Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913B090/6B67243467F111EDBDC5852CC4F9AE02/s8lXWbAmAWnVga-ERmxca89vwds.mft
File:                     s8lXWbAmAWnVga-ERmxca89vwds.mft (raw, json)
Hash identifier:          N3KcilA9p35V+sTgDRU6PfiyLE65bqruR1qwp2QULkI=
Subject key identifier:   BD:CB:BF:B8:2A:4C:5E:A2:86:41:50:52:3B:E3:DA:56:70:46:B3:07
Authority key identifier: B3:C9:57:59:B0:26:01:69:D5:81:AF:84:46:6C:5C:6B:CF:6F:C1:DB
Certificate issuer:       /CN=A913B090/serialNumber=B3C95759B0260169D581AF84466C5C6BCF6FC1DB
Certificate serial:       02DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8lXWbAmAWnVga-ERmxca89vwds.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B090/6B67243467F111EDBDC5852CC4F9AE02/s8lXWbAmAWnVga-ERmxca89vwds.mft
Manifest number:          02D7
Signing time:             Wed 07 Oct 2026 01:30:05 +0000
Manifest this update:     Wed 07 Oct 2026 01:30:05 +0000
Manifest next update:     Wed 14 Oct 2026 01:30:05 +0000
Files and hashes:         1: s8lXWbAmAWnVga-ERmxca89vwds.crl (hash: boKmIvhMTPkAAj8rE2whJ5n1mFsoIeiH128vYY3ZxwM=)
                          2: B57CACF267F511EDA884E65BC4F9AE02.roa (hash: rd53I9p/WSE4c6AwU5a8hFcHTZZkVn7MtueB7HLYYks=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B090/6B67243467F111EDBDC5852CC4F9AE02/s8lXWbAmAWnVga-ERmxca89vwds.crl
                          rsync://rpki.apnic.net/member_repository/A913B090/6B67243467F111EDBDC5852CC4F9AE02/s8lXWbAmAWnVga-ERmxca89vwds.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8lXWbAmAWnVga-ERmxca89vwds.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 01:30:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 733 (0x2dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B090, serialNumber=B3C95759B0260169D581AF84466C5C6BCF6FC1DB
        Validity
            Not Before: Oct  7 01:30:05 2026 GMT
            Not After : Oct 14 01:30:05 2026 GMT
        Subject: CN=6ac5a09d-dd42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:08:a8:41:1e:a5:45:d4:76:67:c6:45:3b:21:
                    cd:46:13:48:67:3c:ea:bd:97:dd:7c:72:82:d9:54:
                    1b:cf:7d:3e:ad:92:56:dd:c5:c0:27:11:99:16:20:
                    d1:14:e0:ba:ca:b0:d1:4b:3c:9c:85:27:fc:97:82:
                    d8:cc:a0:a1:d1:6c:41:32:30:96:c7:99:5a:55:78:
                    a7:c9:57:80:8e:33:9a:0b:0b:ca:ce:21:b1:13:e2:
                    00:23:5e:85:67:20:03:fa:54:45:08:57:06:53:03:
                    0d:72:b9:c1:71:ab:f1:1f:b6:89:7a:f6:e8:f5:11:
                    35:4b:6f:39:08:f9:26:2a:b7:34:2a:e8:14:32:ef:
                    df:23:61:7c:5c:f6:21:f5:85:eb:16:46:09:4f:69:
                    54:7a:1f:0b:d3:39:e9:7d:d2:2e:fb:d4:99:4b:d4:
                    6a:27:89:99:78:e4:4c:3c:65:86:10:0c:9c:0d:2d:
                    3d:9d:39:28:f1:0e:42:1b:95:9c:db:0c:ff:d8:39:
                    4d:93:d9:4c:1c:65:be:ee:7d:e3:d1:bf:35:a3:79:
                    09:98:35:c4:ac:ed:0d:15:59:79:68:9b:2c:0c:c8:
                    ba:6b:54:0f:e3:05:40:74:e2:d8:ff:0f:2d:58:58:
                    ad:5f:73:ca:2d:6e:da:e6:4e:09:d7:e6:42:8e:33:
                    bf:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:CB:BF:B8:2A:4C:5E:A2:86:41:50:52:3B:E3:DA:56:70:46:B3:07
            X509v3 Authority Key Identifier:
                keyid:B3:C9:57:59:B0:26:01:69:D5:81:AF:84:46:6C:5C:6B:CF:6F:C1:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B090/6B67243467F111EDBDC5852CC4F9AE02/s8lXWbAmAWnVga-ERmxca89vwds.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8lXWbAmAWnVga-ERmxca89vwds.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B090/6B67243467F111EDBDC5852CC4F9AE02/s8lXWbAmAWnVga-ERmxca89vwds.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:16:b1:c4:c5:d9:c4:36:68:b1:37:87:be:75:e9:68:14:52:
         8b:d3:1e:ae:fa:ee:6a:35:57:01:9a:43:ee:3d:c6:1d:9c:1d:
         da:bc:12:52:e1:0a:32:07:96:68:b7:45:ed:c8:fd:7f:87:38:
         13:c1:f7:ef:75:c5:19:75:15:22:3a:a3:cd:ca:fe:fe:4d:a1:
         f0:2a:ac:3d:55:fe:32:cd:77:bf:3b:14:5e:4b:26:a6:15:ae:
         5e:b7:3a:ae:cb:82:23:ba:4b:7e:e7:7f:47:3b:09:ef:98:50:
         73:60:f5:f6:03:a9:4f:a6:2b:43:23:b3:1b:38:9d:88:35:bd:
         2a:e9:7b:39:f0:23:c1:45:ca:33:ac:ac:53:d7:49:45:81:38:
         f5:02:e9:1c:95:ca:f6:0f:da:03:8d:1b:cb:c2:3e:d9:16:a3:
         dd:af:dd:8c:ba:02:ae:ac:18:2f:2e:b6:ed:9c:6b:97:9f:be:
         74:d8:26:af:c5:aa:88:ae:d9:ce:4b:38:ec:de:2b:f1:a8:15:
         ed:a0:d0:62:99:c2:f8:e9:37:e0:1e:f9:22:60:6f:9c:3a:a1:
         4f:52:e7:b3:65:aa:de:65:69:6c:65:01:c2:47:89:c8:75:77:
         ed:41:40:9d:2a:08:6c:bf:34:b8:86:95:d9:1f:1f:1f:70:98:
         7c:d9:3e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 23:29:48 2026 by rpki-client