Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft
File:                     A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft (raw, json)
Hash identifier:          lj2A5/QPm9wKnXpGI5oRJi6EhFMoHcr8l9A7Wr++seQ=
Subject key identifier:   A6:8F:18:2A:1B:3B:88:2A:8A:FB:C0:75:BD:50:94:03:3F:6E:2D:88
Authority key identifier: 03:FF:06:57:C0:EC:F8:73:98:30:33:F7:C6:C6:48:8B:33:78:9C:43
Certificate issuer:       /CN=A918CFAD/serialNumber=03FF0657C0ECF873983033F7C6C6488B33789C43
Certificate serial:       01D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_8GV8Ds-HOYMDP3xsZIizN4nEM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft
Manifest number:          01D8
Signing time:             Mon 05 Oct 2026 03:55:34 +0000
Manifest this update:     Mon 05 Oct 2026 03:55:33 +0000
Manifest next update:     Mon 12 Oct 2026 03:55:33 +0000
Files and hashes:         1: A_8GV8Ds-HOYMDP3xsZIizN4nEM.crl (hash: EPWh7FGwRzs5Y2SP4ic94gL0//l1yDdfcxqV/ti2jXE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.crl
                          rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_8GV8Ds-HOYMDP3xsZIizN4nEM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 03:55:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 472 (0x1d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918CFAD, serialNumber=03FF0657C0ECF873983033F7C6C6488B33789C43
        Validity
            Not Before: Oct  5 03:55:33 2026 GMT
            Not After : Oct 12 03:55:33 2026 GMT
        Subject: CN=6ac31fb6-a820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:13:f0:fa:f0:8c:26:37:50:cb:4b:32:5a:eb:
                    5b:4d:79:3f:12:c9:05:9d:83:b7:4d:39:c4:53:54:
                    c5:c3:62:3c:96:91:5f:b7:db:53:42:57:74:ae:a3:
                    ea:67:7f:a2:e8:34:e7:da:90:3d:78:47:be:7c:69:
                    51:23:9e:7c:e0:f5:6f:bb:eb:e4:f4:06:fb:12:74:
                    fe:8c:92:f1:d9:5d:82:df:6c:aa:ae:ae:5f:f3:7a:
                    1d:3b:5b:c0:71:d8:35:aa:c7:d8:52:a4:60:f3:83:
                    8e:ca:f2:35:27:8c:59:a3:59:a4:4d:41:0c:98:2d:
                    53:1c:b3:a6:ac:63:a5:8d:88:00:e2:58:19:1c:f6:
                    ce:89:a3:fa:2d:23:2a:c0:49:1f:f2:a1:75:79:01:
                    ca:b6:3c:d8:60:dd:59:1f:a9:23:de:94:a2:83:8c:
                    56:db:7b:59:1d:a7:bd:f8:aa:66:4c:a7:85:9a:96:
                    bd:2c:a6:58:36:2f:de:f5:ae:a4:da:f2:d8:58:9a:
                    ea:12:db:e8:ad:47:08:7e:9d:9e:0a:74:ea:47:6d:
                    76:4b:a1:15:99:50:b6:fc:68:50:9c:d7:52:d0:e5:
                    1c:49:bc:6c:ce:9d:78:af:f4:38:a4:76:f2:ab:b5:
                    3f:40:86:dc:61:3b:cc:53:f9:6d:72:64:9d:45:58:
                    71:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:8F:18:2A:1B:3B:88:2A:8A:FB:C0:75:BD:50:94:03:3F:6E:2D:88
            X509v3 Authority Key Identifier:
                keyid:03:FF:06:57:C0:EC:F8:73:98:30:33:F7:C6:C6:48:8B:33:78:9C:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_8GV8Ds-HOYMDP3xsZIizN4nEM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:80:96:f6:58:dc:e7:33:f4:06:17:d2:a4:1a:90:a1:11:50:
         af:8f:c2:c6:0e:ae:8e:1d:5b:89:85:92:1b:73:d0:a1:50:dc:
         00:fa:a2:f5:4c:50:16:a6:b6:5a:5e:49:79:f6:28:7d:96:0e:
         8b:12:ba:17:d4:7d:10:e3:34:78:2b:f4:bf:61:a0:3b:08:72:
         3b:04:8e:15:44:31:fe:94:5a:23:50:fd:ac:4f:4e:be:3e:6c:
         e1:eb:e6:0e:e5:43:69:78:c0:6e:23:f2:92:4c:ca:53:7d:b5:
         cb:20:95:12:5c:c1:63:68:b1:6f:e3:d4:ae:75:30:c3:cc:be:
         d1:fd:aa:13:17:01:1e:2d:c0:d4:89:02:db:f7:f7:68:21:72:
         1c:db:9d:7f:38:24:5a:f0:d1:74:fc:07:5f:68:0e:9d:ed:8c:
         9c:56:4a:a9:ca:df:de:a6:95:40:82:55:8f:7b:c3:18:94:c8:
         d2:4f:b0:05:b9:08:21:65:6b:33:3c:fa:61:4d:ba:05:65:a3:
         66:22:36:d4:24:58:d1:2a:8e:4b:6b:8d:d2:21:08:c0:f6:13:
         40:54:6f:81:c3:d8:78:8c:51:0e:7c:3a:9f:d1:a6:a8:2b:43:
         bf:95:79:60:14:4e:15:22:0b:0b:e2:08:55:d5:e0:b0:91:2b:
         ef:bb:e6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 06:02:20 2026 by rpki-client