Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.mft
File:                     o9JQxdUsWorGe6AhiE0ZGl1KcYI.mft (raw, json)
Hash identifier:          t5zgeLtu3B6BKD5DfeQb0HSDEFLS4iM3W4220A5fG60=
Subject key identifier:   A6:86:5C:5F:61:19:90:BD:3D:F7:B8:8E:3E:78:1C:67:7E:CD:9C:7F
Authority key identifier: A3:D2:50:C5:D5:2C:5A:8A:C6:7B:A0:21:88:4D:19:1A:5D:4A:71:82
Certificate issuer:       /CN=A914F6AF/serialNumber=A3D250C5D52C5A8AC67BA021884D191A5D4A7182
Certificate serial:       02BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9JQxdUsWorGe6AhiE0ZGl1KcYI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.mft
Manifest number:          02B8
Signing time:             Wed 19 Aug 2026 01:53:26 +0000
Manifest this update:     Wed 19 Aug 2026 01:53:26 +0000
Manifest next update:     Wed 26 Aug 2026 01:53:26 +0000
Files and hashes:         1: o9JQxdUsWorGe6AhiE0ZGl1KcYI.crl (hash: xRmvJEsLYqlPmNddiNeqYtq37DxYldXsMbMhGKHzB40=)
                          2: CCCA3842714711EDBB61A87FC4F9AE02.roa (hash: dQes4cKEo3vqUyE4KHkW1L+GW6dnJAq7VF/ynzV3hTs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.crl
                          rsync://rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9JQxdUsWorGe6AhiE0ZGl1KcYI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 01:53:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 702 (0x2be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914F6AF, serialNumber=A3D250C5D52C5A8AC67BA021884D191A5D4A7182
        Validity
            Not Before: Aug 19 01:53:26 2026 GMT
            Not After : Aug 26 01:53:26 2026 GMT
        Subject: CN=6a850c96-1c3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:85:0b:ce:a0:7d:1e:34:c7:81:b8:eb:5a:8e:
                    6e:a7:ee:b0:81:e8:6c:d7:73:0d:d2:06:1c:a5:5e:
                    8f:b9:84:27:b8:6a:0b:55:6f:12:d2:af:42:00:39:
                    1f:f2:79:29:a2:4b:15:3b:16:d7:14:f0:6f:9f:0f:
                    69:75:8b:a8:f3:cb:b0:cb:5a:97:6e:24:06:70:bb:
                    e3:a2:ef:1c:28:4d:98:7d:02:3b:84:ae:d0:b1:0e:
                    7a:e0:5a:90:06:88:4e:1b:68:c3:4a:16:92:f4:33:
                    8e:2c:20:46:cc:49:b8:71:35:05:0c:fe:32:a0:02:
                    23:1e:03:0c:94:05:2f:6e:d9:6c:13:6b:d8:48:e3:
                    5b:48:7a:50:7a:3b:c6:60:52:a9:8c:cb:bd:a6:ca:
                    15:9f:80:a0:59:e0:d4:00:0e:4d:2b:e8:50:85:d3:
                    fd:71:8e:cc:51:e7:dd:a9:ef:07:ad:21:c3:05:3d:
                    5c:a3:2e:83:d0:e8:97:20:52:a6:26:db:b4:f4:4e:
                    18:62:84:66:11:0e:26:2d:60:4d:2c:d1:18:e0:96:
                    62:14:50:d6:9b:2b:76:18:53:df:fb:ce:88:e0:d4:
                    48:22:da:a4:eb:8f:87:b3:5d:6e:55:8c:43:67:20:
                    8f:8e:41:a6:ad:ac:aa:52:92:7f:22:33:21:5a:50:
                    82:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:86:5C:5F:61:19:90:BD:3D:F7:B8:8E:3E:78:1C:67:7E:CD:9C:7F
            X509v3 Authority Key Identifier:
                keyid:A3:D2:50:C5:D5:2C:5A:8A:C6:7B:A0:21:88:4D:19:1A:5D:4A:71:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9JQxdUsWorGe6AhiE0ZGl1KcYI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:ec:78:c4:73:0a:ef:a7:bc:04:d5:97:06:9e:28:a5:01:d8:
         52:0e:c8:15:55:3d:71:40:65:f3:50:48:00:cc:65:6d:60:6a:
         4f:7c:a8:5c:8a:f8:30:62:97:4f:5e:b7:b3:40:8f:ae:24:22:
         dd:6d:dc:c8:25:5f:19:60:d3:b9:7d:c4:09:2b:90:ee:5f:25:
         2c:4e:0c:75:e8:2b:0a:71:b5:92:8e:12:22:65:9c:76:6f:32:
         93:c7:2c:ba:75:a7:5a:fc:89:c0:78:1d:bc:e4:ad:39:91:6b:
         47:48:e1:68:1e:6c:67:5f:6b:b6:8a:53:68:76:6f:7c:c2:a9:
         68:43:cd:bf:24:07:87:9f:98:14:64:c4:56:ef:1f:b0:30:02:
         61:4c:62:e1:5c:6e:d9:a1:82:4f:b3:fd:87:c4:45:c9:03:2c:
         18:3e:a5:cf:c2:70:3c:ed:01:d9:05:7a:a4:a7:5d:8c:7a:15:
         bc:84:84:f1:d7:73:f2:19:c3:8b:19:c3:f7:94:5c:4b:ff:f8:
         f7:70:ab:9c:2e:86:18:87:4b:d5:c0:5c:ea:e0:05:75:3d:4e:
         a1:12:24:05:ff:2e:53:03:2a:03:de:c2:00:44:53:3e:a0:9b:
         b5:8f:50:ea:ee:05:0a:f7:0a:d7:87:fc:71:39:a8:d7:ce:24:
         c8:c9:d1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:52:35 2026 by rpki-client