Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft
File:                     7Yy8VM2G8sH5LexryQnbxvpjTIE.mft (raw, json)
Hash identifier:          Pa6Iv2mf+mWzt6Esb7zFn0eynB2x9xIXIW2gGKbCIXg=
Subject key identifier:   C9:B1:6E:CB:E0:D8:6E:7C:00:50:F4:02:3A:04:BC:7C:30:D0:26:E4
Authority key identifier: ED:8C:BC:54:CD:86:F2:C1:F9:2D:EC:6B:C9:09:DB:C6:FA:63:4C:81
Certificate issuer:       /CN=A918A3E6/serialNumber=ED8CBC54CD86F2C1F92DEC6BC909DBC6FA634C81
Certificate serial:       08DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft
Manifest number:          08CC
Signing time:             Thu 10 Sep 2026 20:25:56 +0000
Manifest this update:     Thu 10 Sep 2026 20:25:55 +0000
Manifest next update:     Thu 17 Sep 2026 20:25:55 +0000
Files and hashes:         1: 7Yy8VM2G8sH5LexryQnbxvpjTIE.crl (hash: 1V6QVj4goArSMBcoFwvW/zjJ+Zvk0YV48XMitoLTudA=)
                          2: C130A016889811EE8EB03D6EC4F9AE02.roa (hash: 7CKAHE1RnwK/9G3CYREp8rErazcPgvU0b3JJFy6BhKQ=)
                          3: 7ABD27E4889811EEB99AD46DC4F9AE02.roa (hash: AwaKj2bJ0MEMMJtVjo28ChJ/Km9jzVAOhn+Y3iz/dAA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.crl
                          rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 20:25:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2271 (0x8df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A3E6, serialNumber=ED8CBC54CD86F2C1F92DEC6BC909DBC6FA634C81
        Validity
            Not Before: Sep 10 20:25:55 2026 GMT
            Not After : Sep 17 20:25:55 2026 GMT
        Subject: CN=6aa31254-6bd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5d:68:12:89:ba:d9:35:c4:8a:92:d3:4c:e5:
                    7e:79:13:3e:de:c9:54:83:31:91:b4:1f:90:e7:58:
                    3e:d2:e3:0e:74:50:92:c5:3a:1e:ae:73:cd:ce:aa:
                    1e:3e:74:8a:12:37:7b:6a:7e:68:da:25:b3:c3:d3:
                    9f:70:20:61:01:f5:c4:ca:db:0d:20:8a:fc:5d:df:
                    db:ab:a9:95:fc:ac:7d:04:7b:f0:1e:98:f6:01:1a:
                    ea:2b:6c:f9:98:31:ea:13:45:14:31:0a:f9:f8:41:
                    d2:4c:9d:2d:17:32:d3:15:58:8f:32:0b:05:d3:ab:
                    e2:b9:a0:83:83:2b:17:c0:ae:e8:c4:e3:4d:ea:4d:
                    e9:92:bf:03:d4:49:e3:9c:52:a1:55:3a:cd:56:f2:
                    a9:76:f9:c4:18:3e:dd:74:45:61:9b:13:01:ed:ea:
                    f4:71:42:99:9a:3c:9a:97:bd:d5:eb:c3:e3:28:d5:
                    b8:1c:38:59:32:25:b8:43:62:82:77:3b:15:8f:98:
                    97:dc:b1:e5:ea:1c:ee:63:12:1d:e5:7c:9f:14:9a:
                    62:ba:41:c0:a5:be:e3:be:61:1d:b4:35:b5:80:7c:
                    36:40:23:6d:58:e6:32:0f:23:5b:27:67:69:6e:7d:
                    54:db:cf:fc:08:2a:f1:b7:b1:e6:d2:03:fd:d4:a9:
                    4a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:B1:6E:CB:E0:D8:6E:7C:00:50:F4:02:3A:04:BC:7C:30:D0:26:E4
            X509v3 Authority Key Identifier:
                keyid:ED:8C:BC:54:CD:86:F2:C1:F9:2D:EC:6B:C9:09:DB:C6:FA:63:4C:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:df:fd:c4:fd:ba:a3:23:89:4e:c9:25:20:81:05:e0:d7:a8:
         1c:1c:8f:ee:71:ef:e2:45:f2:8e:6d:33:28:69:5d:51:d8:9b:
         7e:65:00:d1:c6:23:6b:44:2d:47:d9:26:8d:98:fd:f3:0a:86:
         80:3d:69:5c:03:ef:b2:29:66:44:6e:fb:f5:c7:a8:53:ea:d3:
         15:1f:51:40:42:41:99:82:4e:53:3d:6d:1c:52:ba:83:4a:66:
         aa:ec:78:c5:db:66:8f:47:e9:88:db:5d:61:15:0b:71:71:8b:
         42:f0:81:84:54:56:68:f9:69:38:b6:21:ca:89:d2:73:01:7c:
         82:89:8f:54:fd:da:4b:9c:bb:52:66:ee:ab:35:b9:35:72:d2:
         51:72:ab:54:e4:d0:c9:82:7c:6f:51:c0:5f:e4:dd:0a:48:a4:
         ce:3a:35:b3:f8:62:c4:a0:7b:2e:d9:ca:f0:76:f4:41:5a:e3:
         17:24:59:cd:6d:d3:32:af:28:50:10:e4:21:30:14:41:f8:48:
         9c:6a:64:b3:d8:6c:f9:5c:78:04:7b:6d:b1:6f:e3:c8:6e:ae:
         7b:22:3d:c3:e8:2e:65:e3:e1:72:33:93:1b:e0:68:60:c0:2b:
         53:6b:67:f7:d4:d2:91:da:4c:a3:42:cc:9f:f2:c6:15:35:07:
         63:6f:74:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:53:18 2026 by rpki-client