Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft
File:                     8Ihby_xPi54CzI2RkpttUoNSrig.mft (raw, json)
Hash identifier:          COr1IDuBYLT/DfuCwL6gZRmYkliMs7NuJkKjcnHwHjw=
Subject key identifier:   7B:03:11:38:19:2E:F7:2E:07:83:51:7F:74:77:45:03:15:25:45:D4
Authority key identifier: F0:88:5B:CB:FC:4F:8B:9E:02:CC:8D:91:92:9B:6D:52:83:52:AE:28
Certificate issuer:       /CN=A91F894B/serialNumber=F0885BCBFC4F8B9E02CC8D91929B6D528352AE28
Certificate serial:       2576
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft
Manifest number:          254D
Signing time:             Fri 18 Sep 2026 15:43:47 +0000
Manifest this update:     Fri 18 Sep 2026 15:43:47 +0000
Manifest next update:     Fri 25 Sep 2026 15:43:47 +0000
Files and hashes:         1: 8Ihby_xPi54CzI2RkpttUoNSrig.crl (hash: HEIOFQg8Id1No6m7YWydrCE5TmDvcVVvczBxn3oSRyU=)
                          2: 524FF242CBEA11EE88969C0CC4F9AE02.roa (hash: rycLk4UK+xxvgQxEjrUg94ft0J4vTpCCFPONGxFmmI0=)
                          3: rvms7SMLwgO_3iqGevwVvKwKAMA.asa (hash: 03mIt6sx2N4kyRDmtrywhu7q0g8YM9WZvJByyOjFrj8=)
                          4: GiZqVXDFkfTOw9KbgmpHw5SLUWY.asa (hash: vDu9havXbmwfHPU3SNHzDoX5rB2pHYEh/QKpZcZTGtM=)
                          5: 0F15CD3AAF4011F1A81565FF6911F970.roa (hash: Xz7eZ1SV8R4oYvn9Xlw6Pv4LszQ2ezhKLHykoR+8jxw=)
                          6: CE7B5902AF3F11F186796EF16911F970.roa (hash: IHWM6RFhPrMmsqVLsW0iVew5UfTXyAVb0zZ4b4QqZQU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.crl
                          rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9590 (0x2576)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F894B, serialNumber=F0885BCBFC4F8B9E02CC8D91929B6D528352AE28
        Validity
            Not Before: Sep 18 15:43:47 2026 GMT
            Not After : Sep 25 15:43:47 2026 GMT
        Subject: CN=6aad5c33-41bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a1:a8:ee:4c:4b:af:42:8f:1a:33:27:46:ec:
                    ce:2a:22:83:3d:1b:f2:82:8d:e3:32:d6:49:80:e3:
                    3c:dc:c2:39:10:9e:ce:12:fb:27:0d:d0:4c:e9:b4:
                    ee:dc:37:87:19:a8:8e:5e:66:77:15:2a:d9:79:fa:
                    c9:35:7f:39:e8:c4:b3:b3:6b:79:ec:6d:25:e8:58:
                    7c:c3:6e:3f:5f:24:fd:cf:39:4b:b4:b5:c8:d7:25:
                    9e:9e:4f:71:0c:08:05:74:35:34:c8:c6:da:fc:ea:
                    48:6d:a8:3e:b9:64:11:f6:16:92:ab:16:ff:fc:3f:
                    2a:3a:ee:b0:03:72:94:19:db:51:b8:59:78:4a:74:
                    0a:b1:a0:ff:d6:d4:2f:60:d9:d2:1b:10:b9:a2:00:
                    b2:76:d5:45:f2:11:22:93:43:ca:16:05:a2:33:fc:
                    b7:47:e0:4c:30:3e:bc:c9:8e:f5:a1:ea:e7:94:7e:
                    12:90:a8:e7:4f:14:85:02:98:fc:e2:d6:92:1a:1a:
                    eb:84:07:c4:f1:f3:cb:d8:3e:3f:60:0c:56:cd:24:
                    c3:41:87:f9:f2:75:42:fd:8f:e9:2a:de:97:10:d7:
                    01:46:10:1b:40:0e:97:4b:50:6c:8b:7e:c4:b3:d6:
                    78:3d:e2:9a:d6:82:ed:e4:13:76:d4:42:14:fb:d9:
                    a6:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:03:11:38:19:2E:F7:2E:07:83:51:7F:74:77:45:03:15:25:45:D4
            X509v3 Authority Key Identifier:
                keyid:F0:88:5B:CB:FC:4F:8B:9E:02:CC:8D:91:92:9B:6D:52:83:52:AE:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:82:df:6d:90:34:a5:dd:02:53:74:da:7d:0d:14:8a:5a:70:
         06:d0:b7:31:b1:1c:a1:7b:8c:46:93:d9:36:7c:9a:89:0a:8f:
         d5:ed:6f:85:88:20:27:ce:81:f0:3e:55:ee:7b:19:44:47:92:
         b8:6b:7c:2a:aa:9b:6f:ff:86:08:25:5b:ca:88:ab:9c:53:68:
         7a:a9:83:9a:c1:73:1d:7c:f1:a5:d7:9a:37:b1:79:61:32:c4:
         91:dd:f1:2b:f3:be:06:5b:82:f9:8b:31:70:7f:d0:c4:e2:88:
         07:fe:c2:62:a5:41:1b:f1:5e:b6:68:d5:9c:c1:f3:1a:f7:c6:
         a4:d7:7e:8a:37:55:78:98:08:ae:36:b7:82:36:30:3c:a7:fe:
         ca:9d:ae:33:a0:70:0e:09:8e:ad:c1:10:36:fe:99:a8:21:41:
         b0:10:8d:f2:bb:42:5a:b4:8e:43:06:51:c5:d5:f0:0c:d8:ea:
         c8:b5:39:40:61:d5:b3:cd:4e:5f:ed:6b:9e:77:77:ef:fa:81:
         c0:0a:b8:3e:84:6a:d3:70:31:33:95:29:82:c9:f3:42:72:66:
         17:f6:a9:5e:f9:14:08:53:3b:d9:2a:ac:3b:19:bd:44:8c:77:
         d6:d9:08:05:72:5c:30:fa:fd:0d:ce:cb:c9:a5:aa:5e:da:8a:
         ba:c9:8f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:10:37 2026 by rpki-client