Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140332/47E1C61665F211F081B9F11DC4F9AE02/8UL6kHTxVVk9RMPR0BSn3jlzcwU.mft
File:                     8UL6kHTxVVk9RMPR0BSn3jlzcwU.mft (raw, json)
Hash identifier:          aY0TKWmwvbeKoo6SlKvIU5tSdG2RzQxVgpEaUE1mZrM=
Subject key identifier:   24:E7:9D:37:51:36:32:5C:63:42:1E:C5:23:48:11:E4:B7:31:D7:33
Authority key identifier: F1:42:FA:90:74:F1:55:59:3D:44:C3:D1:D0:14:A7:DE:39:73:73:05
Certificate issuer:       /CN=A9140332/serialNumber=F142FA9074F155593D44C3D1D014A7DE39737305
Certificate serial:       D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8UL6kHTxVVk9RMPR0BSn3jlzcwU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140332/47E1C61665F211F081B9F11DC4F9AE02/8UL6kHTxVVk9RMPR0BSn3jlzcwU.mft
Manifest number:          D5
Signing time:             Wed 19 Aug 2026 07:30:38 +0000
Manifest this update:     Wed 19 Aug 2026 07:30:37 +0000
Manifest next update:     Wed 26 Aug 2026 07:30:37 +0000
Files and hashes:         1: 8UL6kHTxVVk9RMPR0BSn3jlzcwU.crl (hash: dZ3Adj0iL9FZbRxd8UIQho7gGMzgiflVPUOIUAgVBb8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140332/47E1C61665F211F081B9F11DC4F9AE02/8UL6kHTxVVk9RMPR0BSn3jlzcwU.crl
                          rsync://rpki.apnic.net/member_repository/A9140332/47E1C61665F211F081B9F11DC4F9AE02/8UL6kHTxVVk9RMPR0BSn3jlzcwU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8UL6kHTxVVk9RMPR0BSn3jlzcwU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 07:30:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 217 (0xd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140332, serialNumber=F142FA9074F155593D44C3D1D014A7DE39737305
        Validity
            Not Before: Aug 19 07:30:37 2026 GMT
            Not After : Aug 26 07:30:37 2026 GMT
        Subject: CN=6a855b9e-37fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:33:3f:9f:c8:db:08:8c:65:04:26:04:e4:fc:
                    bc:0b:4d:f0:51:4e:1e:86:78:6b:ec:4c:68:16:2e:
                    cd:ed:c0:20:f7:e9:9a:87:31:49:a2:b3:91:78:4a:
                    5d:ad:dc:27:82:2a:9c:3a:d1:4f:d5:3e:6b:f8:ed:
                    a3:81:74:be:9d:55:ed:6c:53:ac:bc:9a:bb:9a:bd:
                    5c:b9:ec:69:30:8e:a8:0f:8d:5c:0e:20:50:8e:b2:
                    d8:8c:b8:e8:7e:ab:6a:7c:3b:ce:04:27:ef:ba:ad:
                    ab:35:65:81:8b:ad:79:ea:af:9c:75:65:ee:5b:84:
                    6f:73:53:a5:e9:d6:26:72:fe:08:eb:9e:87:5a:3f:
                    35:c7:ad:c5:40:cc:ab:7c:e4:c9:3b:25:74:27:06:
                    0e:dc:66:7c:d0:ba:78:61:0b:a5:5e:8b:24:3f:6e:
                    3e:db:84:2a:8b:ec:1c:74:95:7c:d2:f6:65:f6:28:
                    9b:30:80:12:8f:10:86:74:01:b4:c9:21:b8:b5:f9:
                    81:b8:21:7e:f6:99:cb:67:59:6c:4c:bf:9a:75:f4:
                    71:39:68:fb:64:09:fa:2b:47:7e:8d:9a:54:5d:f5:
                    02:97:06:ab:22:cb:aa:33:1a:eb:33:e8:73:1f:1b:
                    c3:4c:94:9e:4c:58:c8:94:e8:e9:1f:4e:31:10:3a:
                    7b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E7:9D:37:51:36:32:5C:63:42:1E:C5:23:48:11:E4:B7:31:D7:33
            X509v3 Authority Key Identifier:
                keyid:F1:42:FA:90:74:F1:55:59:3D:44:C3:D1:D0:14:A7:DE:39:73:73:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140332/47E1C61665F211F081B9F11DC4F9AE02/8UL6kHTxVVk9RMPR0BSn3jlzcwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8UL6kHTxVVk9RMPR0BSn3jlzcwU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140332/47E1C61665F211F081B9F11DC4F9AE02/8UL6kHTxVVk9RMPR0BSn3jlzcwU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:0f:ba:37:fe:c7:be:e0:94:d6:18:dd:bc:76:56:06:bd:09:
         30:1c:d3:a4:67:ce:06:3a:6e:81:07:2e:8d:e9:28:87:62:cc:
         51:30:c9:4d:7d:4e:98:3a:1a:18:be:c5:d5:29:b4:d4:98:6f:
         29:b6:c7:81:a8:1f:06:1a:11:38:0f:09:f5:0c:61:ea:6c:52:
         72:19:ef:db:63:fb:0f:48:89:b8:7a:81:3e:42:8e:69:b8:e3:
         77:9a:1d:60:c9:0c:7c:7c:4c:f5:08:83:06:62:4e:b2:44:2f:
         3c:d8:36:3e:de:52:14:d1:c4:6c:5a:55:c3:5e:89:ac:9a:95:
         bf:2b:44:a2:0f:2f:07:9a:4e:ac:bf:20:0e:26:2d:4b:a3:3a:
         9d:36:ba:a6:28:e0:54:ca:e6:4b:37:c2:e1:f1:91:8d:f7:23:
         55:3e:6b:e1:d7:df:dc:7a:43:76:7c:6e:2c:62:e6:60:e4:54:
         e9:00:a2:88:18:8c:3e:aa:dc:e3:4b:37:44:f2:64:72:07:2f:
         44:a7:72:99:c2:6b:04:7a:bb:9e:b4:bc:f5:eb:b3:63:b6:60:
         8b:51:fe:35:03:91:d9:76:76:a8:f5:0f:af:8b:3c:52:50:28:
         a9:98:22:a0:b8:f0:1c:20:97:15:e7:22:50:55:6c:49:2b:ac:
         28:0c:7c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:28:23 2026 by rpki-client