Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft
File:                     8ItqFjLJysLoaI3qSIfZMC6VYBA.mft (raw, json)
Hash identifier:          KRdkq55Du/niONjJjD7B39OfTpax2YeoNRHgSRSlO38=
Subject key identifier:   E3:E6:61:41:55:BF:6B:98:AB:B1:3E:29:60:27:C0:73:39:BA:ED:DA
Authority key identifier: F0:8B:6A:16:32:C9:CA:C2:E8:68:8D:EA:48:87:D9:30:2E:95:60:10
Certificate issuer:       /CN=A911FFAB/serialNumber=F08B6A1632C9CAC2E8688DEA4887D9302E956010
Certificate serial:       0843
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ItqFjLJysLoaI3qSIfZMC6VYBA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft
Manifest number:          082F
Signing time:             Wed 20 May 2026 21:03:17 +0000
Manifest this update:     Wed 20 May 2026 21:03:16 +0000
Manifest next update:     Wed 27 May 2026 21:03:16 +0000
Files and hashes:         1: 8ItqFjLJysLoaI3qSIfZMC6VYBA.crl (hash: oQyFgxKKjYwp3bNoLhIR+iTnwnF+jzQxxxG5SWZPi8c=)
                          2: 7E18ACF0C66811F084C00543C4F9AE02.roa (hash: 7XFhCYpRi5MWgMi60pgzWpPeSkzwa4nMJXrUSx4/k1M=)
                          3: B54C3DBA169411EBBEBD9A23C4F9AE02.roa (hash: NghPk/wVq3Vd7LHngXkzOUMOG/RNZ/zYTp/fCWTTyU4=)
                          4: B5DC8802169411EBBEBD9A23C4F9AE02.roa (hash: bNwR09y5zMMM14ZXXZzaqooJdRynsIYvdb/mm7Q6iWE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.crl
                          rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ItqFjLJysLoaI3qSIfZMC6VYBA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 21:03:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2115 (0x843)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911FFAB, serialNumber=F08B6A1632C9CAC2E8688DEA4887D9302E956010
        Validity
            Not Before: May 20 21:03:16 2026 GMT
            Not After : May 27 21:03:16 2026 GMT
        Subject: CN=6a0e2194-97fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3d:12:c8:ef:3f:9d:4d:a8:49:ff:9e:29:ea:
                    cb:00:54:02:2d:38:d4:77:44:be:49:3d:31:09:8a:
                    c8:77:28:55:af:fd:7e:1c:df:fc:fd:d0:d1:52:a8:
                    4d:d9:4c:03:19:d0:94:d8:26:ff:d8:2d:54:24:4c:
                    70:eb:cc:3d:11:4f:3f:b1:5d:e0:c7:e3:47:df:63:
                    eb:65:f8:a3:a5:ee:84:16:4e:26:1d:c9:95:ca:89:
                    f6:a5:d5:7f:b8:dc:84:df:9f:10:60:cd:55:0f:92:
                    75:0b:8a:3a:34:00:15:ae:70:4d:07:a9:d9:cc:ab:
                    28:64:33:cc:98:3a:30:1b:f5:86:1e:62:0e:23:04:
                    20:d1:b9:2a:d4:51:38:3c:79:1b:fa:05:81:37:78:
                    3b:cd:75:6e:78:6d:87:00:ae:88:d8:1e:ae:4e:e5:
                    c5:f4:16:c7:8c:42:bb:1a:ea:11:9b:03:42:1a:c8:
                    9d:1a:76:87:32:69:2b:6f:0b:62:e5:a8:8d:56:22:
                    32:2d:ad:f2:b2:e3:12:01:a9:c2:c8:99:0f:61:42:
                    3f:ab:62:d7:15:1f:4c:20:9e:98:9c:36:64:79:15:
                    22:7a:c8:54:c8:79:fd:db:53:c4:89:75:23:7f:b9:
