Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft
File:                     788TGtZIDR3QTx1EduNZVFL_RBw.mft (raw, json)
Hash identifier:          q+n1i65oGw6o2pzym5kAFzzyPW01FGztxBmBK1ss6xo=
Subject key identifier:   75:89:1E:92:74:1C:1B:89:D9:90:2E:7C:F6:74:50:18:52:2F:CE:34
Authority key identifier: EF:CF:13:1A:D6:48:0D:1D:D0:4F:1D:44:76:E3:59:54:52:FF:44:1C
Certificate issuer:       /CN=A9140D20/serialNumber=EFCF131AD6480D1DD04F1D4476E3595452FF441C
Certificate serial:       090A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft
Manifest number:          08FB
Signing time:             Tue 18 Aug 2026 20:38:51 +0000
Manifest this update:     Tue 18 Aug 2026 20:38:50 +0000
Manifest next update:     Tue 25 Aug 2026 20:38:50 +0000
Files and hashes:         1: 788TGtZIDR3QTx1EduNZVFL_RBw.crl (hash: Q5LbydgrhG1H1aQxxgfhCDOmVLNEVxhhzLKmVZkCjyI=)
                          2: 5E4A01CA941111EE84D37717C4F9AE02.roa (hash: zxnU04Q4bb1lJGkT9VOzuX1RdTtK4DGbDTsvDe9EOa8=)
                          3: 01E652108F4F11EEA2E9CA7DC4F9AE02.roa (hash: yZtWfMF7pmNFTR+kKQnF17mRloCfv5aI0+tF3Sx3gqw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.crl
                          rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 20:38:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2314 (0x90a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140D20, serialNumber=EFCF131AD6480D1DD04F1D4476E3595452FF441C
        Validity
            Not Before: Aug 18 20:38:50 2026 GMT
            Not After : Aug 25 20:38:50 2026 GMT
        Subject: CN=6a84c2db-8a6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:cb:49:74:97:57:c4:f1:24:d4:2a:b3:dd:3e:
                    10:3d:48:c6:6b:fe:3b:ab:3e:56:23:eb:4f:48:10:
                    4c:01:e4:ac:04:31:e8:13:d1:ac:13:c8:33:c2:43:
                    ea:3c:77:05:64:21:7f:34:8f:dc:3e:90:1c:99:0e:
                    b3:67:c0:76:8c:c2:c9:14:06:4e:d2:62:8c:85:8c:
                    3c:ed:12:98:e2:ea:df:82:c3:9c:93:f0:d8:7a:c7:
                    29:d6:87:50:33:1d:e5:59:dc:11:5b:ac:14:e9:ef:
                    d8:80:15:61:15:17:c7:a5:35:e4:a2:0b:d9:f2:6a:
                    79:4d:fe:eb:ef:e4:a5:cc:b5:a6:24:a0:50:35:f1:
                    ec:ad:7d:61:de:f7:7b:a9:8d:21:ea:9f:ce:69:90:
                    e4:44:f5:c2:87:0b:4c:0d:f8:eb:de:9e:9a:5c:de:
                    13:33:e2:d2:9e:62:af:86:e8:a5:2b:30:53:21:90:
                    a9:6e:2d:70:f8:04:b6:94:03:da:aa:e6:56:82:7b:
                    51:c9:1a:66:fc:c4:8f:df:6f:a0:68:24:5d:21:b1:
                    3c:44:31:8d:48:13:b9:6e:ae:42:d6:5a:bb:68:63:
                    19:e0:2a:54:9b:de:75:9b:16:be:61:f4:84:ae:e8:
                    39:9f:75:4b:0d:5a:f4:0c:dc:c9:80:89:78:11:3d:
                    48:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:89:1E:92:74:1C:1B:89:D9:90:2E:7C:F6:74:50:18:52:2F:CE:34
            X509v3 Authority Key Identifier:
                keyid:EF:CF:13:1A:D6:48:0D:1D:D0:4F:1D:44:76:E3:59:54:52:FF:44:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:78:91:aa:d1:b4:20:20:29:34:1a:b9:46:0e:03:66:d0:12:
         ee:75:45:f9:4f:82:ed:da:dd:20:5e:e9:e7:bc:cb:63:b3:ce:
         72:14:0f:ab:37:f3:65:e0:02:7a:e7:10:83:bb:27:67:29:ee:
         67:04:a8:16:ad:5c:6f:7e:dc:06:4b:a9:5b:0d:02:bb:de:70:
         1d:8b:11:61:31:02:54:2f:fd:8d:17:6e:da:a6:35:27:a1:8f:
         5e:6c:05:26:25:f9:83:8b:51:f1:4f:f3:aa:3e:c9:97:29:97:
         12:42:6f:1d:ef:48:b9:ca:1a:80:46:03:73:d7:d2:c1:c1:ce:
         8b:9f:98:1c:13:ef:29:48:20:0d:b4:71:3b:21:01:f0:45:ba:
         3a:77:f3:06:d7:74:31:5a:b7:fd:9f:af:4c:1e:05:b5:38:8f:
         f0:1f:4b:91:28:fc:e9:43:26:cf:da:66:6c:78:e2:0e:7c:61:
         8e:dd:4c:00:74:7c:df:a9:6f:2e:39:0b:9e:bf:f1:81:9f:9f:
         22:64:f1:d8:25:ff:d8:58:58:47:e9:9b:c4:5a:be:4a:4b:4a:
         ed:f6:7a:9a:41:7d:ad:dc:9d:30:b8:c2:18:34:e5:83:c1:71:
         69:aa:13:c9:81:cb:18:16:ed:a4:e9:15:02:1f:c3:b9:e7:d6:
         3c:09:77:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:59:07 2026 by rpki-client