Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft
File:                     PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft (raw, json)
Hash identifier:          TfefFMvO9KraHxF86PY1C5ghLegfm66bwoBN1k7XCJ0=
Subject key identifier:   3F:39:A1:8D:84:12:D3:15:06:31:6D:C9:59:75:04:62:8C:BD:BA:66
Authority key identifier: 3C:DE:F1:69:2A:48:BB:15:96:56:74:BC:00:2A:31:33:58:F5:2F:EF
Certificate issuer:       /CN=A918CABF/serialNumber=3CDEF1692A48BB15965674BC002A313358F52FEF
Certificate serial:       0BEB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft
Manifest number:          0BDC
Signing time:             Mon 06 Jul 2026 19:22:27 +0000
Manifest this update:     Mon 06 Jul 2026 19:22:27 +0000
Manifest next update:     Mon 13 Jul 2026 19:22:27 +0000
Files and hashes:         1: PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl (hash: hgbn+fLUGL12sx+N/uoUVPatwxfWKURP1JPot9ZaE/w=)
                          2: 783FBEE4430711EAB1201F6BC4F9AE02.roa (hash: 31dQK67wiYiy5G3Mr5Z9I8W/2zQAHp6VfQMF8EbdjCc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl
                          rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Jul 2026 19:22:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3051 (0xbeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918CABF, serialNumber=3CDEF1692A48BB15965674BC002A313358F52FEF
        Validity
            Not Before: Jul  6 19:22:27 2026 GMT
            Not After : Jul 13 19:22:27 2026 GMT
        Subject: CN=6a4c0073-e4ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:18:a1:35:be:70:fd:54:bb:54:d7:5c:ce:d4:
                    67:07:4e:28:3e:41:3a:b5:35:99:11:bf:1d:e8:14:
                    3b:81:2c:94:ec:71:40:cd:99:97:57:3b:0f:ce:e9:
                    fb:b7:35:ef:9f:71:ac:7c:79:48:43:7b:91:d5:d8:
                    b9:30:a4:83:21:84:fa:83:3d:5f:1b:0f:4b:07:94:
                    f6:57:43:2e:15:2d:46:1a:30:35:3b:13:2f:5f:f9:
                    2c:8b:81:c5:9a:a5:19:5f:ee:66:0f:c0:9f:90:a7:
                    08:48:3f:4d:2e:f5:30:68:aa:12:d0:07:f5:72:ec:
                    13:34:61:45:fe:08:07:fd:ec:31:20:a6:eb:0c:07:
                    ea:45:be:11:f9:48:0f:94:4c:2e:4a:a4:dc:6b:75:
                    f4:99:12:b2:9e:3d:cb:41:73:e6:21:7e:28:9d:27:
                    c6:da:bd:4a:f9:1e:96:e2:ca:9b:b1:8d:62:6e:d3:
                    b3:e3:0b:8d:d7:bb:cb:3c:c0:1b:12:25:cf:50:b9:
                    bd:76:c9:ab:c6:98:31:d6:92:84:d6:82:41:7f:09:
                    98:52:d7:32:c5:99:a4:6e:bf:52:d2:7d:c4:3c:99:
                    1d:2b:37:f8:2d:b7:53:3f:c3:70:92:3d:ba:cb:3b:
                    17:94:2e:91:4a:4b:69:ca:b5:3b:76:22:bc:73:c7:
                    28:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:39:A1:8D:84:12:D3:15:06:31:6D:C9:59:75:04:62:8C:BD:BA:66
            X509v3 Authority Key Identifier:
                keyid:3C:DE:F1:69:2A:48:BB:15:96:56:74:BC:00:2A:31:33:58:F5:2F:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:4e:65:e4:4f:ad:9c:32:ad:81:ea:cd:ba:7e:02:bf:bd:1f:
         cf:70:48:2d:87:fa:14:4e:5c:a2:b0:7c:2a:fc:19:34:4f:b0:
         a6:45:10:7f:a5:7a:cb:77:41:ce:14:be:a4:4c:b6:41:54:b4:
         be:3b:c9:40:4c:2c:05:85:86:2f:bc:41:54:14:22:ab:02:bc:
         e1:11:dd:e9:d9:f8:38:4a:7a:f0:db:b5:42:43:b1:1f:99:d7:
         5b:ed:d2:32:8f:cd:d9:9e:d5:05:4d:46:c5:cb:23:11:5b:69:
         12:0e:98:7e:8b:fa:ea:c2:97:dc:e0:86:c5:ee:b9:6c:7a:54:
         85:a0:be:a3:e6:f0:c7:0e:8b:da:79:3a:93:0c:20:da:f9:c4:
         15:79:6d:52:81:d6:e5:aa:1d:b8:6c:da:da:95:3b:8f:82:34:
         b7:cd:c5:cd:03:b4:de:71:c0:46:25:99:b7:14:b5:62:98:6b:
         af:c2:d9:44:8a:68:c6:85:38:a8:00:58:e0:c2:c5:95:d0:61:
         cb:d0:0f:08:f0:2f:6d:9d:f5:63:37:32:d6:95:99:65:c6:c4:
         56:d1:3c:f5:f3:53:a8:8b:da:02:64:8d:1b:9e:60:e4:32:9c:
         83:a4:2f:c7:bd:4c:61:cb:bf:54:39:9e:af:99:16:5c:88:bf:
         cf:08:fb:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 00:07:33 2026 by rpki-client