Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft
File:                     0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft (raw, json)
Hash identifier:          vWzy5QyJB8urWn7vAGdSesBcnuIX4U+cz7ugAldm+B8=
Subject key identifier:   28:5E:FB:E8:FC:05:55:09:08:E9:C0:D7:5C:9A:0A:36:F4:15:46:17
Authority key identifier: D0:5A:C9:0A:20:7F:60:87:CE:02:ED:C2:31:88:E3:2A:AA:1B:1B:44
Certificate issuer:       /CN=A918C212/serialNumber=D05AC90A207F6087CE02EDC23188E32AAA1B1B44
Certificate serial:       01F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0FrJCiB_YIfOAu3CMYjjKqobG0Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft
Manifest number:          01F1
Signing time:             Wed 19 Aug 2026 03:53:55 +0000
Manifest this update:     Wed 19 Aug 2026 03:53:54 +0000
Manifest next update:     Wed 26 Aug 2026 03:53:54 +0000
Files and hashes:         1: 0FrJCiB_YIfOAu3CMYjjKqobG0Q.crl (hash: Cyp8hOAFkoeaihKOfBXw8Qhu9vIMc6iv+PGNasN9S/0=)
                          2: BCBA699CA2D111EE89C12A4EC4F9AE02.roa (hash: KrxtGQ6yO11/02qFy5rXfTDmn9HLGbG+hCojfXNvsGU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.crl
                          rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0FrJCiB_YIfOAu3CMYjjKqobG0Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 03:53:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 502 (0x1f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C212, serialNumber=D05AC90A207F6087CE02EDC23188E32AAA1B1B44
        Validity
            Not Before: Aug 19 03:53:54 2026 GMT
            Not After : Aug 26 03:53:54 2026 GMT
        Subject: CN=6a8528d3-26b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8d:60:2c:21:88:f1:b2:7f:51:ce:5b:c3:bc:
                    f6:92:2d:ef:69:ce:49:6c:aa:6c:d6:bd:13:e3:90:
                    7c:a7:4b:d5:fd:d6:ed:ef:2d:95:7a:d0:03:3a:44:
                    0f:a6:90:d1:3b:27:cd:2a:0b:20:6d:95:5d:f0:c9:
                    22:c5:9e:80:11:92:c2:1d:78:62:0e:77:ae:d4:87:
                    83:94:0d:ac:92:6d:31:89:bf:9e:30:55:3c:35:3a:
                    07:71:d8:92:d1:3d:58:79:05:f5:34:9b:67:c3:6d:
                    c4:65:40:fc:61:0f:cd:6f:ff:01:ca:16:16:cf:a8:
                    94:e7:f9:ae:8f:7b:f3:f2:10:4a:ed:8a:4e:5f:cc:
                    91:b2:47:bb:62:40:06:4b:40:48:a3:85:1e:1e:7f:
                    39:92:a7:c5:fd:a1:95:49:58:e0:27:46:be:53:e9:
                    83:a2:15:7b:74:3c:b7:4a:f4:53:9b:e0:de:30:12:
                    49:7a:49:6e:ac:58:7f:d2:e8:c7:e9:c1:82:5b:f4:
                    ec:2d:0e:62:20:19:aa:e1:8f:09:0c:5a:bb:a1:44:
                    ae:2b:4f:6a:a1:c2:d3:57:5c:97:1a:9d:c0:e0:bb:
                    3b:a8:b5:5e:1e:90:3b:dc:55:ce:82:ae:a2:12:b5:
                    ce:f8:90:82:23:68:88:09:78:ed:76:02:33:87:69:
                    bb:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:5E:FB:E8:FC:05:55:09:08:E9:C0:D7:5C:9A:0A:36:F4:15:46:17
            X509v3 Authority Key Identifier:
                keyid:D0:5A:C9:0A:20:7F:60:87:CE:02:ED:C2:31:88:E3:2A:AA:1B:1B:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0FrJCiB_YIfOAu3CMYjjKqobG0Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:c4:70:a2:16:0b:5c:d5:7d:87:4e:90:c9:6c:63:64:e4:ca:
         d3:2e:7c:f4:d5:0c:bf:3c:12:4a:27:81:59:4d:1b:37:e6:c6:
         66:df:c4:c7:a5:6c:4f:ab:52:8c:f6:24:38:17:d1:55:a9:9a:
         1f:31:52:6b:47:d0:df:47:09:10:95:9e:c3:f7:d4:1e:54:02:
         06:39:e4:bf:1c:e3:30:97:83:6e:03:97:7a:d6:9a:dc:87:70:
         04:83:d8:44:89:85:a4:88:56:3d:69:54:b1:d1:49:36:f9:f8:
         b5:06:3f:79:1c:94:a5:23:29:22:4d:ff:0b:4a:73:a7:3c:d1:
         e7:81:53:7a:a2:84:f8:46:3e:ab:33:74:02:50:2e:dc:47:28:
         68:aa:61:fc:16:2c:fa:03:98:d1:b0:2f:73:73:9a:59:ab:07:
         6a:8d:4d:f2:fc:c9:f5:b5:c4:7d:56:c0:c6:4f:52:7e:ff:e1:
         7b:22:11:70:f5:ae:68:92:7e:09:fe:73:48:da:8c:54:6b:d2:
         b5:70:99:8a:ef:f6:1c:b5:19:26:c3:35:ff:4d:ab:51:c7:49:
         36:f9:ce:31:2e:d6:f4:e1:5f:6c:f5:77:7c:23:89:fb:76:e3:
         68:f4:91:84:09:a0:ae:53:b6:15:7a:b0:73:57:ac:5e:bc:71:
         f7:60:bb:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:29:13 2026 by rpki-client