Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.mft
File:                     b5HHak90ZkEA3Y3r0XhRQuE3gC0.mft (raw, json)
Hash identifier:          K7DnT4Z9A0vkCzrpJPZi9Ne5Pya1LxKDJQGi9VZM12w=
Subject key identifier:   94:87:5A:FA:C0:BF:A9:14:DB:01:56:2F:89:68:1E:7B:78:F9:62:75
Authority key identifier: 6F:91:C7:6A:4F:74:66:41:00:DD:8D:EB:D1:78:51:42:E1:37:80:2D
Certificate issuer:       /CN=A918D2CA/serialNumber=6F91C76A4F74664100DD8DEBD1785142E137802D
Certificate serial:       FD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b5HHak90ZkEA3Y3r0XhRQuE3gC0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.mft
Manifest number:          F8
Signing time:             Thu 03 Sep 2026 06:30:04 +0000
Manifest this update:     Thu 03 Sep 2026 06:30:04 +0000
Manifest next update:     Thu 10 Sep 2026 06:30:04 +0000
Files and hashes:         1: b5HHak90ZkEA3Y3r0XhRQuE3gC0.crl (hash: zdB0JS98SzAg+TMbkLwtJINq5ub4ghtl+Kdr9pT8rSY=)
                          2: 8C9E2B18354711F09FCEEE25C4F9AE02.roa (hash: vLHp4ObDO1IK1mUqYi6ciOieF4o9Rbhwa3XZX1qH6lI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.crl
                          rsync://rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b5HHak90ZkEA3Y3r0XhRQuE3gC0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 06:30:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 253 (0xfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D2CA, serialNumber=6F91C76A4F74664100DD8DEBD1785142E137802D
        Validity
            Not Before: Sep  3 06:30:04 2026 GMT
            Not After : Sep 10 06:30:04 2026 GMT
        Subject: CN=6a9913ec-61ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:60:dc:65:27:c4:83:44:ba:bf:f8:84:1d:f5:
                    25:a6:18:f4:3e:3d:d4:6a:c2:08:db:57:04:75:f5:
                    88:13:45:e0:70:30:5d:b9:d2:e5:b2:98:b8:b5:14:
                    85:2f:a1:c5:7c:22:6a:7c:41:cc:2d:5c:79:c2:0e:
                    fe:c4:98:4c:b9:82:7b:c3:fb:ad:4d:9d:53:88:79:
                    c5:be:6a:f2:4d:93:78:80:94:28:41:1d:29:72:a4:
                    c6:cb:0f:11:f7:7b:4d:49:74:21:b3:54:4f:ab:cc:
                    ec:d6:34:1b:8d:7c:e6:6d:48:14:f1:a4:71:3c:3f:
                    eb:94:dc:88:42:01:51:8e:4a:1d:e9:d1:f8:00:a3:
                    73:ce:f4:8e:ed:1c:c2:09:41:3e:ff:d3:0f:4e:3e:
                    37:f2:47:82:22:0a:eb:6c:c9:b5:33:e5:9d:29:3c:
                    2f:20:b3:88:7e:41:ca:23:b5:be:8e:be:ec:77:1a:
                    1d:45:96:b1:61:f7:b7:a1:0e:89:2a:c7:79:41:66:
                    7f:9d:ab:bd:2d:ac:7e:84:bc:a9:b1:6a:7b:85:a6:
                    13:21:c4:f7:59:59:df:f0:69:81:46:e1:cd:81:15:
                    ba:cf:b7:00:2e:df:b9:ea:b0:f6:04:65:d5:33:46:
                    c9:dc:7e:6c:28:01:44:84:46:c9:ec:01:b2:40:97:
                    c8:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:87:5A:FA:C0:BF:A9:14:DB:01:56:2F:89:68:1E:7B:78:F9:62:75
            X509v3 Authority Key Identifier:
                keyid:6F:91:C7:6A:4F:74:66:41:00:DD:8D:EB:D1:78:51:42:E1:37:80:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b5HHak90ZkEA3Y3r0XhRQuE3gC0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:b8:3c:22:3a:4e:b9:b1:bd:f2:ea:60:33:12:34:8d:9c:de:
         66:fc:72:6d:56:e6:0b:9d:68:42:1d:36:75:af:c0:4b:dd:3e:
         ba:16:21:02:d7:82:ae:ea:5f:0a:f6:3e:ce:9f:53:05:72:19:
         92:e3:b0:2c:e5:1a:e3:ba:ab:a0:f5:5f:54:92:46:16:19:82:
         4c:a5:04:c0:d0:a9:0e:cc:49:97:5d:36:3a:c4:49:e2:29:a1:
         2f:4a:b1:a7:c9:10:fc:54:2e:d9:0d:63:dd:28:fc:06:fe:cd:
         8c:54:be:d8:4b:0c:25:2d:ba:d4:36:0f:95:03:aa:be:fd:36:
         11:9b:c7:58:b2:69:a7:96:fa:a3:c5:48:86:14:38:ee:16:49:
         a1:0e:60:f4:e0:b4:ac:eb:0b:01:3d:8b:98:5c:1d:80:c2:2d:
         9b:35:30:d9:25:70:58:da:2d:2e:9e:d5:13:80:d6:3a:98:4e:
         79:47:6b:38:5e:05:24:f9:93:08:81:19:dc:41:bc:aa:a5:73:
         a0:fe:7b:09:bb:77:8e:dd:cc:48:98:08:d0:f6:1f:2b:71:4f:
         3c:b4:83:e9:96:57:16:18:42:0e:14:fc:e4:72:1d:b7:97:73:
         f5:ff:00:83:73:4d:bf:b4:27:e8:e8:01:e1:7a:0c:e3:12:ac:
         60:38:2d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:34:42 2026 by rpki-client