Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft
File:                     -xaxnfv3ymrECmtqNT94V4kX4P0.mft (raw, json)
Hash identifier:          W5nobkGgH7pMtWbNJZjM0HtBX1ffftRvF0SmRMsLIRA=
Subject key identifier:   5B:A7:A3:7B:32:7C:09:A8:DB:42:E8:07:73:06:41:0F:83:84:F0:1C
Authority key identifier: FB:16:B1:9D:FB:F7:CA:6A:C4:0A:6B:6A:35:3F:78:57:89:17:E0:FD
Certificate issuer:       /CN=A9146CB4/serialNumber=FB16B19DFBF7CA6AC40A6B6A353F78578917E0FD
Certificate serial:       0264
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xaxnfv3ymrECmtqNT94V4kX4P0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft
Manifest number:          025E
Signing time:             Wed 19 Aug 2026 02:44:26 +0000
Manifest this update:     Wed 19 Aug 2026 02:44:26 +0000
Manifest next update:     Wed 26 Aug 2026 02:44:26 +0000
Files and hashes:         1: -xaxnfv3ymrECmtqNT94V4kX4P0.crl (hash: 5Oo9sR69BMdTRB+b6H5wqx6wvqoGzYRevWSzcTo9rhY=)
                          2: DFC662EC415B11EE9E83852AC4F9AE02.roa (hash: R5a6QMcMMM3E0jCOFVWDRS9Q/1dJvX8y7TpUdy+NpOw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.crl
                          rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xaxnfv3ymrECmtqNT94V4kX4P0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 02:44:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 612 (0x264)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146CB4, serialNumber=FB16B19DFBF7CA6AC40A6B6A353F78578917E0FD
        Validity
            Not Before: Aug 19 02:44:26 2026 GMT
            Not After : Aug 26 02:44:26 2026 GMT
        Subject: CN=6a85188a-5087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f3:d2:13:cb:c7:56:78:de:ce:8b:06:62:43:
                    b6:92:99:34:98:f0:c4:e4:05:84:c5:09:77:af:91:
                    1a:c6:ce:2e:85:2d:a4:ec:05:19:69:46:b2:b2:b7:
                    bd:b6:24:5e:5a:ba:76:8f:c1:e0:2a:5e:b6:17:00:
                    ff:03:c5:9a:0a:e5:55:a0:49:9e:46:9e:f2:97:3b:
                    c1:9a:29:5b:36:fb:a3:85:4a:8a:ff:a7:9a:c6:a9:
                    2b:88:1a:34:81:2b:aa:12:bd:48:54:5a:a6:ea:23:
                    3c:05:35:82:0e:ab:92:89:30:16:3e:1f:71:15:80:
                    c9:a9:a2:79:35:cc:3f:c6:b2:c4:90:8e:c4:24:be:
                    2d:f4:9b:63:2a:6e:b4:8b:35:96:03:69:96:db:83:
                    0f:da:09:25:0a:39:4e:1a:de:91:ab:bf:d8:55:3e:
                    ff:e2:6d:75:b5:61:bb:ca:03:07:51:92:9b:54:37:
                    0d:f6:5d:79:51:19:7d:b0:a8:a1:ec:77:7e:a9:58:
                    4e:36:8f:26:1d:ca:58:14:0e:40:48:57:2e:a7:34:
                    c7:ed:89:e7:9f:37:9a:85:77:5d:db:e2:92:5f:a7:
                    fc:5f:7d:5d:2d:33:d8:f7:48:65:49:b0:b8:4b:f8:
                    b2:80:31:89:0f:f8:7c:e4:d1:de:32:21:55:19:06:
                    6b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:A7:A3:7B:32:7C:09:A8:DB:42:E8:07:73:06:41:0F:83:84:F0:1C
            X509v3 Authority Key Identifier:
                keyid:FB:16:B1:9D:FB:F7:CA:6A:C4:0A:6B:6A:35:3F:78:57:89:17:E0:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xaxnfv3ymrECmtqNT94V4kX4P0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:0c:08:cf:d5:87:31:f9:cd:ea:bc:82:56:4a:d6:0c:d5:92:
         2b:26:45:ea:9a:d1:50:d8:50:74:77:3e:af:32:d0:12:46:57:
         fd:da:08:d8:76:79:d0:88:82:55:7f:49:d5:c8:66:ca:96:9d:
         81:f4:81:ed:7f:88:47:b8:45:4c:80:12:ea:af:0d:ed:dc:a3:
         39:ed:4b:e6:a6:df:b7:f2:15:31:e3:58:5f:ec:45:51:44:eb:
         ab:f9:cb:e7:f0:1c:f6:98:d9:fb:38:2c:e1:a5:ae:d0:4f:60:
         41:e4:f4:97:d6:1a:1b:00:c4:9d:49:13:e1:e4:81:3d:8a:91:
         ab:0c:77:fc:8d:17:87:58:ec:67:4b:77:1d:73:6b:b6:8c:8c:
         de:58:be:bc:2a:64:4a:9c:c1:9f:70:4d:0e:e3:12:87:21:79:
         91:f0:f8:3b:57:73:dc:f3:4a:22:00:cc:8a:a0:1c:d6:1b:e9:
         f0:8c:19:36:78:1e:c1:70:43:f9:e0:9e:56:3d:08:5e:3f:63:
         1d:72:73:96:fd:cc:5e:e1:36:00:00:16:c2:37:d5:d0:48:f5:
         a1:7e:a6:8e:0e:0a:b0:49:37:83:68:92:ae:7e:ad:29:78:d3:
         99:5d:19:a4:ac:a3:59:75:5b:67:7f:b8:dc:b3:aa:31:10:9c:
         f3:65:52:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:15:33 2026 by rpki-client