Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B795/BD032E04634011EAACCF0262C4F9AE02/STM5VHszADpYWZg2-0yZ55RJzfI.mft
File:                     STM5VHszADpYWZg2-0yZ55RJzfI.mft (raw, json)
Hash identifier:          K4llZ2hu6Ad8rT23QD58FB1EOyJ261GlBl/hXTuMlWA=
Subject key identifier:   71:A6:E3:83:3E:64:A2:8C:F2:C8:1A:4A:FD:B9:F1:DA:DE:72:1D:E4
Authority key identifier: 49:33:39:54:7B:33:00:3A:58:59:98:36:FB:4C:99:E7:94:49:CD:F2
Certificate issuer:       /CN=A916B795/serialNumber=493339547B33003A58599836FB4C99E79449CDF2
Certificate serial:       0B9F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/STM5VHszADpYWZg2-0yZ55RJzfI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B795/BD032E04634011EAACCF0262C4F9AE02/STM5VHszADpYWZg2-0yZ55RJzfI.mft
Manifest number:          0B79
Signing time:             Thu 20 Aug 2026 19:10:20 +0000
Manifest this update:     Thu 20 Aug 2026 19:10:20 +0000
Manifest next update:     Thu 27 Aug 2026 19:10:20 +0000
Files and hashes:         1: STM5VHszADpYWZg2-0yZ55RJzfI.crl (hash: +2brk9uCNGaw5vzHDZ1yIDnLUVFiXOEpCR+4IGEuTZE=)
                          2: 28BBBAA2634211EABE282367C4F9AE02.roa (hash: 87ruUamCetqhSgYD0RcbOPf8uxPRNusOY0RxdgFfa4k=)
                          3: 04281A2C6E8211F0A2E51335C4F9AE02.roa (hash: bvbNtF0AY2UdGflEtQc3rZe1CpDIiWe7q6JZWQcMBNY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B795/BD032E04634011EAACCF0262C4F9AE02/STM5VHszADpYWZg2-0yZ55RJzfI.crl
                          rsync://rpki.apnic.net/member_repository/A916B795/BD032E04634011EAACCF0262C4F9AE02/STM5VHszADpYWZg2-0yZ55RJzfI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/STM5VHszADpYWZg2-0yZ55RJzfI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2975 (0xb9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B795, serialNumber=493339547B33003A58599836FB4C99E79449CDF2
        Validity
            Not Before: Aug 20 19:10:20 2026 GMT
            Not After : Aug 27 19:10:20 2026 GMT
        Subject: CN=6a87511c-0f70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:69:a4:9e:4c:14:c3:11:de:5d:b7:c6:9f:b5:
                    04:ca:60:a9:04:61:1d:a0:98:4d:c3:af:69:52:6d:
                    6c:ae:2b:c4:19:78:34:e4:ce:81:6b:ca:fc:87:57:
                    2b:3c:9b:fa:af:78:82:4a:84:7a:10:d2:ff:e8:5e:
                    ae:3d:31:d8:fe:9f:f1:9d:70:6e:a0:28:b1:f2:13:
                    02:5c:61:7b:f3:72:8e:a8:b1:02:7a:69:13:e0:41:
                    4a:b8:cc:39:4d:5c:70:1b:d0:82:86:d5:1a:49:2b:
                    b3:fa:fc:31:ea:6b:41:44:11:47:28:28:83:b5:2e:
                    9b:71:25:a1:ef:70:ab:26:15:b1:6c:51:65:ad:f5:
                    49:eb:46:f8:1b:9d:1c:37:42:4a:e7:bc:63:94:62:
                    f4:24:67:86:bb:1a:4b:3f:84:5c:03:fc:90:ab:87:
                    e8:1d:5e:2b:81:e8:14:69:de:4e:19:e6:25:9c:2f:
                    a8:8e:c9:3c:4d:14:95:a6:ac:e9:94:c6:76:92:ba:
                    db:b6:a8:57:f2:f7:7d:c6:97:e6:99:1c:33:59:8f:
                    6b:de:dc:01:33:e1:37:63:a9:b7:98:22:e6:c4:38:
                    d0:32:00:80:83:fd:51:92:c4:9e:35:f0:7e:ab:2d:
                    1e:a2:ee:44:07:52:ae:cc:b6:6f:6b:0d:5d:f8:41:
                    5c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:A6:E3:83:3E:64:A2:8C:F2:C8:1A:4A:FD:B9:F1:DA:DE:72:1D:E4
            X509v3 Authority Key Identifier:
                keyid:49:33:39:54:7B:33:00:3A:58:59:98:36:FB:4C:99:E7:94:49:CD:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B795/BD032E04634011EAACCF0262C4F9AE02/STM5VHszADpYWZg2-0yZ55RJzfI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/STM5VHszADpYWZg2-0yZ55RJzfI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B795/BD032E04634011EAACCF0262C4F9AE02/STM5VHszADpYWZg2-0yZ55RJzfI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:6e:91:2a:df:89:59:c7:8b:99:c8:70:17:3b:a1:be:91:5c:
         42:54:f4:d4:85:41:a0:07:57:dc:43:2e:1b:22:28:a8:13:f2:
         aa:4f:31:d8:7b:47:08:d9:24:2a:d6:0c:61:e4:5e:fe:f8:29:
         63:3e:f2:ee:ac:2e:3d:f2:76:7c:b0:b2:1e:60:c1:20:c3:cd:
         17:a4:21:c6:fc:80:44:b0:db:bd:44:cc:ee:17:92:2f:11:b9:
         20:9a:73:9b:2c:e6:b6:4a:70:38:c8:33:50:e5:5d:42:7d:29:
         ff:5a:68:01:b9:6d:cf:25:54:a2:c5:82:52:33:da:b1:c9:9b:
         67:36:ca:f3:76:98:09:2c:d8:5b:27:2f:6e:8d:7e:35:07:d7:
         bf:74:3c:61:d5:7b:13:ed:16:60:a8:3e:b1:0d:0e:fc:d9:95:
         60:d7:48:08:26:54:87:c8:d6:a0:e6:75:d8:f2:e9:9d:ac:c1:
         e3:96:27:13:ab:07:31:2a:4a:38:d7:a2:10:65:48:64:cc:25:
         56:4f:8f:69:a8:75:ac:fc:e2:b5:dd:cc:f2:75:85:f8:b1:ed:
         e1:2d:ab:45:47:47:51:87:29:9c:16:87:84:ba:64:2b:64:27:
         75:20:e1:c6:33:8e:13:25:0a:90:ee:c1:63:f3:bc:e5:38:28:
         93:14:ef:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:32:38 2026 by rpki-client