Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft
File:                     Ql8CIk3cYp0viP9mPH9K32zWRT4.mft (raw, json)
Hash identifier:          FUmIr32/wEDhF6xP+53efIpjOPMiWTMQ6NzdZRQ6K1o=
Subject key identifier:   5E:0A:0F:D0:61:BC:E4:2A:6B:F8:1A:5C:B7:ED:35:77:AA:AA:AA:43
Authority key identifier: 42:5F:02:22:4D:DC:62:9D:2F:88:FF:66:3C:7F:4A:DF:6C:D6:45:3E
Certificate issuer:       /CN=A915430A/serialNumber=425F02224DDC629D2F88FF663C7F4ADF6CD6453E
Certificate serial:       036B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft
Manifest number:          0364
Signing time:             Wed 09 Sep 2026 00:54:54 +0000
Manifest this update:     Wed 09 Sep 2026 00:54:53 +0000
Manifest next update:     Wed 16 Sep 2026 00:54:53 +0000
Files and hashes:         1: Ql8CIk3cYp0viP9mPH9K32zWRT4.crl (hash: w/BItmVRghq4VZWcXPq+/fdqNHTz7c5VdY0ta4JZLNM=)
                          2: 55C580C2108411EDB5AE6333C4F9AE02.roa (hash: vslJ1kocoWetdyBiIdXiE0Fd+CgpEX2kc3GNbUnf16M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.crl
                          rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Sep 2026 00:54:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 875 (0x36b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915430A, serialNumber=425F02224DDC629D2F88FF663C7F4ADF6CD6453E
        Validity
            Not Before: Sep  9 00:54:53 2026 GMT
            Not After : Sep 16 00:54:53 2026 GMT
        Subject: CN=6aa0ae5e-a0b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8d:f8:b3:bb:76:ab:f7:6e:11:72:c7:14:88:
                    95:92:33:92:b4:f4:b5:fe:b9:15:a1:5e:5a:03:62:
                    d6:2f:3d:28:b4:d0:be:22:d3:c6:de:eb:fc:98:48:
                    92:cf:59:ab:6d:9a:b9:07:de:22:e3:53:0c:c8:5b:
                    1b:2d:9c:f5:be:25:c0:14:d5:bb:dd:5e:bb:1a:3b:
                    5d:ab:8c:38:51:85:3e:0d:3b:03:de:90:f6:0a:41:
                    72:ec:56:c7:29:2d:cd:3f:91:c1:c7:20:88:fe:91:
                    44:de:09:bd:d2:07:5b:e5:fd:f9:bf:c6:b3:e6:a3:
                    eb:88:c7:5c:42:6f:90:c6:dd:60:49:b9:19:b2:eb:
                    b8:40:6d:4d:df:a8:bc:d7:da:0f:e8:b3:a5:6e:34:
                    09:49:92:7a:81:d1:50:46:5e:0f:3d:70:75:cf:72:
                    c9:30:f1:30:e3:71:90:3f:4c:95:64:b9:72:02:4f:
                    6b:eb:af:04:de:b7:e9:f7:7c:ba:51:74:e7:c9:c9:
                    3e:12:a8:54:70:0b:a7:75:f6:e1:dc:b5:c7:78:e0:
                    32:39:15:6d:ea:89:7c:aa:24:76:4b:b2:35:57:11:
                    82:10:30:9c:57:0a:dc:98:35:c8:5f:f1:0c:d8:62:
                    1f:ee:79:fb:53:a5:bc:e6:ba:96:1c:df:78:85:48:
                    49:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:0A:0F:D0:61:BC:E4:2A:6B:F8:1A:5C:B7:ED:35:77:AA:AA:AA:43
            X509v3 Authority Key Identifier:
                keyid:42:5F:02:22:4D:DC:62:9D:2F:88:FF:66:3C:7F:4A:DF:6C:D6:45:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:e8:f4:b5:d7:09:97:be:b2:bb:86:d9:86:1c:7d:3a:95:55:
         e9:4c:bd:d0:56:0d:e1:2a:61:6e:1b:6e:08:93:a7:06:96:01:
         72:53:73:bc:75:47:e6:81:d2:a5:fa:69:83:b4:d0:46:95:3b:
         77:5c:19:a1:a1:89:48:26:c2:f7:d9:b0:17:eb:74:f0:f7:49:
         a3:b9:26:34:c9:b6:f8:cc:d0:53:c6:85:cc:2b:bf:79:c5:45:
         5c:8e:64:78:84:f9:01:24:fc:bf:c4:8e:ec:ad:30:53:db:72:
         c0:7c:5b:31:dd:0a:90:4b:0b:06:84:d8:e6:ee:a8:80:78:35:
         93:09:4f:a7:0b:49:d1:a5:b9:3a:61:ee:a0:78:9c:1f:c9:1e:
         23:a6:b5:b9:89:20:6c:6f:64:a4:c7:6c:18:dc:70:00:3c:62:
         49:99:75:d7:6c:c7:0a:6f:9a:2d:68:2f:d3:c6:22:b4:0a:73:
         42:2e:24:e3:c4:0d:21:80:83:fc:85:43:27:b5:21:37:68:f8:
         d6:f1:07:8c:de:b1:93:1a:71:52:3b:39:61:28:79:ce:56:8d:
         da:42:df:ea:83:e7:17:c7:fe:22:d1:bd:1f:5b:d0:cb:80:93:
         4f:a5:16:6d:f2:60:33:8e:cd:a6:a0:93:88:25:8a:26:e0:40:
         b0:56:9a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:27:20 2026 by rpki-client