Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft
File:                     8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft (raw, json)
Hash identifier:          ozZR5iAuEAFYs2gBatyHY6ShXPnIT+eW+9vWbllUunQ=
Subject key identifier:   1B:D9:E2:68:71:C1:1E:91:D7:DC:48:AB:A6:43:6A:13:59:0A:6C:4C
Authority key identifier: F3:F2:73:F3:EF:CE:55:1E:E3:3C:84:4D:44:0A:A3:0E:DA:08:7E:2C
Certificate issuer:       /CN=A914E1F1/serialNumber=F3F273F3EFCE551EE33C844D440AA30EDA087E2C
Certificate serial:       0356
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft
Manifest number:          0341
Signing time:             Thu 21 May 2026 01:08:27 +0000
Manifest this update:     Thu 21 May 2026 01:08:27 +0000
Manifest next update:     Thu 28 May 2026 01:08:27 +0000
Files and hashes:         1: 8_Jz8-_OVR7jPIRNRAqjDtoIfiw.crl (hash: OXFo7C3D3QlA3BAjHnyW6fk5kvGMHsC2iJ4QKvn0W+I=)
                          2: 4192339AF6A311EFBACC274CC4F9AE02.roa (hash: Wcc8ygmv+LZchyHQ4KBBITZJAV+Up2qfVQ07bd9vNtw=)
                          3: 1E00C58C145C11F094FADD38C4F9AE02.roa (hash: 26lbZitWRiEfeoyruNKhZHO3TiLuflGgqtfn2ftoTxQ=)
                          4: 33074190145C11F0B91D7C47C4F9AE02.roa (hash: MKjhR4piWDvUAuWp9pWEKUBXNQ2JX0nzoNNUeCqPGFU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.crl
                          rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 01:08:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 854 (0x356)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E1F1, serialNumber=F3F273F3EFCE551EE33C844D440AA30EDA087E2C
        Validity
            Not Before: May 21 01:08:27 2026 GMT
            Not After : May 28 01:08:27 2026 GMT
        Subject: CN=6a0e5b0b-0f87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3d:eb:c1:33:a5:bf:69:00:d1:e0:aa:36:38:
                    90:21:24:27:0f:49:ba:52:af:8e:84:e7:f5:9c:56:
                    08:49:f1:66:22:8d:b2:8e:31:29:18:e2:54:f5:c3:
                    9d:25:1a:be:63:3f:69:82:27:1a:b6:48:8d:c0:92:
                    a6:1d:c1:27:0e:91:8c:dc:1b:fe:83:2f:5e:8d:cb:
                    f4:c3:6c:a7:e2:55:5d:01:22:f7:de:1c:5d:5c:0c:
                    e4:ed:7d:9c:7d:14:be:9d:b0:1e:7e:ad:ab:99:50:
                    ab:f1:ce:25:60:b7:ce:f3:93:88:e5:e3:b9:a8:7b:
                    2f:d2:12:9b:78:2e:9b:fc:3a:7a:ad:9e:32:56:69:
                    45:8b:96:04:2e:27:af:15:ea:c2:8a:a8:98:43:93:
                    ab:2f:32:36:18:3c:51:66:b8:37:2f:28:44:1c:be:
                    c6:ea:a0:4b:7e:c2:6e:5d:8b:9a:c8:d3:65:f7:67:
                    1e:82:80:54:fc:e3:62:66:d0:71:4c:29:15:15:bb:
                    6f:44:b3:53:3e:4d:d6:22:ae:f0:9d:7e:50:f6:80:
                    3b:db:c5:90:25:87:02:06:c5:49:08:f8:55:77:57:
                    73:ec:62:6f:1c:8a:70:5e:52:19:e8:d4:3d:f3:1d:
                    8a:57:30:5e:d1:a3:07:3e:e3:90:44:51:22:bb:66:
                    68:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:D9:E2:68:71:C1:1E:91:D7:DC:48:AB:A6:43:6A:13:59:0A:6C:4C
            X509v3 Authority Key Identifier:
                keyid:F3:F2:73:F3:EF:CE:55:1E:E3:3C:84:4D:44:0A:A3:0E:DA:08:7E:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:3b:ce:b1:6c:32:2e:14:2f:7a:05:26:67:da:ca:4c:2e:6a:
         35:52:ba:71:6f:55:8a:ce:2e:e7:4f:29:b5:c6:7c:d8:7d:ce:
         e2:e9:53:d0:b4:7b:ca:40:18:09:a1:59:15:0c:2c:97:d6:10:
         a7:f3:c3:71:8b:20:f9:4e:d7:0d:b7:1e:9d:34:96:7d:e3:56:
         56:bd:06:a5:fd:db:93:d9:7c:de:b0:34:0f:46:71:df:a6:26:
         08:2e:81:c5:94:81:fa:16:6e:41:0c:2c:fa:ec:9f:31:11:69:
         16:0e:6b:4c:7e:8b:ce:33:9f:bf:d9:a1:52:b4:03:ed:12:a3:
         c1:4f:f0:87:75:f5:97:f1:51:05:cb:26:3d:9a:d6:7a:4c:e1:
         c2:b6:24:04:36:90:3c:28:c7:6f:2d:8f:7f:3c:6f:43:f1:ce:
         98:04:27:61:0d:61:0f:43:f6:40:ee:8f:49:f2:dd:d0:d9:48:
         f7:a3:27:70:5a:3e:e1:71:71:cc:e8:9e:99:d4:b5:ba:e7:78:
         d8:fe:01:eb:e9:21:fb:91:c0:ca:5d:0f:e4:46:59:84:4a:b4:
         2c:9d:80:62:34:9e:d1:50:81:54:0e:d3:77:04:73:15:eb:13:
         25:09:a1:54:9c:7f:56:b1:b4:57:9f:11:33:24:17:26:16:8c:
         c7:79:f7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:39:08 2026 by rpki-client