Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft
File:                     8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft (raw, json)
Hash identifier:          FoeMkplY7swtN6+NgMf3AtVAEwVOaUAQy6eYtnh/U1w=
Subject key identifier:   7A:44:07:DF:7B:01:38:C1:EC:C3:B0:07:29:58:6A:CB:87:BC:E8:C8
Authority key identifier: F0:09:23:3D:8D:08:7F:C1:D0:F6:42:57:80:E3:A4:D8:44:A3:4F:81
Certificate issuer:       /CN=A9122ACB/serialNumber=F009233D8D087FC1D0F6425780E3A4D844A34F81
Certificate serial:       D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft
Manifest number:          D4
Signing time:             Mon 01 Jun 2026 07:30:03 +0000
Manifest this update:     Mon 01 Jun 2026 07:30:03 +0000
Manifest next update:     Mon 08 Jun 2026 07:30:03 +0000
Files and hashes:         1: 8AkjPY0If8HQ9kJXgOOk2ESjT4E.crl (hash: B9aM8yuXv8GTrK5uoCW/Wk1TPtbNkToimON9m+pkvwM=)
                          2: B5ACF6162FD811F0BCCB5C1DC4F9AE02.roa (hash: tWcNAFc3bYDjPCom57BiBbJ1UpCRJsDuVZnnn3Eh+8c=)
                          3: E8EA66103BDC11F1A0F6729AA5833773.roa (hash: HOtPEcNNuM1rQs6V4akweCKO9HvoxnkoVdQyxUxgTBk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.crl
                          rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 07:30:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 216 (0xd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122ACB, serialNumber=F009233D8D087FC1D0F6425780E3A4D844A34F81
        Validity
            Not Before: Jun  1 07:30:03 2026 GMT
            Not After : Jun  8 07:30:03 2026 GMT
        Subject: CN=6a1d34fb-0d55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:12:cc:3c:23:11:c9:66:00:91:72:83:1d:a7:
                    f4:3a:38:49:54:4f:7c:a2:1c:60:83:a8:f0:91:47:
                    94:e8:0e:e5:41:33:c5:3f:b1:96:52:3a:e4:00:91:
                    85:4c:e3:10:6a:7a:e2:bb:ee:15:8b:e4:13:b8:69:
                    ab:f6:95:bb:1e:e4:42:db:47:11:93:2a:28:c2:cd:
                    85:99:1b:71:5d:68:b6:cd:3e:11:86:c0:97:78:82:
                    4c:31:f0:a8:06:44:69:69:2a:09:52:8d:94:a5:19:
                    de:8e:5d:f3:5c:b1:a6:59:8e:91:21:12:d3:b8:6d:
                    fd:80:8a:d7:6e:0d:90:20:a2:d9:3d:a1:71:95:f1:
                    08:bd:16:06:d8:08:d0:fe:00:ae:09:08:e9:01:11:
                    6b:44:56:cc:89:23:35:15:fa:e9:20:71:bb:7f:2c:
                    cf:8a:9d:81:d8:bd:74:ca:e2:9e:f4:bf:f3:90:9f:
                    2f:55:3f:2f:7f:4e:0a:4e:2e:20:44:e7:22:5c:60:
                    bd:82:c4:20:aa:6a:79:60:ad:e2:c8:a2:f6:79:da:
                    12:29:88:db:c5:8a:ef:9c:e7:f5:8d:d3:9f:67:c3:
                    3e:13:4d:9b:2a:67:29:5f:3d:81:c2:57:d1:f3:40:
                    28:ff:83:66:c5:7d:e1:ed:15:f2:83:15:78:ac:3f:
                    5b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:44:07:DF:7B:01:38:C1:EC:C3:B0:07:29:58:6A:CB:87:BC:E8:C8
            X509v3 Authority Key Identifier:
                keyid:F0:09:23:3D:8D:08:7F:C1:D0:F6:42:57:80:E3:A4:D8:44:A3:4F:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:94:e5:5c:d6:7f:85:eb:f7:3d:e2:c9:6a:51:02:30:b3:da:
         0e:a4:a8:1e:00:3e:88:a8:a4:84:25:44:83:99:98:1d:c1:cd:
         8b:ba:81:52:48:84:c2:53:18:91:23:00:12:cf:7b:66:d4:b4:
         57:c7:5b:c3:57:34:ae:91:8b:7a:eb:35:ae:15:d7:f7:b9:2f:
         25:18:b0:51:b3:6d:7d:0d:7a:8f:07:a3:3f:8d:c7:80:66:44:
         4a:c3:b2:c9:b3:9f:72:f7:30:d3:e9:60:c4:2f:e6:28:31:57:
         f2:f7:e9:2b:68:c5:da:b7:7c:7e:a9:12:8c:9f:cc:b9:4a:a1:
         ae:ed:b6:a9:ed:33:71:eb:ab:9a:c7:a3:ff:e5:7d:21:cf:0d:
         42:93:c6:97:a4:d3:04:1a:40:0f:33:ab:33:18:1c:6f:f3:97:
         2b:b4:a6:9f:5d:50:9c:20:6d:42:cc:2b:23:cc:ab:ef:2e:9a:
         08:01:a0:ab:f4:3a:0e:d0:d7:ef:6c:d1:4d:7d:11:8a:e6:89:
         46:51:a8:4d:33:f6:ac:79:1d:20:5c:04:1c:c4:ca:32:a3:4f:
         25:31:f7:79:dc:dc:8d:80:3a:ea:d1:e8:0e:14:19:1c:84:e6:
         70:a7:0f:63:d6:4e:f9:94:85:b1:30:a4:01:02:71:b2:af:51:
         c3:9d:2e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:21:08 2026 by rpki-client