Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DB66/806597ACE09A11EFB63A8130C4F9AE02/8p8VNXR1uHRvrXiTag_NhSbi1hM.mft
File:                     8p8VNXR1uHRvrXiTag_NhSbi1hM.mft (raw, json)
Hash identifier:          pn/miJiVxZA4hnUCff40k0nzjokTIN4hqw4uFobtw3U=
Subject key identifier:   81:63:E3:6F:8B:F4:DC:88:1E:5E:4D:EE:15:03:A6:1A:5F:93:E9:E4
Authority key identifier: F2:9F:15:35:74:75:B8:74:6F:AD:78:93:6A:0F:CD:85:26:E2:D6:13
Certificate issuer:       /CN=A911DB66/serialNumber=F29F15357475B8746FAD78936A0FCD8526E2D613
Certificate serial:       0126
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8p8VNXR1uHRvrXiTag_NhSbi1hM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DB66/806597ACE09A11EFB63A8130C4F9AE02/8p8VNXR1uHRvrXiTag_NhSbi1hM.mft
Manifest number:          0122
Signing time:             Mon 17 Aug 2026 06:31:32 +0000
Manifest this update:     Mon 17 Aug 2026 06:31:32 +0000
Manifest next update:     Mon 24 Aug 2026 06:31:32 +0000
Files and hashes:         1: 8p8VNXR1uHRvrXiTag_NhSbi1hM.crl (hash: phhBwcY/HWV/y+xuHNozf5Yy9xvSRJmJp8ck/BVrjvo=)
                          2: 879CFF8EE09E11EFAB364253C4F9AE02.roa (hash: 8I8Onw+//nlz52wlV7t5k0Pa05LgYX2FpILxARmTn8o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DB66/806597ACE09A11EFB63A8130C4F9AE02/8p8VNXR1uHRvrXiTag_NhSbi1hM.crl
                          rsync://rpki.apnic.net/member_repository/A911DB66/806597ACE09A11EFB63A8130C4F9AE02/8p8VNXR1uHRvrXiTag_NhSbi1hM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8p8VNXR1uHRvrXiTag_NhSbi1hM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 24 Aug 2026 06:31:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 294 (0x126)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DB66, serialNumber=F29F15357475B8746FAD78936A0FCD8526E2D613
        Validity
            Not Before: Aug 17 06:31:32 2026 GMT
            Not After : Aug 24 06:31:32 2026 GMT
        Subject: CN=6a82aac4-790d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d4:1c:4c:02:79:5c:d6:68:bf:77:6b:e6:77:
                    b5:6e:4e:35:c5:81:f3:c8:20:b6:a9:71:f4:11:74:
                    8f:cf:a6:99:f1:d4:13:8b:71:41:3d:0e:55:73:79:
                    e7:a5:11:d0:47:6f:0b:be:a9:14:4a:fa:2b:60:85:
                    7f:ad:d8:8f:3f:45:da:9c:d5:0b:41:93:e6:a9:e1:
                    25:04:aa:7e:64:e5:b0:ce:21:dd:f6:a2:b8:7a:f8:
                    f7:62:b3:55:7d:8e:1b:60:db:57:ac:fc:e1:d4:2a:
                    7a:d3:63:02:02:63:4c:86:5e:45:3a:14:bc:1b:4d:
                    02:52:91:7b:06:fd:33:a6:29:fc:b1:3f:d8:68:bf:
                    85:df:56:10:fb:73:ea:02:79:9e:e4:61:cf:17:6d:
                    e8:b4:10:40:5e:13:6e:27:9e:9c:32:ac:89:48:c8:
                    71:4b:f1:77:a9:73:1f:e7:90:2e:3a:53:4e:56:7c:
                    57:c5:3b:1c:1f:87:8f:8b:b6:52:0f:5d:c7:a8:3c:
                    b7:b8:4b:b0:72:be:4e:6b:ab:0c:5a:e1:38:2c:22:
                    ab:87:49:71:00:03:b7:c1:72:b3:78:b4:80:0c:d0:
                    9c:76:53:a9:e7:bd:ef:b7:f0:4b:1e:70:d9:71:d8:
                    4c:75:9f:d4:14:5c:57:35:a7:04:67:79:40:c8:51:
                    b3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:63:E3:6F:8B:F4:DC:88:1E:5E:4D:EE:15:03:A6:1A:5F:93:E9:E4
            X509v3 Authority Key Identifier:
                keyid:F2:9F:15:35:74:75:B8:74:6F:AD:78:93:6A:0F:CD:85:26:E2:D6:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DB66/806597ACE09A11EFB63A8130C4F9AE02/8p8VNXR1uHRvrXiTag_NhSbi1hM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8p8VNXR1uHRvrXiTag_NhSbi1hM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DB66/806597ACE09A11EFB63A8130C4F9AE02/8p8VNXR1uHRvrXiTag_NhSbi1hM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:63:f2:2b:d3:7a:00:9c:43:43:fc:c8:83:6f:10:8f:73:aa:
         7e:ee:31:f5:8f:31:36:3c:3a:5a:15:c0:08:2b:ed:bb:a6:ef:
         4b:e3:7a:cb:78:59:82:44:53:0b:1f:8a:b5:f3:3f:43:14:8d:
         8f:d1:be:1d:d1:6d:2a:cb:19:e2:98:21:f1:56:61:30:4a:10:
         3c:a3:e1:c7:b3:c0:ed:87:68:17:4c:f3:40:8c:19:f6:1d:ef:
         c2:7b:da:92:df:08:2b:ab:44:12:86:dd:02:e1:49:a8:c7:78:
         04:24:cf:98:ae:b7:9d:20:b8:0a:cd:b8:5c:d4:40:d6:21:21:
         b3:8c:7a:d2:a1:41:b9:97:47:3c:09:0e:80:4e:09:d5:1d:0a:
         84:8f:91:63:92:45:32:ca:d7:a4:9b:67:e2:52:91:f3:39:7c:
         c0:dc:0a:8c:fb:35:11:a7:c8:97:69:42:b8:61:34:01:b4:33:
         57:73:ff:e7:fd:c6:9b:7b:23:3d:62:67:53:db:ec:4c:15:52:
         1d:90:61:d3:5d:17:6b:4a:61:89:e0:21:04:13:9d:5e:ff:2b:
         9c:fb:4e:92:f1:4b:a1:9e:7f:96:79:c2:f8:14:9e:ad:f7:1c:
         b9:93:60:eb:59:40:8e:e2:42:3c:71:21:f0:a2:f4:be:b4:1e:
         a1:24:53:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 18 08:32:59 2026 by rpki-client