Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEA1/F4DFD01E54E511F1AEEFDFE69C833773/gRRV8Xy_EnQcw8_uMCCc78Y5T4w.mft
File:                     gRRV8Xy_EnQcw8_uMCCc78Y5T4w.mft (raw, json)
Hash identifier:          VLQdJaRsBhhWmlTxr+RFTOpVVNZBeVQRMnV65hTVb94=
Subject key identifier:   C1:9D:A9:76:F6:1A:D8:82:F9:E8:F2:4E:E9:99:3A:FA:A8:AD:1D:CD
Authority key identifier: 81:14:55:F1:7C:BF:12:74:1C:C3:CF:EE:30:20:9C:EF:C6:39:4F:8C
Certificate issuer:       /CN=A917BEA1/serialNumber=811455F17CBF12741CC3CFEE30209CEFC6394F8C
Certificate serial:       2E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gRRV8Xy_EnQcw8_uMCCc78Y5T4w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BEA1/F4DFD01E54E511F1AEEFDFE69C833773/gRRV8Xy_EnQcw8_uMCCc78Y5T4w.mft
Manifest number:          2E
Signing time:             Wed 19 Aug 2026 09:26:47 +0000
Manifest this update:     Wed 19 Aug 2026 09:26:47 +0000
Manifest next update:     Wed 26 Aug 2026 09:26:47 +0000
Files and hashes:         1: gRRV8Xy_EnQcw8_uMCCc78Y5T4w.crl (hash: VSMa+5XDrEFPEIZLHCxdfOnBpnG3rWZXQeTgqYU+vfA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917BEA1/F4DFD01E54E511F1AEEFDFE69C833773/gRRV8Xy_EnQcw8_uMCCc78Y5T4w.crl
                          rsync://rpki.apnic.net/member_repository/A917BEA1/F4DFD01E54E511F1AEEFDFE69C833773/gRRV8Xy_EnQcw8_uMCCc78Y5T4w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gRRV8Xy_EnQcw8_uMCCc78Y5T4w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BEA1, serialNumber=811455F17CBF12741CC3CFEE30209CEFC6394F8C
        Validity
            Not Before: Aug 19 09:26:47 2026 GMT
            Not After : Aug 26 09:26:47 2026 GMT
        Subject: CN=6a8576d7-c54a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d7:57:6a:fa:47:88:69:9c:c5:8f:65:42:5f:
                    93:9a:b9:fc:f8:55:01:07:48:77:63:0d:c3:de:82:
                    3f:fa:ac:ab:fa:1e:92:94:9c:99:ba:fc:6f:3e:01:
                    8c:82:88:a5:2b:46:0f:c7:7b:db:c3:b0:db:a0:7e:
                    eb:8b:68:0c:04:3b:a4:90:f9:86:c9:b2:4e:ff:54:
                    bc:0d:53:20:d1:91:f8:72:80:86:79:05:87:57:07:
                    a8:dd:98:c3:b3:5f:57:bf:f1:e5:a8:56:f6:6e:f3:
                    bc:ed:94:5b:a9:cd:0d:e6:db:29:0c:eb:68:e3:08:
                    2b:0c:d4:94:bb:c8:c5:1c:fe:9f:6d:ce:19:ce:11:
                    de:3f:cf:46:4b:de:80:c7:06:7f:28:12:5d:2f:e1:
                    63:d0:70:b4:c1:2a:6e:50:3d:03:7b:e5:e9:d5:76:
                    29:83:fc:65:ee:72:ff:ff:94:f4:f0:9e:89:bf:ed:
                    55:d5:c5:9b:65:cb:60:93:d5:84:30:31:03:76:ff:
                    ec:17:00:d1:ef:23:ab:2a:2d:a7:b4:2d:c6:1c:9c:
                    ef:26:ae:06:24:9c:7b:52:26:2d:01:23:cd:d7:f6:
                    41:a1:3e:3e:b2:34:cc:90:11:d8:a9:ce:89:8d:44:
                    48:6a:b6:8a:3a:35:c8:31:b5:c6:e9:bf:19:d5:59:
                    a8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:9D:A9:76:F6:1A:D8:82:F9:E8:F2:4E:E9:99:3A:FA:A8:AD:1D:CD
            X509v3 Authority Key Identifier:
                keyid:81:14:55:F1:7C:BF:12:74:1C:C3:CF:EE:30:20:9C:EF:C6:39:4F:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BEA1/F4DFD01E54E511F1AEEFDFE69C833773/gRRV8Xy_EnQcw8_uMCCc78Y5T4w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gRRV8Xy_EnQcw8_uMCCc78Y5T4w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEA1/F4DFD01E54E511F1AEEFDFE69C833773/gRRV8Xy_EnQcw8_uMCCc78Y5T4w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:cf:75:aa:98:fc:3f:5b:c5:e9:f3:15:79:4f:fd:92:02:4e:
         60:a2:92:b6:05:b6:a1:e1:2c:bd:17:ea:6f:8e:86:cc:78:bd:
         de:cd:bc:73:34:37:f9:82:21:30:d9:3c:e1:2b:2a:09:60:5b:
         fd:d5:38:ea:0c:fb:b3:3e:20:9a:b8:7e:33:b7:8f:fc:04:f5:
         26:5d:ae:bc:b2:d8:c4:68:dd:85:90:e5:21:e0:c4:20:ef:eb:
         13:f1:fc:ab:35:30:b4:65:b4:e5:71:05:62:ea:77:3d:f3:ae:
         30:c7:68:20:9d:e3:8e:08:6d:72:33:2b:c3:0d:14:c9:f3:4f:
         c7:c6:3a:58:fb:43:6b:b3:4d:72:9c:c6:28:76:96:5b:f6:fc:
         03:3c:fc:b1:93:cc:89:b9:d7:39:4f:bb:09:6e:7f:81:62:42:
         d4:6b:79:00:d7:ef:24:0a:fb:54:65:5d:bc:4b:5e:45:d2:ff:
         19:58:ee:ed:11:f3:70:e4:8f:8a:83:4a:21:ff:a3:5a:ae:b6:
         32:ad:2b:58:8b:ce:bd:c6:52:ea:69:eb:02:a8:21:49:74:ac:
         37:d4:7e:08:86:92:77:9c:79:96:4e:a9:c9:fe:d4:7b:64:74:
         43:6d:cf:e8:88:fa:7b:54:2c:ca:d8:6e:e1:c2:56:b4:c2:02:
         d7:5e:1c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:24 2026 by rpki-client