Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.mft
File:                     _U2MY5rcFYR8e0kRFZ3nG9gTk64.mft (raw, json)
Hash identifier:          ulqx6RHiiSZmkRkLlzNVztJTFzWCwbcUTcxA+URVZTQ=
Subject key identifier:   B3:A6:40:47:1C:CE:5B:DB:17:29:F8:99:3A:F7:B9:17:8C:83:B9:B4
Authority key identifier: FD:4D:8C:63:9A:DC:15:84:7C:7B:49:11:15:9D:E7:1B:D8:13:93:AE
Certificate issuer:       /CN=A9152462/serialNumber=FD4D8C639ADC15847C7B4911159DE71BD81393AE
Certificate serial:       08FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_U2MY5rcFYR8e0kRFZ3nG9gTk64.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.mft
Manifest number:          08F4
Signing time:             Tue 18 Aug 2026 20:39:31 +0000
Manifest this update:     Tue 18 Aug 2026 20:39:31 +0000
Manifest next update:     Tue 25 Aug 2026 20:39:31 +0000
Files and hashes:         1: _U2MY5rcFYR8e0kRFZ3nG9gTk64.crl (hash: IvpgwNFNpYi8cS9TBU87Vj01VNZ6hfyzZzYLnddNaRg=)
                          2: 4149D206DC4711EA80D5D916C4F9AE02.roa (hash: c4VC0uZLIwEYMCTYEDFpqIYkNUoeZb1I54lM3XwQmNk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.crl
                          rsync://rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_U2MY5rcFYR8e0kRFZ3nG9gTk64.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 20:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2302 (0x8fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152462, serialNumber=FD4D8C639ADC15847C7B4911159DE71BD81393AE
        Validity
            Not Before: Aug 18 20:39:31 2026 GMT
            Not After : Aug 25 20:39:31 2026 GMT
        Subject: CN=6a84c303-7b70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7f:c0:e0:13:7b:93:cd:ef:17:62:a0:06:74:
                    1d:80:99:02:5c:88:a6:3f:4a:ea:fe:56:f4:99:76:
                    86:c1:17:2a:ff:61:52:eb:29:50:db:ff:17:79:7b:
                    b3:59:f6:05:41:95:6e:26:32:4f:e8:18:b8:0c:a5:
                    e9:57:06:ae:4a:b7:89:90:f8:49:42:ea:46:c1:6e:
                    49:10:90:f5:0d:f8:0d:81:e3:82:98:7f:2f:3f:dc:
                    8d:45:c6:2d:af:8f:ed:4a:0d:a7:05:6c:92:5f:46:
                    6c:49:10:96:86:07:a7:45:5d:f6:a4:5b:e5:d7:14:
                    e1:90:7f:5f:71:e6:59:80:8d:db:55:96:df:23:fe:
                    be:cc:6f:a4:9a:51:25:d6:08:c4:05:22:68:b5:c4:
                    de:c7:02:42:77:c3:18:c0:a0:da:7d:2b:7c:85:f4:
                    69:3f:68:88:d6:55:e8:02:b4:68:49:c6:de:5a:75:
                    2c:e9:a7:32:d4:f4:07:e3:52:ba:92:a8:24:b1:98:
                    c1:5d:ca:98:15:00:d4:d4:55:58:14:07:a4:0c:bc:
                    f8:42:46:6d:99:8c:cf:e1:0d:61:9f:99:94:19:ec:
                    0a:7d:ca:fb:89:0c:b1:ba:50:5a:e8:fa:e0:0a:01:
                    fc:39:41:51:67:de:de:0f:69:b8:f7:1d:46:d5:98:
                    77:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:A6:40:47:1C:CE:5B:DB:17:29:F8:99:3A:F7:B9:17:8C:83:B9:B4
            X509v3 Authority Key Identifier:
                keyid:FD:4D:8C:63:9A:DC:15:84:7C:7B:49:11:15:9D:E7:1B:D8:13:93:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_U2MY5rcFYR8e0kRFZ3nG9gTk64.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:7e:08:45:ab:1f:c2:11:55:c6:92:33:89:78:59:49:b6:91:
         75:f0:01:ac:60:86:48:c2:7f:b1:98:8a:12:b0:0d:e7:73:17:
         3e:bd:b2:6a:38:07:49:5d:d4:b4:75:9a:8e:d7:43:93:4a:82:
         92:2d:00:86:38:68:12:24:f9:98:89:e5:a6:e3:c0:3d:c6:94:
         2a:12:79:ff:60:07:b0:dc:17:3b:b7:5a:90:e9:95:7d:31:32:
         e1:6e:e0:91:c5:33:92:d9:cc:48:01:c9:8f:31:22:49:52:90:
         90:ad:ed:a6:15:95:40:7d:d2:b0:23:2f:97:4a:06:86:73:32:
         31:0e:f4:15:fb:68:e9:ca:a8:c2:fd:04:73:1f:fe:8c:cc:fe:
         e8:64:2b:b0:7a:fc:bb:6d:3e:68:15:dc:57:1f:42:ae:fd:ad:
         14:33:39:70:7a:e3:9a:8a:6f:52:69:96:b7:94:d3:e6:87:9e:
         ef:5c:12:3d:ec:12:3b:72:d7:a8:20:75:8d:80:cc:dd:d5:4c:
         0a:b1:75:96:49:67:51:47:5f:7f:57:15:65:8e:14:5e:47:f1:
         34:f0:6a:33:65:c2:39:c4:c5:98:43:de:42:8a:40:56:97:f6:
         a2:28:4e:68:68:9d:e8:4b:ee:aa:64:c3:99:90:84:10:de:13:
         ec:f6:f2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:48:18 2026 by rpki-client