Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/up0lGkqfrMTkpmOHdQooZioxAFc.mft
File:                     up0lGkqfrMTkpmOHdQooZioxAFc.mft (raw, json)
Hash identifier:          x1CZjD67WJdAGm82bBc8PnJ0tjXlT9IMDB5eIathYi0=
Subject key identifier:   FA:0B:FE:DD:B4:19:EB:F5:83:52:DC:A2:1B:50:9D:03:3C:07:5C:AF
Authority key identifier: BA:9D:25:1A:4A:9F:AC:C4:E4:A6:63:87:75:0A:28:66:2A:31:00:57
Certificate issuer:       /CN=A915B581/serialNumber=BA9D251A4A9FACC4E4A66387750A28662A310057
Certificate serial:       3598
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0lGkqfrMTkpmOHdQooZioxAFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/up0lGkqfrMTkpmOHdQooZioxAFc.mft
Manifest number:          3582
Signing time:             Tue 18 Aug 2026 14:48:04 +0000
Manifest this update:     Tue 18 Aug 2026 14:48:03 +0000
Manifest next update:     Tue 25 Aug 2026 14:48:03 +0000
Files and hashes:         1: up0lGkqfrMTkpmOHdQooZioxAFc.crl (hash: 3IzN8n9i1epyyCdh3Bf/NKNNWLoRsco/GJ7nGwx06W4=)
                          2: 7A38D6B854F311E7AC64ED3AC4F9AE02.roa (hash: wpF9ptajaxcFCU5XYXYL7kAycTSdDrhOWM0Rnpw1Xnw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/up0lGkqfrMTkpmOHdQooZioxAFc.crl
                          rsync://rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/up0lGkqfrMTkpmOHdQooZioxAFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0lGkqfrMTkpmOHdQooZioxAFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 14:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13720 (0x3598)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B581, serialNumber=BA9D251A4A9FACC4E4A66387750A28662A310057
        Validity
            Not Before: Aug 18 14:48:03 2026 GMT
            Not After : Aug 25 14:48:03 2026 GMT
        Subject: CN=6a8470a3-7dc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fe:93:0a:ba:46:89:fe:7f:79:8c:d5:a5:bf:
                    8b:e5:7f:7e:27:9a:c1:1b:ab:79:ae:f5:39:02:8b:
                    0b:a6:d1:58:86:9b:2c:78:0f:fe:ca:58:d3:78:21:
                    21:94:99:73:ab:55:15:27:95:67:ff:b8:94:16:42:
                    e5:c1:a0:3d:ce:44:9a:d4:4a:e0:bd:77:43:66:b7:
                    5d:31:e1:a2:37:01:51:81:74:f8:0c:3c:99:df:d6:
                    1d:d5:e5:ec:3f:3d:0b:1e:cb:73:ab:31:6a:41:30:
                    d0:29:4a:20:ed:fd:c5:f5:ab:8d:74:c4:81:5b:85:
                    bd:0e:c2:fc:92:a0:20:68:50:3b:ce:dd:96:a9:74:
                    40:56:60:68:ce:ad:56:95:9c:94:e2:e2:1d:20:43:
                    98:2e:20:c3:73:c2:b4:da:64:3b:04:e9:fc:19:7b:
                    b6:b2:a1:e7:b1:7b:c6:3b:c2:d9:3e:53:f6:25:c2:
                    e8:cf:52:44:3c:42:41:05:f9:c6:5f:a3:c7:71:e0:
                    e2:90:71:85:70:45:d7:64:bd:79:23:c5:01:e0:ef:
                    6d:df:1b:69:9a:d1:e1:f9:84:ed:66:91:a9:57:24:
                    92:f3:8d:b1:71:fd:4d:d8:a3:8b:9b:55:60:49:c4:
                    78:fd:d9:6c:30:d2:bb:49:e4:43:0e:54:a8:2e:38:
                    c9:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:0B:FE:DD:B4:19:EB:F5:83:52:DC:A2:1B:50:9D:03:3C:07:5C:AF
            X509v3 Authority Key Identifier:
                keyid:BA:9D:25:1A:4A:9F:AC:C4:E4:A6:63:87:75:0A:28:66:2A:31:00:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/up0lGkqfrMTkpmOHdQooZioxAFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0lGkqfrMTkpmOHdQooZioxAFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/up0lGkqfrMTkpmOHdQooZioxAFc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:4b:8e:2a:b9:a1:ae:f4:c6:34:53:40:17:19:4b:9c:e6:80:
         e2:d7:ec:ed:7c:d2:51:ee:c5:e6:65:47:7a:6b:c1:31:5f:58:
         de:e4:fe:fb:11:cc:a5:47:2a:13:b4:09:2f:c6:06:a8:85:22:
         5b:ba:ba:bb:64:ba:d6:b3:43:9a:c6:ef:c0:67:7e:a9:f3:6e:
         91:02:15:99:ac:7c:c6:be:7e:5b:5a:8d:31:e0:58:9b:52:1f:
         de:e3:28:7b:59:2f:b7:e0:9e:4d:03:5c:2d:b9:3d:e2:c9:e6:
         7b:70:da:98:d3:e2:3e:d5:3e:8d:32:05:3d:e9:ab:6c:e3:42:
         93:25:6f:61:49:f7:e6:74:1c:37:c5:f1:38:ad:6d:f3:80:42:
         ea:78:c3:f5:a0:a4:b9:a5:db:c0:3e:57:0b:36:85:8f:c0:ad:
         fc:d6:ca:c4:9d:03:19:07:67:e4:1d:b9:cd:83:e9:f2:36:bc:
         99:8d:2f:e8:3e:4e:48:4f:13:8c:e0:e4:2b:2d:c3:32:50:ce:
         65:9f:43:cd:5e:8c:df:19:58:51:4b:d0:00:c4:c9:63:5a:c7:
         6b:34:3a:d4:76:4e:f4:e6:39:2a:21:c8:96:7b:99:4d:1f:d9:
         0b:2c:c9:19:a7:67:9a:f5:e5:49:31:32:ec:f7:85:74:7a:68:
         cb:cd:7c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:44:05 2026 by rpki-client