Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.mft
File:                     8eUBY6xQamLM-1qK9WURw48VBBQ.mft (raw, json)
Hash identifier:          OQ35P2F9LhrYii3fd1UpPI8ZzXuJfMMbnaiZCxM/6Ts=
Subject key identifier:   25:57:85:05:FF:DF:2B:18:48:2D:B9:17:4C:36:B4:B0:28:61:35:30
Authority key identifier: F1:E5:01:63:AC:50:6A:62:CC:FB:5A:8A:F5:65:11:C3:8F:15:04:14
Certificate issuer:       /CN=A9184684/serialNumber=F1E50163AC506A62CCFB5A8AF56511C38F150414
Certificate serial:       E3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8eUBY6xQamLM-1qK9WURw48VBBQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.mft
Manifest number:          DB
Signing time:             Fri 17 Jul 2026 07:51:50 +0000
Manifest this update:     Fri 17 Jul 2026 07:51:49 +0000
Manifest next update:     Fri 24 Jul 2026 07:51:49 +0000
Files and hashes:         1: 8eUBY6xQamLM-1qK9WURw48VBBQ.crl (hash: 8qIrngPz6FjDQdMv5JqHTaJkwi4txjcLEL32H0vXWqU=)
                          2: 2EA48F06569A11F0A878F309C4F9AE02.roa (hash: TgVrDlat2+ByZMpKIQ8pI5WNmuoF/FmyVp9TGWTtSyI=)
                          3: CE88C72C569911F08E21CF87C4F9AE02.roa (hash: q/nsqh9kiH+bznpNaj8r4apm6/Ae9GpQkbbiW39Shpg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.crl
                          rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8eUBY6xQamLM-1qK9WURw48VBBQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 07:51:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 227 (0xe3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184684, serialNumber=F1E50163AC506A62CCFB5A8AF56511C38F150414
        Validity
            Not Before: Jul 17 07:51:49 2026 GMT
            Not After : Jul 24 07:51:49 2026 GMT
        Subject: CN=6a59df16-ef8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e3:f3:a9:6e:60:22:d7:b5:fa:22:0f:b5:95:
                    ab:fa:87:fb:f4:8e:e0:61:6c:f0:a4:43:93:05:27:
                    de:13:02:3f:2b:5a:02:76:54:19:a5:c7:64:2d:9c:
                    43:4e:f5:32:58:bd:87:41:f9:d3:73:59:34:ff:3d:
                    2f:ad:57:db:a3:bd:97:d9:6a:25:46:15:8f:0a:57:
                    90:cc:91:e1:ba:a2:d5:a0:53:99:e1:9c:db:9a:40:
                    45:50:68:34:ca:b1:b1:bf:ef:ce:9d:49:07:00:95:
                    ae:00:dd:d5:26:aa:53:98:34:31:c4:b1:4b:eb:e1:
                    73:e0:9f:44:b7:d3:d9:bf:b8:14:5e:f4:48:15:ad:
                    9d:c9:6e:d5:a7:16:cf:7e:ff:1d:de:ed:d2:a8:0a:
                    10:b9:d3:cd:e2:b5:a4:80:fb:43:16:74:db:48:c5:
                    90:d0:0c:d6:d9:82:ad:3d:3c:7f:b8:25:ae:12:ee:
                    68:77:12:a7:79:1a:62:ad:a5:28:67:d7:7c:71:7b:
                    a8:7e:e6:f1:e4:06:ec:42:f9:7c:3e:09:db:b2:f0:
                    77:51:5a:be:f4:36:96:96:30:da:84:ba:bc:05:4a:
                    bc:5c:f5:c9:f0:aa:dd:0e:7d:98:db:1e:86:53:d9:
                    12:fe:ba:fe:db:6f:c9:f0:6c:49:38:dd:ed:81:a6:
                    fd:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:57:85:05:FF:DF:2B:18:48:2D:B9:17:4C:36:B4:B0:28:61:35:30
            X509v3 Authority Key Identifier:
                keyid:F1:E5:01:63:AC:50:6A:62:CC:FB:5A:8A:F5:65:11:C3:8F:15:04:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8eUBY6xQamLM-1qK9WURw48VBBQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e6:cb:ea:79:53:f8:49:f8:16:4d:b9:3f:85:85:88:f1:ad:c0:
         1d:98:50:71:70:ae:31:ba:22:ae:34:5f:c0:b6:09:f5:a0:71:
         ca:89:5d:62:85:98:a7:b5:6b:8f:a3:db:0e:cd:91:fc:92:90:
         4f:b5:2c:a5:93:02:36:94:c6:5e:6f:3b:ab:d4:7f:d7:50:bf:
         09:95:f8:b6:48:98:84:ea:b9:bb:b8:06:1d:0c:1e:2f:42:f2:
         91:e1:6e:10:0b:f5:ad:6b:3a:9e:48:85:52:da:09:30:d7:7e:
         8c:18:4e:16:5f:fa:89:68:18:69:9b:b2:eb:9c:3a:64:c6:6e:
         5f:12:63:1b:81:02:6b:8b:3b:c4:53:99:7f:b0:19:c8:d7:ba:
         81:d4:82:c4:4a:88:bd:e0:49:e7:55:e1:3d:92:39:65:ee:83:
         ab:c5:1b:5f:23:e7:c3:55:a7:77:55:d6:c1:dc:90:79:36:1d:
         b0:88:7f:52:3a:c5:6f:7e:69:7e:76:02:da:0d:01:4a:ef:86:
         34:03:a5:33:b0:ed:55:75:0a:33:78:16:1d:50:fd:c1:b2:71:
         76:4e:e0:0f:f5:51:f9:bc:a5:d5:18:1b:d4:17:df:00:36:21:
         66:76:93:82:8b:fc:9d:d2:6f:6c:88:e4:16:7a:40:09:c6:ba:
         c1:96:50:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 04:34:52 2026 by rpki-client