Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912ABD9/24205366946111F1847016415811F970/wLIQOxrqOVwMXk0FCHXtWR5Y6Zc.mft
File:                     wLIQOxrqOVwMXk0FCHXtWR5Y6Zc.mft (raw, json)
Hash identifier:          WNtroo48/MzYrE9KL3Nq+bvjsk65zqJYQcwl4C1bPi8=
Subject key identifier:   CD:1A:0F:E1:A2:EB:23:1A:A6:C1:D4:21:2B:3E:86:0B:25:ED:AD:6B
Authority key identifier: C0:B2:10:3B:1A:EA:39:5C:0C:5E:4D:05:08:75:ED:59:1E:58:E9:97
Certificate issuer:       /CN=A912ABD9/serialNumber=C0B2103B1AEA395C0C5E4D050875ED591E58E997
Certificate serial:       08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLIQOxrqOVwMXk0FCHXtWR5Y6Zc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912ABD9/24205366946111F1847016415811F970/wLIQOxrqOVwMXk0FCHXtWR5Y6Zc.mft
Manifest number:          07
Signing time:             Wed 19 Aug 2026 09:55:59 +0000
Manifest this update:     Wed 19 Aug 2026 09:55:59 +0000
Manifest next update:     Wed 26 Aug 2026 09:55:59 +0000
Files and hashes:         1: wLIQOxrqOVwMXk0FCHXtWR5Y6Zc.crl (hash: fVLvUHwYcaoqp2abelo+TVH+u5OgI173o1oV+cCA+fc=)
                          2: 7B62C438946111F1B192A58E5811F970.roa (hash: 2AuZKlsIHFOh81wB7QXwwtU+CJbk9zUj9pZIxzQBDiw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912ABD9/24205366946111F1847016415811F970/wLIQOxrqOVwMXk0FCHXtWR5Y6Zc.crl
                          rsync://rpki.apnic.net/member_repository/A912ABD9/24205366946111F1847016415811F970/wLIQOxrqOVwMXk0FCHXtWR5Y6Zc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLIQOxrqOVwMXk0FCHXtWR5Y6Zc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:55:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912ABD9, serialNumber=C0B2103B1AEA395C0C5E4D050875ED591E58E997
        Validity
            Not Before: Aug 19 09:55:59 2026 GMT
            Not After : Aug 26 09:55:59 2026 GMT
        Subject: CN=6a857daf-e204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7e:81:16:84:66:04:09:e6:d6:77:f8:96:8f:
                    0c:5b:9a:6a:94:05:c6:80:8e:aa:be:74:5c:82:31:
                    a7:b8:77:87:ed:bc:d9:7e:00:35:ac:da:07:fc:c6:
                    5e:c9:0c:fb:40:23:48:c0:ea:b9:d9:ab:9c:9e:19:
                    91:7c:d6:18:3f:3d:22:b9:66:2c:f6:cd:ce:21:8b:
                    4c:47:7e:bf:ae:49:c4:da:25:5d:25:1d:f6:fe:a5:
                    34:c4:c0:13:84:cf:e5:05:6f:a9:fb:89:84:7e:19:
                    cf:a8:d1:cd:59:5a:48:82:ff:6c:29:2b:fc:b3:97:
                    2e:8d:fc:87:e6:56:31:98:71:e0:8a:a6:37:6f:5b:
                    3f:58:63:0f:da:09:0c:39:26:79:b0:10:43:0f:a6:
                    96:7d:8d:b9:0d:79:86:65:1b:47:a1:92:6e:3b:26:
                    ec:65:d4:26:bd:58:91:a8:28:a2:ff:c1:a6:53:1c:
                    85:33:c3:ad:21:76:39:31:81:02:ff:99:bf:5a:68:
                    e8:77:4c:e0:15:20:5e:e5:18:1c:80:82:7f:84:b3:
                    ab:d2:5e:2a:89:43:4b:a2:83:f8:3e:f0:83:ab:da:
                    3d:09:7f:0a:01:1c:0e:19:6d:fa:ea:5a:b4:4c:56:
                    66:29:05:2f:a2:10:84:28:33:b4:e6:47:92:2f:1c:
                    a3:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:1A:0F:E1:A2:EB:23:1A:A6:C1:D4:21:2B:3E:86:0B:25:ED:AD:6B
            X509v3 Authority Key Identifier:
                keyid:C0:B2:10:3B:1A:EA:39:5C:0C:5E:4D:05:08:75:ED:59:1E:58:E9:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912ABD9/24205366946111F1847016415811F970/wLIQOxrqOVwMXk0FCHXtWR5Y6Zc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLIQOxrqOVwMXk0FCHXtWR5Y6Zc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912ABD9/24205366946111F1847016415811F970/wLIQOxrqOVwMXk0FCHXtWR5Y6Zc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:2f:3b:46:7d:72:6c:b5:77:8a:ed:f4:dc:5c:0a:f6:4d:0f:
         aa:09:0e:86:e9:5a:7a:fa:11:38:cf:ce:29:b0:cf:f0:f9:ec:
         35:b8:5c:59:53:df:cf:0e:6d:f3:c2:15:df:f1:17:55:4f:57:
         c3:5c:b6:88:bf:64:8b:64:f3:25:f8:71:79:a7:e0:90:00:62:
         fc:30:85:c5:f5:07:f1:db:0d:d2:1c:fd:02:80:fa:f6:c2:36:
         79:7c:69:40:a2:46:67:d5:19:c3:75:53:3a:9e:05:3d:d0:ce:
         38:92:71:b3:7f:2b:cd:bf:9e:68:4c:64:97:ce:b0:4c:53:a5:
         ee:59:65:19:f3:44:d0:0d:81:f6:f2:42:34:00:6e:5f:ce:4a:
         c4:0b:91:4b:b2:c4:86:89:b4:92:c9:b5:2a:bd:3e:05:7f:52:
         aa:96:97:ba:99:32:2d:3a:79:f3:1a:c3:e6:fa:11:b3:90:f7:
         5b:2e:6f:3f:66:3c:ad:e6:70:2c:9c:ba:9d:53:2d:ab:c6:df:
         c8:aa:af:40:13:b5:22:19:9b:56:e3:29:64:e8:23:a2:35:3b:
         da:12:1c:ff:3b:56:f5:e2:48:8c:b3:c7:b4:fe:cd:1f:7d:b5:
         fa:75:c5:6e:df:c5:e6:6a:95:7d:6a:23:49:2f:ce:2d:fc:58:
         da:b7:96:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:41:57 2026 by rpki-client