Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A84B/4586942A895811F19F868C476511F970/SuvEOK546JixovhLo9P6ak_CnYI.mft
File:                     SuvEOK546JixovhLo9P6ak_CnYI.mft (raw, json)
Hash identifier:          C4Jn3CqzcpCkZTI63h3/CnfNZXDhTPqTq7B3Rq1vA+s=
Subject key identifier:   21:A4:D1:EA:32:C3:F0:EC:64:A5:FA:23:56:67:0A:F2:1D:90:C6:EE
Authority key identifier: 4A:EB:C4:38:AE:78:E8:98:B1:A2:F8:4B:A3:D3:FA:6A:4F:C2:9D:82
Certificate issuer:       /CN=A911A84B/serialNumber=4AEBC438AE78E898B1A2F84BA3D3FA6A4FC29D82
Certificate serial:       13
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SuvEOK546JixovhLo9P6ak_CnYI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A84B/4586942A895811F19F868C476511F970/SuvEOK546JixovhLo9P6ak_CnYI.mft
Manifest number:          0E
Signing time:             Wed 12 Aug 2026 06:59:06 +0000
Manifest this update:     Wed 12 Aug 2026 06:59:05 +0000
Manifest next update:     Wed 19 Aug 2026 06:59:05 +0000
Files and hashes:         1: SuvEOK546JixovhLo9P6ak_CnYI.crl (hash: ddpNaYySl6ilSd3qimn0rZYlWqqp1fVda5fL4dXwQxM=)
                          2: 290A7BCA961B11F19E161C1C5F11F970.roa (hash: rn+yexBoaoN0dNM06qrXYxNqaEqzTrQtkaoa6hqOEG8=)
                          3: ncrZtqP07N0Rae-6Z3E5S7bCLDA.asa (hash: xh0nkgewgKonUhZRB+ofLoB5Sl4ZWBCjlJa4MYIh6dA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A84B/4586942A895811F19F868C476511F970/SuvEOK546JixovhLo9P6ak_CnYI.crl
                          rsync://rpki.apnic.net/member_repository/A911A84B/4586942A895811F19F868C476511F970/SuvEOK546JixovhLo9P6ak_CnYI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SuvEOK546JixovhLo9P6ak_CnYI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Aug 2026 06:59:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A84B, serialNumber=4AEBC438AE78E898B1A2F84BA3D3FA6A4FC29D82
        Validity
            Not Before: Aug 12 06:59:05 2026 GMT
            Not After : Aug 19 06:59:05 2026 GMT
        Subject: CN=6a7c19ba-e28c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:65:3f:be:ec:ef:01:43:a6:b2:b2:8a:1f:4d:
                    78:13:4e:6f:df:5a:a3:cd:1d:00:93:c1:15:e8:a9:
                    58:71:92:25:23:e0:f4:71:ed:07:3a:5e:de:90:cc:
                    9e:35:78:2f:3d:ae:fb:fc:0d:9c:3a:89:2c:c7:5a:
                    f5:a5:8b:a9:03:5c:08:3a:c8:fc:26:2b:35:3c:6f:
                    47:18:4c:2d:dc:c3:02:f7:ff:ff:1a:38:65:16:22:
                    c8:c6:e7:08:28:24:6a:76:4e:08:f9:70:f6:ab:69:
                    47:6a:22:3a:89:a6:7a:d0:4c:5f:ad:12:a1:7c:34:
                    5c:56:95:28:98:81:55:d1:eb:5a:b1:11:2c:9a:cb:
                    e5:c0:71:8c:25:01:9f:88:7a:6a:1f:ac:66:d5:a1:
                    4f:c6:ae:8b:43:c3:21:32:4e:89:59:9e:80:d5:86:
                    cb:86:04:83:f2:a2:e6:b1:3b:2b:a2:19:3a:2f:af:
                    dc:9e:44:fd:8d:be:c2:a3:c4:d8:9f:40:c6:76:98:
                    f6:be:ae:2f:2e:35:c2:86:2f:40:c0:e5:6b:f6:db:
                    39:8d:c6:fc:11:91:61:7b:c2:4c:82:c3:2f:8f:a0:
                    be:6c:67:38:86:24:02:e4:2d:91:83:9f:e1:5d:2f:
                    8f:8e:1c:a5:4c:a6:27:72:27:bb:0b:4d:56:07:0b:
                    b9:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:A4:D1:EA:32:C3:F0:EC:64:A5:FA:23:56:67:0A:F2:1D:90:C6:EE
            X509v3 Authority Key Identifier:
                keyid:4A:EB:C4:38:AE:78:E8:98:B1:A2:F8:4B:A3:D3:FA:6A:4F:C2:9D:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A84B/4586942A895811F19F868C476511F970/SuvEOK546JixovhLo9P6ak_CnYI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SuvEOK546JixovhLo9P6ak_CnYI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A84B/4586942A895811F19F868C476511F970/SuvEOK546JixovhLo9P6ak_CnYI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:00:fe:2a:33:cf:2e:1a:d8:3c:a4:ed:c9:dd:0a:13:26:c8:
         95:74:5a:bb:2b:9e:09:64:b8:01:9e:94:f1:6c:50:b1:e3:68:
         33:31:4d:12:54:1d:4a:47:61:00:b8:27:5d:19:84:75:56:56:
         f0:bf:e5:5e:8f:b9:40:3c:a4:30:5b:e4:f6:cb:19:ef:68:6b:
         f5:d0:62:f6:50:75:c1:78:81:c8:00:1c:2a:5a:5f:18:97:3d:
         d6:6d:e0:04:72:05:60:01:43:2a:21:b4:0f:11:9e:8b:01:c3:
         11:f2:55:6c:f5:27:98:2a:4e:94:1d:3f:e9:c6:19:eb:e0:47:
         23:41:ee:9c:68:a9:a0:b6:fe:cf:52:fb:9d:7e:d9:99:23:e2:
         81:22:cc:1d:ec:5b:e8:2f:42:ce:64:f7:f8:54:b2:74:54:c9:
         b9:56:e0:d7:82:ed:97:62:a5:8f:26:a3:c5:93:74:3e:f4:d6:
         d7:8a:47:71:db:d2:d4:c5:50:af:16:ea:ac:f4:fe:6c:f6:c8:
         aa:5b:e0:b6:1e:b4:95:69:e1:a2:5d:fd:b7:84:5f:30:c5:52:
         94:0e:96:81:c5:c4:11:5a:2f:63:ab:ba:96:c6:a9:07:36:ec:
         46:79:73:0e:eb:bf:ec:83:58:aa:24:46:61:09:9e:15:96:2d:
         31:44:d2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:47:10 2026 by rpki-client