Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.mft
File:                     0efCSnRBTL3c_NiORsXVzTs-rtc.mft (raw, json)
Hash identifier:          xpISTZEyVBB4SZhKth2hXI+gwa0AAk3MaOAKz7hb/c0=
Subject key identifier:   AF:20:69:C8:04:05:5E:AF:06:A3:CD:EA:CD:A1:29:D0:C9:9A:AE:BC
Authority key identifier: D1:E7:C2:4A:74:41:4C:BD:DC:FC:D8:8E:46:C5:D5:CD:3B:3E:AE:D7
Certificate issuer:       /CN=A91606AF/serialNumber=D1E7C24A74414CBDDCFCD88E46C5D5CD3B3EAED7
Certificate serial:       07DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0efCSnRBTL3c_NiORsXVzTs-rtc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.mft
Manifest number:          07C3
Signing time:             Tue 18 Aug 2026 21:50:24 +0000
Manifest this update:     Tue 18 Aug 2026 21:50:24 +0000
Manifest next update:     Tue 25 Aug 2026 21:50:24 +0000
Files and hashes:         1: 0efCSnRBTL3c_NiORsXVzTs-rtc.crl (hash: eRA4SpGecH0i29dCm95eHkOiX+BX/2g4aDTOw2OWN6U=)
                          2: 8C2D64121CB011EDA4740D7EC4F9AE02.roa (hash: a0yVbOyKmzsc8MOg+dTg0w6gn2yodW2h3rxYL00GULI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.crl
                          rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0efCSnRBTL3c_NiORsXVzTs-rtc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 21:50:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2015 (0x7df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91606AF, serialNumber=D1E7C24A74414CBDDCFCD88E46C5D5CD3B3EAED7
        Validity
            Not Before: Aug 18 21:50:24 2026 GMT
            Not After : Aug 25 21:50:24 2026 GMT
        Subject: CN=6a84d3a0-26f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:f3:6c:ce:6a:df:25:8e:ba:c4:e9:86:c9:12:
                    6a:f4:02:63:c2:2b:55:f0:94:a4:a6:53:05:ad:6e:
                    3f:31:12:d3:e4:7e:83:87:c1:70:c8:08:34:1d:9e:
                    0f:72:9f:c8:a5:af:8a:4a:2f:b4:71:43:4a:b7:6f:
                    71:40:d6:11:a1:a4:fb:ae:01:b5:f0:e9:d7:bc:65:
                    51:64:f2:7e:a1:bd:d4:84:e8:43:48:2a:6d:15:e5:
                    1c:8d:15:de:9b:41:13:16:7a:8e:4d:f8:8f:0c:e6:
                    b5:21:eb:e7:4b:32:55:04:44:70:f0:e2:ed:53:fb:
                    03:ba:b1:9e:12:0f:d8:92:f2:54:68:43:7e:e2:0d:
                    3f:5b:76:1a:d9:f0:e0:b2:33:94:6f:a7:e3:57:dc:
                    4e:20:09:f9:0d:ed:cf:2e:c0:c0:85:3b:c0:0f:4d:
                    87:33:77:57:75:f7:d6:b9:24:3b:1e:73:33:cf:97:
                    a5:bc:b5:82:c8:b6:82:df:2c:f0:aa:96:f4:1d:e2:
                    a2:92:77:a3:e3:0c:ee:af:c3:8c:81:5a:aa:3d:ba:
                    80:cd:1c:5b:67:7c:36:99:a8:16:d3:18:83:df:31:
                    98:24:38:99:69:82:26:1d:de:77:28:50:91:48:ef:
                    a9:c7:ce:74:c3:1d:cb:6b:59:2f:da:e8:4e:fb:7f:
                    96:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:20:69:C8:04:05:5E:AF:06:A3:CD:EA:CD:A1:29:D0:C9:9A:AE:BC
            X509v3 Authority Key Identifier:
                keyid:D1:E7:C2:4A:74:41:4C:BD:DC:FC:D8:8E:46:C5:D5:CD:3B:3E:AE:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0efCSnRBTL3c_NiORsXVzTs-rtc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:67:69:ec:20:86:df:fd:13:a9:f2:33:5c:35:11:39:d8:40:
         dd:32:bc:6a:f1:e3:52:c9:fe:e3:a7:f3:33:cb:84:25:09:65:
         32:0d:b9:8a:1b:1c:0f:9c:a5:30:f5:16:f9:88:32:8b:9c:a5:
         63:2a:f1:c8:be:c5:cd:8c:a9:77:e3:d2:56:e5:68:17:cf:ee:
         bb:d9:80:b1:2c:a1:f2:cb:87:e8:b8:0b:ef:34:40:10:99:55:
         b0:d4:1f:cb:f0:9b:2e:de:3c:c8:ef:60:a7:69:85:5b:89:4c:
         a7:e1:ca:49:21:48:80:1a:dd:d7:32:b5:15:65:11:5a:fa:34:
         0d:a7:d1:76:0c:e6:73:f3:49:9c:cc:d3:35:05:3f:03:1d:89:
         a0:44:36:e2:67:cd:96:73:60:e8:bb:e0:9c:f4:5d:4b:89:5a:
         41:19:6b:af:dc:8c:04:19:86:25:df:b2:9c:a6:1d:8c:4e:1a:
         ea:eb:a0:ba:85:c6:8e:ad:e5:9b:35:7d:b5:b4:4f:84:42:97:
         d6:e2:c3:51:0e:ce:3b:7a:24:9c:48:73:aa:ca:0e:85:20:01:
         69:ee:ff:66:fd:63:b9:8c:a0:15:37:7c:a5:3f:91:3e:e3:4b:
         63:cd:b8:26:36:32:8c:b3:77:a1:28:52:fd:fb:93:1e:16:99:
         2f:d6:6b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:47:09 2026 by rpki-client