Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.mft
File:                     L996avkE3yzUfmXMwMnFzL8jmOU.mft (raw, json)
Hash identifier:          CDRr596O08XuUQbPaxHsvJkcCkFGVj5/wapQdwWbsjA=
Subject key identifier:   AC:8C:23:2F:8D:88:21:30:03:73:88:1A:DB:09:77:D4:20:FB:8B:86
Authority key identifier: 2F:DF:7A:6A:F9:04:DF:2C:D4:7E:65:CC:C0:C9:C5:CC:BF:23:98:E5
Certificate issuer:       /CN=A91273D6/serialNumber=2FDF7A6AF904DF2CD47E65CCC0C9C5CCBF2398E5
Certificate serial:       0895
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L996avkE3yzUfmXMwMnFzL8jmOU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.mft
Manifest number:          088C
Signing time:             Tue 18 Aug 2026 21:02:36 +0000
Manifest this update:     Tue 18 Aug 2026 21:02:36 +0000
Manifest next update:     Tue 25 Aug 2026 21:02:36 +0000
Files and hashes:         1: L996avkE3yzUfmXMwMnFzL8jmOU.crl (hash: WgUu6EP3LqYezLZmdwRNFLuETyWT1qh0d4YE+0ID2fM=)
                          2: C1B1AEC6051111EBBA2CAF5CC4F9AE02.roa (hash: FbDgkdDDZMbNMRMdVxYm9VIX+tjPFoWLYLBx+uGl7CM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.crl
                          rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L996avkE3yzUfmXMwMnFzL8jmOU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 21:02:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2197 (0x895)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91273D6, serialNumber=2FDF7A6AF904DF2CD47E65CCC0C9C5CCBF2398E5
        Validity
            Not Before: Aug 18 21:02:36 2026 GMT
            Not After : Aug 25 21:02:36 2026 GMT
        Subject: CN=6a84c86c-fc37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2c:bd:df:70:80:a3:3d:f6:47:19:f2:63:c1:
                    6a:b2:41:5d:49:91:50:e6:8c:5e:42:84:85:50:9d:
                    96:54:47:d7:10:75:d1:d8:da:f2:31:06:1b:be:06:
                    13:42:70:0f:7d:ca:ea:58:7e:b1:e1:49:b8:0c:c1:
                    0b:f7:3c:9f:39:2c:d2:fd:a0:18:86:18:cd:29:5c:
                    6f:f5:7f:3b:4d:da:3d:8d:c8:be:23:fb:53:c6:76:
                    34:15:98:21:87:23:0f:6a:df:cc:c5:64:22:56:a2:
                    3d:cd:94:bb:a1:8d:9a:e7:8d:c8:b2:3f:5d:42:d9:
                    a3:56:e3:10:79:b1:37:ec:03:20:5d:7d:4f:b7:83:
                    36:a6:6f:b0:ff:65:58:96:dd:3f:1c:c7:dd:7c:06:
                    88:b0:ee:35:1a:cf:ef:5d:e9:ee:1f:d1:0b:10:73:
                    83:70:50:b4:ff:2f:fc:e7:74:0a:66:a2:83:17:1d:
                    7b:74:e0:43:b8:d7:5c:7e:53:a1:1b:29:7f:f3:57:
                    39:a4:a2:09:8f:45:08:b7:73:c7:be:3f:09:1b:bc:
                    51:bd:28:f7:4e:8f:61:bf:92:ac:5d:de:c7:d3:0d:
                    e8:a4:7e:59:41:2f:09:1e:aa:e2:70:0b:46:81:a6:
                    72:7b:a5:40:a1:cb:c0:b7:89:33:20:76:77:b9:86:
                    4a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:8C:23:2F:8D:88:21:30:03:73:88:1A:DB:09:77:D4:20:FB:8B:86
            X509v3 Authority Key Identifier:
                keyid:2F:DF:7A:6A:F9:04:DF:2C:D4:7E:65:CC:C0:C9:C5:CC:BF:23:98:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L996avkE3yzUfmXMwMnFzL8jmOU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:c6:13:f0:9c:a9:b6:61:ac:c3:db:78:7b:18:20:0b:cf:31:
         bf:39:77:47:64:f9:e7:ed:9e:76:0d:d7:4b:a6:44:b8:de:50:
         73:53:d1:3c:89:c5:6f:fe:30:69:13:8a:66:7f:f2:e7:5e:65:
         27:9c:ce:2e:ca:25:4c:f6:d2:6c:5c:6f:7d:b4:33:c9:4c:4e:
         fd:2b:5d:11:6f:5d:b3:f8:75:f6:ba:24:ea:05:99:41:c3:eb:
         c8:1e:70:24:07:19:6a:24:ce:10:43:ed:c3:94:86:99:ce:e5:
         f3:6d:dc:b6:43:5d:70:2d:e7:be:5a:6f:ac:5b:e2:44:58:f4:
         12:49:25:3c:16:2e:6d:41:3b:ea:f2:23:1e:ee:4c:49:85:91:
         2b:69:c1:b7:4e:4e:24:e8:a2:8d:ea:3a:0c:93:25:37:01:9c:
         d3:d0:7b:5c:1d:8c:3c:08:c3:03:f8:ec:97:86:32:67:58:58:
         60:b6:8d:99:ad:9f:0d:2e:1c:57:4f:08:9d:a9:db:29:56:4f:
         16:e1:27:2b:cd:ec:0a:a2:3a:67:84:f9:f5:98:ce:07:28:ba:
         25:5a:73:c9:9a:7d:e9:85:26:ff:9c:74:41:1a:66:21:96:5d:
         f1:06:d8:40:4d:61:8d:1d:4d:67:00:7a:5f:b0:70:1e:64:27:
         bb:dd:08:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:46:08 2026 by rpki-client