Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B090/6B67243467F111EDBDC5852CC4F9AE02/s8lXWbAmAWnVga-ERmxca89vwds.mft
File:                     s8lXWbAmAWnVga-ERmxca89vwds.mft (raw, json)
Hash identifier:          e9nkwjj8Wr30gjfcxVJ0WATvW91kgdejs7yIIotG0dA=
Subject key identifier:   F0:C4:42:74:87:B4:1A:B7:0C:D0:AD:85:03:9E:7F:0C:25:C6:B9:48
Authority key identifier: B3:C9:57:59:B0:26:01:69:D5:81:AF:84:46:6C:5C:6B:CF:6F:C1:DB
Certificate issuer:       /CN=A913B090/serialNumber=B3C95759B0260169D581AF84466C5C6BCF6FC1DB
Certificate serial:       02C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8lXWbAmAWnVga-ERmxca89vwds.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B090/6B67243467F111EDBDC5852CC4F9AE02/s8lXWbAmAWnVga-ERmxca89vwds.mft
Manifest number:          02BE
Signing time:             Wed 19 Aug 2026 01:50:17 +0000
Manifest this update:     Wed 19 Aug 2026 01:50:16 +0000
Manifest next update:     Wed 26 Aug 2026 01:50:16 +0000
Files and hashes:         1: s8lXWbAmAWnVga-ERmxca89vwds.crl (hash: WC0Ns4ZKqKS9fiOPpnfwl71RAfwUbV/lByk6U+6iQ2M=)
                          2: B57CACF267F511EDA884E65BC4F9AE02.roa (hash: rd53I9p/WSE4c6AwU5a8hFcHTZZkVn7MtueB7HLYYks=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B090/6B67243467F111EDBDC5852CC4F9AE02/s8lXWbAmAWnVga-ERmxca89vwds.crl
                          rsync://rpki.apnic.net/member_repository/A913B090/6B67243467F111EDBDC5852CC4F9AE02/s8lXWbAmAWnVga-ERmxca89vwds.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8lXWbAmAWnVga-ERmxca89vwds.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 01:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 708 (0x2c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B090, serialNumber=B3C95759B0260169D581AF84466C5C6BCF6FC1DB
        Validity
            Not Before: Aug 19 01:50:16 2026 GMT
            Not After : Aug 26 01:50:16 2026 GMT
        Subject: CN=6a850bd8-2d11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:dd:3b:09:7d:91:d2:c9:47:b1:61:90:fa:a9:
                    72:dc:2e:33:86:82:a7:08:e0:e3:a6:0c:06:a3:09:
                    bf:b9:56:c9:02:ec:06:71:cd:83:d5:ac:50:2e:80:
                    dd:67:b8:03:f8:87:16:c3:7f:92:c4:7a:5b:67:29:
                    99:a7:a2:c2:92:d4:b7:d1:c8:eb:d2:69:7b:32:ee:
                    e1:84:48:3d:b9:d8:ad:08:28:08:64:a4:1d:44:90:
                    1f:ae:f3:8d:f4:62:cd:6f:c5:c2:38:40:65:80:e2:
                    f0:9e:dd:99:ea:16:87:12:54:9f:83:79:a7:fc:3c:
                    58:c7:df:86:2a:ad:81:c4:6d:2a:33:86:2d:76:a0:
                    17:0f:12:f3:c9:f4:f6:3d:47:f2:59:73:ca:8a:18:
                    c0:c1:ea:33:bb:96:73:b0:60:34:0d:ba:84:5e:c2:
                    c6:24:bc:cb:ae:df:cc:0e:9c:70:18:ea:a0:03:19:
                    51:b4:d7:d8:3b:26:37:4e:7d:7c:a5:92:82:7e:64:
                    47:6e:07:e2:b3:2c:27:b3:f0:50:de:76:b9:73:7a:
                    a9:ee:65:78:87:dc:e0:46:72:f0:81:f5:b7:2c:1b:
                    1c:a0:08:1c:71:06:ed:1c:3c:33:fb:f0:01:bf:65:
                    7a:4b:94:c2:aa:61:75:d7:3e:ee:61:05:f0:16:00:
                    93:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:C4:42:74:87:B4:1A:B7:0C:D0:AD:85:03:9E:7F:0C:25:C6:B9:48
            X509v3 Authority Key Identifier:
                keyid:B3:C9:57:59:B0:26:01:69:D5:81:AF:84:46:6C:5C:6B:CF:6F:C1:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B090/6B67243467F111EDBDC5852CC4F9AE02/s8lXWbAmAWnVga-ERmxca89vwds.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8lXWbAmAWnVga-ERmxca89vwds.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B090/6B67243467F111EDBDC5852CC4F9AE02/s8lXWbAmAWnVga-ERmxca89vwds.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:9d:35:23:86:f8:33:65:d7:6c:82:03:20:11:b3:51:2f:3a:
         a2:5e:a4:6e:11:2e:ca:0f:72:94:43:1f:dc:a4:e1:8f:d6:77:
         13:cd:f9:0e:d5:35:43:37:b8:61:09:fd:a9:69:54:8c:5b:ad:
         de:0f:41:64:7d:2a:cc:a4:78:bf:63:e8:d9:45:ce:37:ab:a1:
         53:00:78:fe:03:65:78:65:69:71:54:61:d4:37:89:c6:65:1b:
         33:b2:44:f1:74:e7:06:df:39:c3:24:ce:e0:d8:f2:32:6e:61:
         8d:53:5d:d9:37:0a:29:b1:c3:24:b0:c8:7d:db:7d:01:3e:db:
         20:76:85:e6:36:69:31:76:18:bf:aa:94:20:4e:50:5f:06:42:
         26:b0:3a:ce:f9:ce:7d:14:b9:27:11:53:a7:7d:e8:b4:56:41:
         4c:ef:ce:2e:7f:38:40:bc:19:81:be:68:22:ed:68:6a:07:5a:
         00:fe:90:fb:53:f0:92:39:36:39:77:30:25:d5:f2:42:97:96:
         f3:5e:1d:ea:4f:da:95:07:4b:26:a5:d9:aa:34:34:1a:3f:f9:
         53:85:e0:fb:14:fc:54:60:05:ca:4c:41:01:9d:2c:fd:72:0f:
         a6:24:ed:e8:04:12:c9:74:60:9f:9a:09:a6:c7:33:cb:95:56:
         2b:79:8e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:44:31 2026 by rpki-client