                    0b:68:af:60:3a:cd:ee:69:42:16:06:35:8b:e6:99:
                    df:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:E6:61:41:55:BF:6B:98:AB:B1:3E:29:60:27:C0:73:39:BA:ED:DA
            X509v3 Authority Key Identifier:
                keyid:F0:8B:6A:16:32:C9:CA:C2:E8:68:8D:EA:48:87:D9:30:2E:95:60:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ItqFjLJysLoaI3qSIfZMC6VYBA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:7a:64:40:5e:8c:76:c1:b2:54:5f:f9:7a:97:69:5f:a7:b0:
         6b:b4:5f:da:ff:eb:61:4c:c7:f4:89:0a:a1:17:14:e1:0e:34:
         ad:50:23:d7:aa:bd:99:dc:68:5d:27:0e:1f:cb:82:7f:3b:67:
         c4:06:77:67:5d:fe:26:63:e3:25:58:cb:50:42:75:7e:8a:55:
         18:6b:8f:af:f5:4a:07:3d:09:7d:11:46:cb:a8:8e:32:9b:3e:
         41:8e:0a:74:85:d6:da:9f:f4:8e:65:2d:99:63:4c:94:90:60:
         72:6f:b3:72:c0:55:f7:0c:87:9c:5c:d9:72:19:96:d0:bb:d6:
         fd:8d:0a:ef:9c:1c:31:27:d2:51:db:af:21:0c:00:6b:48:6b:
         58:09:de:57:32:5c:05:e4:4a:b7:12:4a:79:a9:72:83:49:8c:
         82:06:76:05:56:c3:08:de:84:c8:b1:da:22:5f:ec:67:88:23:
         5d:31:ed:45:ad:a7:a2:c5:77:9f:a4:1a:4d:82:6c:ff:cb:42:
         2e:ad:14:84:10:b4:ae:40:6f:f2:8e:d8:44:28:b0:81:ba:74:
         ec:e5:ea:b1:eb:33:c5:d5:0c:a6:93:ad:80:7e:d5:c5:22:f8:
         e8:86:66:8a:ec:4e:a6:98:1f:fb:52:d1:9c:f0:9d:fc:1e:55:
         91:ad:bd:5f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCEMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUZGQUIxMTAvBgNVBAUTKEYwOEI2QTE2MzJDOUNBQzJFODY4OERFQTQ4ODdEOTMw
MkU5NTYwMTAwHhcNMjYwNTIwMjEwMzE2WhcNMjYwNTI3MjEwMzE2WjAYMRYwFAYD
VQQDEw02YTBlMjE5NC05N2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwT0SyO8/nU2oSf+eKerLAFQCLTjUd0S+ST0xCYrIdyhVr/1+HN/8/dDRUqhN
2UwDGdCU2Cb/2C1UJExw68w9EU8/sV3gx+NH32PrZfijpe6EFk4mHcmVyon2pdV/
uNyE358QYM1VD5J1C4o6NAAVrnBNB6nZzKsoZDPMmDowG/WGHmIOIwQg0bkq1FE4
PHkb+gWBN3g7zXVueG2HAK6I2B6uTuXF9BbHjEK7GuoRmwNCGsidGnaHMmkrbwti
5aiNViIyLa3ysuMSAanCyJkPYUI/q2LXFR9MIJ6YnDZkeRUieshUyHn921PEiXUj
f7kLaK9gOs3uaUIWBjWL5pnfNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOPmYUFV
v2uYq7E+KWAnwHM5uu3aMB8GA1UdIwQYMBaAFPCLahYyycrC6GiN6kiH2TAulWAQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkZBQi9BQTdGQTQwMDE2
OTIxMUVCQjQ1RDg5MURDNEY5QUUwMi84SXRxRmpMSnlzTG9hSTNxU0lmWk1DNlZZ
QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhJdHFGakxKeXNMb2FJM3FTSWZaTUM2VllCQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RkZBQi9BQTdGQTQwMDE2OTIxMUVCQjQ1RDg5MURDNEY5QUUwMi84SXRxRmpMSnlz
TG9hSTNxU0lmWk1DNlZZQkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWnpkQF6MdsGyVF/5epdpX6ewa7Rf2v/rYUzH9IkKoRcU4Q40rVAj16q9mdxo
XScOH8uCfztnxAZ3Z13+JmPjJVjLUEJ1fopVGGuPr/VKBz0JfRFGy6iOMps+QY4K
dIXW2p/0jmUtmWNMlJBgcm+zcsBV9wyHnFzZchmW0LvW/Y0K75wcMSfSUduvIQwA
a0hrWAneVzJcBeRKtxJKealyg0mMggZ2BVbDCN6EyLHaIl/sZ4gjXTHtRa2nosV3
n6QaTYJs/8tCLq0UhBC0rkBv8o7YRCiwgbp07OXqseszxdUMppOtgH7VxSL46IZm
iuxOppgf+1LRnPCd/B5Vka29Xw==
-----END CERTIFICATE-----
Generated at Thu May 21 12:36:43 2026 by rpki-client