Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft
File:                     A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft (raw, json)
Hash identifier:          1QbXmpF0wAT53b2qD/angDLYgycvi//iledHHoxWf/s=
Subject key identifier:   14:36:43:09:34:E2:0C:72:4E:7E:EA:34:7F:C9:85:27:C9:72:3E:81
Authority key identifier: 03:FF:06:57:C0:EC:F8:73:98:30:33:F7:C6:C6:48:8B:33:78:9C:43
Certificate issuer:       /CN=A918CFAD/serialNumber=03FF0657C0ECF873983033F7C6C6488B33789C43
Certificate serial:       017A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_8GV8Ds-HOYMDP3xsZIizN4nEM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft
Manifest number:          017A
Signing time:             Sun 05 Apr 2026 04:03:30 +0000
Manifest this update:     Sun 05 Apr 2026 04:03:30 +0000
Manifest next update:     Sun 12 Apr 2026 04:03:30 +0000
Files and hashes:         1: A_8GV8Ds-HOYMDP3xsZIizN4nEM.crl (hash: JhGXfEygNLt3+NgV6FM2Q74be0CKLvNc5UaGxAlG+w4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.crl
                          rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_8GV8Ds-HOYMDP3xsZIizN4nEM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 04:03:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 378 (0x17a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918CFAD, serialNumber=03FF0657C0ECF873983033F7C6C6488B33789C43
        Validity
            Not Before: Apr  5 04:03:30 2026 GMT
            Not After : Apr 12 04:03:30 2026 GMT
        Subject: CN=69d1df12-ac36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b6:5a:51:ba:cf:6b:d1:ea:4a:a8:fa:a2:5c:
                    93:e5:69:ec:5e:f8:e5:c9:7b:3d:48:c6:7d:f7:51:
                    3a:c4:a8:9b:66:eb:63:0b:32:86:cf:cc:a0:f5:dd:
                    2f:93:7a:ea:e2:25:fd:34:b0:fd:7b:0b:63:11:e3:
                    b5:16:3c:8a:e4:9c:9a:4f:af:93:9a:2a:1c:15:51:
                    ba:10:09:90:8d:f9:b4:11:0f:73:86:d3:5a:bf:0a:
                    75:29:cc:e5:65:c1:b3:52:f1:5e:91:7b:d0:88:38:
                    87:f8:99:55:af:ae:b1:d1:1a:03:fb:0f:05:3d:3e:
                    09:29:b4:c6:33:68:eb:77:14:85:e1:d9:cc:0a:75:
                    39:2d:c1:26:ff:49:ea:12:68:83:64:aa:87:0e:06:
                    2a:1d:b8:30:de:99:a2:9a:93:b5:f8:80:91:9e:b1:
                    bb:f8:d4:24:8e:ee:8f:20:f5:a6:92:88:93:d0:d8:
                    0d:54:7f:45:ef:25:1b:e3:3c:1e:8b:1f:5a:69:da:
                    7a:cb:ee:a1:88:ab:a6:e3:58:f7:b3:f6:e1:e9:02:
                    77:cc:c1:5b:ff:27:ed:52:cb:9c:e9:67:26:cd:92:
                    5a:44:29:b2:8c:7b:ef:c1:94:5b:37:da:81:49:c8:
                    fc:67:e6:75:95:b8:f3:d7:7e:c9:35:df:06:cb:81:
                    4b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:36:43:09:34:E2:0C:72:4E:7E:EA:34:7F:C9:85:27:C9:72:3E:81
            X509v3 Authority Key Identifier:
                keyid:03:FF:06:57:C0:EC:F8:73:98:30:33:F7:C6:C6:48:8B:33:78:9C:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_8GV8Ds-HOYMDP3xsZIizN4nEM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:5a:dd:97:1a:5f:5f:93:8e:42:b9:be:22:3e:45:49:b6:ac:
         28:e2:fc:36:08:52:43:cf:bc:06:5c:71:e7:e6:c9:ee:36:26:
         ec:a8:35:53:ab:8a:53:d1:7d:66:64:e8:02:f7:39:14:3e:02:
         3b:0a:c2:e9:e5:4e:aa:d3:2b:28:e4:ee:17:ce:a0:ca:02:4f:
         0c:4a:f6:03:df:87:05:c0:fd:2f:56:de:72:d8:a3:4e:05:30:
         f3:46:0c:95:cf:c0:35:8f:31:68:b4:42:25:a3:c0:df:88:d5:
         e1:65:31:02:2c:c9:74:86:47:a9:3d:f8:5a:c6:88:7c:84:43:
         97:bc:2a:63:6e:d3:07:24:e2:ae:f7:cd:e4:c4:8f:d7:36:2f:
         16:93:e8:b6:4b:68:f4:df:06:58:35:d6:9d:d2:7c:bf:3f:a2:
         a9:51:42:76:cd:e1:7e:0b:1e:c7:01:4e:39:f6:3f:b8:af:76:
         d4:6a:21:db:3d:5e:3c:1c:f1:5c:04:df:be:bd:0e:49:d8:25:
         66:f0:39:d2:cc:8b:2a:47:40:6d:55:54:08:d2:b5:85:ec:db:
         bb:83:eb:66:7e:23:b8:14:bc:2f:67:3b:74:32:ba:65:64:01:
         16:4c:34:7b:19:d9:d3:bd:61:57:19:e1:63:a5:01:c1:db:5a:
         fd:93:92:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:42:53 2026 by rpki-client