Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft
File:                     8_70YqTY4vf6BzWmq2Re5WNdqPI.mft (raw, json)
Hash identifier:          +B8VY68w6maLEhES3PCsT75BswLZsmOTa6/GYvRTVdM=
Subject key identifier:   01:CE:66:D1:F3:E3:18:DC:74:AC:F9:EC:B4:7B:E2:07:5B:80:EF:A3
Authority key identifier: F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2
Certificate issuer:       /CN=A91474C3/serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2
Certificate serial:       35DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft
Manifest number:          356F
Signing time:             Mon 06 Jul 2026 14:19:33 +0000
Manifest this update:     Mon 06 Jul 2026 14:19:32 +0000
Manifest next update:     Mon 13 Jul 2026 14:19:32 +0000
Files and hashes:         1: 8_70YqTY4vf6BzWmq2Re5WNdqPI.crl (hash: HG5KGXJAEV9hQBx43wPq/ZvDC4Pz3Mg5mze25MmBQlc=)
                          2: DCA7C1ECB0F811E595E0F761C4F9AE02.roa (hash: lHpCFsLt7U2o1M0PHQpZCnb+hTvR9R+79jjvxvZZVc8=)
                          3: DB386CDAB0F811E595E0F761C4F9AE02.roa (hash: iAjJeW7mv0SQMiUZA706Y7e5Dpr+uJ1EKTAhmx1r1Ho=)
                          4: D96D4614B0F811E595E0F761C4F9AE02.roa (hash: pziarfpXcmZshK5aRJXPQK28eVft/dtml9oMxHa7rpY=)
                          5: D80ABAE0B0F811E595E0F761C4F9AE02.roa (hash: gLPTWrm2PPekN94x5WPKoFXaMR9NBRCv5mD6xWQxTlQ=)
                          6: DE0EF67CB0F811E595E0F761C4F9AE02.roa (hash: oYQNkpcQFkrJq7hNKWTpwJS+ixdzI6MgGMC3Udqv1Uw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl
                          rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Jul 2026 14:19:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13789 (0x35dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91474C3, serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2
        Validity
            Not Before: Jul  6 14:19:32 2026 GMT
            Not After : Jul 13 14:19:32 2026 GMT
        Subject: CN=6a4bb974-415e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0b:48:59:47:78:eb:9f:d3:1f:d7:28:9e:e0:
                    27:11:1f:e4:a2:9b:dd:59:e9:e1:45:22:cb:00:eb:
                    3e:c1:90:aa:81:d9:be:cb:0c:22:66:e8:49:bd:03:
                    91:aa:00:51:b0:89:2d:ef:28:d3:4b:87:93:a4:3f:
                    70:2b:6e:b9:88:fa:4f:f6:02:8b:cf:8c:ab:9c:34:
                    bd:1c:fd:68:6a:32:81:48:7f:17:a5:65:3d:81:79:
                    ab:d6:91:32:45:3d:c5:25:c4:29:88:a1:51:82:30:
                    b5:39:ad:d2:13:2f:6e:a8:2d:a2:15:6b:27:db:21:
                    e4:4c:15:07:21:66:a0:40:8c:3b:1d:8d:4a:fd:cc:
                    1e:bf:96:6d:b0:ac:ca:7e:49:e7:f8:ba:0e:d6:37:
                    17:02:4e:4f:bc:03:60:33:6f:f9:91:c3:ca:03:6c:
                    82:2a:aa:72:cd:e6:64:cc:7d:a7:d7:d6:0f:0e:36:
                    30:6d:32:13:48:52:8e:c0:81:6d:b9:84:aa:55:1b:
                    0b:dc:17:56:97:d9:99:f2:19:1e:98:c0:41:d1:01:
                    5b:2a:ac:0f:d3:15:14:3f:f5:bb:fd:f5:c0:ba:8b:
                    e7:1c:d1:51:06:70:c0:1d:8f:cb:07:5d:87:e9:79:
                    c1:40:a3:d0:5a:2c:65:66:a5:6d:eb:a8:fe:41:97:
                    6e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:CE:66:D1:F3:E3:18:DC:74:AC:F9:EC:B4:7B:E2:07:5B:80:EF:A3
            X509v3 Authority Key Identifier:
                keyid:F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:9a:f8:45:1d:a2:20:b5:44:74:d1:14:28:b9:0d:f4:e9:b0:
         47:5f:1f:83:02:ee:96:26:f1:ad:46:cd:7e:d0:36:cd:88:5e:
         ec:7b:bf:c4:8c:9c:eb:81:f8:68:39:00:af:a7:df:a1:b3:cc:
         70:84:76:89:cd:92:eb:a5:8a:de:5d:27:f9:10:97:b8:94:f4:
         f6:13:76:52:26:9b:46:3e:30:0a:6d:9a:10:58:42:bd:d4:36:
         49:b8:9f:f1:36:bc:e1:de:39:19:7c:4b:c5:6a:f0:f2:30:72:
         bd:7e:d2:22:85:60:cd:cd:68:9d:cd:53:e4:5b:06:a2:3b:12:
         a7:5d:d9:5d:f8:f1:cc:88:fc:17:1f:1f:46:14:53:eb:af:fb:
         c6:43:9c:ea:69:7e:60:53:62:e1:49:92:51:7a:15:cc:02:a2:
         09:c9:da:84:d6:3e:a5:91:f6:fd:77:2f:08:1b:d7:76:d6:d2:
         7a:b3:ca:a4:35:2f:dc:e0:59:2b:a9:a6:bc:37:32:85:b5:bd:
         e5:1d:80:fd:5b:9b:b8:ba:4d:b9:6b:08:cb:da:f1:11:1c:8d:
         d5:aa:ed:52:e7:54:78:3b:51:c2:ce:92:85:28:27:55:20:64:
         e5:2a:6f:2c:96:aa:df:bf:63:56:94:86:c5:ef:8e:a8:ef:16:
         38:8d:1a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 07:51:18 2026 by rpki-client