Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft
File:                     8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft (raw, json)
Hash identifier:          fzg1PpA0sk5TpAZFOpgeVDIzC5vdbH/NZtH9ii77+Mk=
Subject key identifier:   73:04:7C:60:08:56:97:46:74:0F:BD:35:F9:C7:F0:09:70:3F:15:65
Authority key identifier: F1:3B:CA:80:4F:8F:19:81:76:F9:9E:7B:C9:AE:A9:8C:AF:C0:B8:B1
Certificate issuer:       /CN=A9140BD4/serialNumber=F13BCA804F8F198176F99E7BC9AEA98CAFC0B8B1
Certificate serial:       04E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft
Manifest number:          04C7
Signing time:             Thu 12 Mar 2026 23:27:23 +0000
Manifest this update:     Thu 12 Mar 2026 23:27:22 +0000
Manifest next update:     Thu 19 Mar 2026 23:27:22 +0000
Files and hashes:         1: 8TvKgE-PGYF2-Z57ya6pjK_AuLE.crl (hash: J3YBQBuaFEtWd+XBvB4j77ekSDty7PFH9/79bekywyM=)
                          2: 6EDD05143FA311EDABCBBA25C4F9AE02.roa (hash: JiYJBdKkc4+24n7PEkPckVDCC3V1amNAGcKt36T/kNc=)
                          3: 7125C7DE611411ECBF66B385C4F9AE02.roa (hash: sj+k2CBEk9o8Kiy3NDbS/AgiJ7I778UPHLaqip2rU0g=)
                          4: 6DE5D7943FA311EDABCBBA25C4F9AE02.roa (hash: opYG/THp6f3xNs9Il1aHZ0xQHhnpdVv74lxCqnBEIkw=)
                          5: 98ADC3467FBF11ECBBD2EE30C4F9AE02.roa (hash: 7M/BKi2irGP7xUYkb1R2uXaPgUqFTRpAka0mw8Km5ZI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.crl
                          rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 23:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1250 (0x4e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140BD4, serialNumber=F13BCA804F8F198176F99E7BC9AEA98CAFC0B8B1
        Validity
            Not Before: Mar 12 23:27:22 2026 GMT
            Not After : Mar 19 23:27:22 2026 GMT
        Subject: CN=69b34bdb-c85d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:80:6f:dc:63:81:e1:85:a6:8e:1f:65:2f:82:
                    8b:1d:05:83:af:20:d1:bc:47:91:98:05:76:a2:6f:
                    a2:42:88:b5:d0:49:97:02:c7:94:53:e6:d2:0d:ef:
                    36:e1:0e:70:36:e2:ab:bf:2a:56:ac:e8:c8:bf:6f:
                    54:2e:90:d9:41:49:88:2d:dc:34:f1:c7:57:a9:c3:
                    9f:e5:a6:8d:a5:e7:9a:6b:1c:44:c9:98:a7:30:d1:
                    46:02:e8:b6:57:05:f6:20:db:2f:f3:a5:3c:d6:89:
                    d9:26:82:04:12:28:e0:bd:bd:ab:57:2c:c2:f5:7c:
                    d9:7d:31:0a:3e:1e:c8:86:61:c5:34:7d:bc:d7:5d:
                    dc:67:1d:4d:b5:0b:2b:38:c5:d7:a9:3b:56:17:d9:
                    b6:61:7c:49:b0:55:8a:64:da:fc:19:ad:92:52:c5:
                    c5:35:8c:10:b0:00:f7:9c:8b:7f:ac:ed:ca:6f:72:
                    a7:61:40:44:e9:d5:6f:24:e5:da:42:63:78:bc:18:
                    81:e3:00:81:4c:c3:e0:17:cd:9e:0e:b0:12:dc:b6:
                    bb:64:f8:3b:0c:23:81:13:21:a0:35:c1:c3:f1:74:
                    1f:74:e6:5c:75:12:cf:74:60:c4:58:05:9a:1f:a3:
                    51:c3:fe:1f:55:87:76:04:65:c0:84:c4:98:35:20:
                    e7:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:04:7C:60:08:56:97:46:74:0F:BD:35:F9:C7:F0:09:70:3F:15:65
            X509v3 Authority Key Identifier:
                keyid:F1:3B:CA:80:4F:8F:19:81:76:F9:9E:7B:C9:AE:A9:8C:AF:C0:B8:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:27:11:24:e0:18:e8:61:d2:13:b4:27:8e:d7:6b:52:1b:6c:
         fa:1a:28:bd:9c:8e:ed:a1:29:00:6e:19:f3:4e:e3:ce:95:a6:
         46:bc:86:d9:b8:5e:ab:49:dc:ad:7a:34:79:e8:0f:f2:36:6d:
         77:b3:83:f6:73:b6:5f:56:b2:36:dc:a3:5f:98:02:ca:0a:11:
         5c:95:18:8d:d0:f9:ae:1b:46:0b:c6:f2:d0:5f:5c:33:a5:eb:
         1d:4f:5a:a0:a2:14:d2:74:0b:92:88:07:d5:2e:4d:ea:80:31:
         55:07:36:cb:31:e2:d0:c5:98:d2:5b:a9:e5:c1:8e:33:9a:b3:
         bb:10:1c:45:ac:08:fe:db:e7:a7:da:01:06:05:d1:0b:1b:bc:
         91:53:d5:9d:09:45:bb:36:6f:03:53:2c:f9:d1:d5:99:36:6b:
         ff:59:15:3d:5d:59:da:24:70:48:1f:a0:b3:00:d7:2d:03:d6:
         f3:80:ab:6e:44:1d:d4:ca:42:69:8f:9c:d5:c7:72:12:23:c4:
         0e:c8:c6:1f:61:62:d6:c2:d9:cc:76:07:25:46:52:66:b1:ad:
         f6:76:d7:42:db:ba:94:70:53:5d:26:23:d2:93:59:cc:92:95:
         59:d2:bc:44:7e:ef:24:72:af:e2:ca:d3:0a:c7:56:68:f7:17:
         fe:b5:61:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 08:40:35 2026 by rpki-client