2f:1c:e8:d6:d9:ad:9f:
                    52:a1:98:61:9d:76:1d:93:40:03:3e:30:48:5e:19:
                    b1:8b:8e:5f:fe:b8:3f:4a:e0:da:02:60:0e:58:a0:
                    41:b3:aa:34:1b:fb:a2:7a:5a:df:e5:3e:0f:94:5b:
                    88:2d:13:57:eb:7d:ba:31:58:3f:e7:74:d0:52:d1:
                    42:fa:ee:ec:ba:e6:e2:a3:c2:ae:98:db:7f:98:a7:
                    d3:59:f7:03:5c:fa:ba:56:a0:c8:cb:81:62:4f:cd:
                    9e:b6:26:51:d1:fd:1e:18:4d:ea:d9:26:cb:5d:01:
                    0c:a1:57:3c:35:b6:b5:7f:5e:8b:90:a1:8c:6e:e0:
                    88:28:66:ca:d0:7d:a7:2f:8d:e2:3f:69:4a:2c:2a:
                    06:be:86:64:ad:6f:00:b1:92:e0:38:c2:43:c6:cb:
                    64:41:f1:31:9c:d2:17:34:25:30:22:14:52:82:cb:
                    26:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:6E:5B:B6:4F:43:8A:CA:81:46:C3:45:4E:46:26:C9:07:50:D6:AE
            X509v3 Authority Key Identifier:
                keyid:F1:86:83:00:45:AE:54:86:E9:09:73:43:7D:A9:D2:07:A5:66:86:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YaDAEWuVIbpCXNDfanSB6VmhpE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:11:3c:5d:ed:40:c5:75:a8:0f:88:46:79:cd:bc:9a:5e:45:
         87:2c:db:95:73:54:ad:80:bb:21:1f:a3:ef:ca:4f:49:7f:c9:
         48:81:54:b2:dd:06:5e:67:67:7b:84:32:e0:17:d5:82:79:e1:
         cf:41:b9:bd:5d:5f:4c:c2:b8:16:8a:8a:bd:30:75:d3:2f:e2:
         80:8b:7a:74:d4:75:c1:7f:2a:76:81:19:c9:6d:7d:2f:28:50:
         59:71:e1:06:f5:58:7c:e2:82:ce:e6:f9:41:3a:24:4f:bb:6f:
         96:32:69:4e:cf:bc:67:fb:0e:ca:61:21:85:5a:f2:9b:ab:cb:
         1a:3b:1f:7f:39:04:dc:7c:85:88:f9:c6:f4:cf:9b:36:9f:f0:
         3e:15:0d:db:94:52:d7:70:11:37:38:31:a0:8a:40:33:b2:b7:
         1a:83:66:e4:3b:dc:44:88:2c:26:4a:15:d1:e9:00:5f:c5:38:
         c5:79:fa:06:1b:65:85:88:50:00:ad:8b:e8:47:eb:f2:0b:6b:
         04:c7:bf:7d:f5:0a:86:a6:2e:6a:94:96:d3:79:b9:f3:0f:48:
         bd:3e:2d:3c:80:60:fd:85:30:06:a5:e3:35:b9:c3:57:2c:77:
         c2:18:14:87:34:f9:e9:0b:5e:9c:48:f4:6a:9a:a4:0e:e9:25:
         a6:3d:3c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:12:43 2026 by rpki-client