Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft
File:                     7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft (raw, json)
Hash identifier:          HZIXsnFffUAa/XjlBMszpDuW1umr5qB60cmoBojqVdw=
Subject key identifier:   9F:8E:FE:7D:2F:FE:17:86:9C:53:EC:39:DE:88:DF:68:54:25:D2:0A
Authority key identifier: EC:3B:90:C3:48:86:FD:09:28:E3:12:54:61:FB:B4:15:2B:E9:91:37
Certificate issuer:       /CN=A918D7D0/serialNumber=EC3B90C34886FD0928E3125461FBB4152BE99137
Certificate serial:       0D3A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DuQw0iG_Qko4xJUYfu0FSvpkTc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft
Manifest number:          1618
Signing time:             Tue 18 Aug 2026 18:19:48 +0000
Manifest this update:     Tue 18 Aug 2026 18:19:48 +0000
Manifest next update:     Tue 25 Aug 2026 18:19:48 +0000
Files and hashes:         1: 7DuQw0iG_Qko4xJUYfu0FSvpkTc.crl (hash: kA5wDxSnMxT5jn9jN0R2nMP8iMyQy3wicAo4VDCeC/c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.crl
                          rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DuQw0iG_Qko4xJUYfu0FSvpkTc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 18:19:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3386 (0xd3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D7D0, serialNumber=EC3B90C34886FD0928E3125461FBB4152BE99137
        Validity
            Not Before: Aug 18 18:19:48 2026 GMT
            Not After : Aug 25 18:19:48 2026 GMT
        Subject: CN=6a84a244-d0a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7e:0e:37:71:3f:cc:cf:62:0f:d1:11:c5:1f:
                    ec:8a:50:59:60:21:3c:8b:f6:36:2a:be:2c:7c:d3:
                    70:0f:9c:de:4e:50:08:51:cd:13:5e:e1:3b:fb:55:
                    3a:24:89:e4:2c:9a:c4:71:a7:05:99:5a:1d:a1:7d:
                    d9:a8:43:81:e3:22:0e:cb:e5:35:cb:9a:6c:77:a9:
                    0b:01:f1:be:1c:fe:cb:3f:9a:2b:8e:c8:14:87:f2:
                    67:12:b4:58:ae:fe:6a:b2:2e:c2:e4:b3:e7:ef:45:
                    c3:b4:2c:69:d5:4f:91:48:22:90:b1:40:d5:02:41:
                    89:75:f2:1f:6f:6d:59:19:39:ef:2e:9d:bf:47:4b:
                    d7:7b:80:98:20:4f:6f:fe:00:f0:f1:b6:3a:ed:06:
                    80:92:af:b4:2d:23:ba:49:da:9a:f5:82:2f:20:ba:
                    39:bd:78:95:b2:d7:3f:ae:ca:82:ab:e8:33:29:4c:
                    7d:b1:4c:1c:da:ab:6b:68:0d:a3:80:ca:ef:4e:cd:
                    82:38:31:d5:ee:bd:5a:6d:77:36:b3:ee:ff:bc:96:
                    5a:be:8e:04:61:d0:2c:85:6e:84:22:86:fd:ab:ce:
                    ae:c0:29:2d:1d:b0:40:93:b1:f4:61:59:74:4a:58:
                    9b:e1:ee:75:0a:51:ca:0e:e7:60:15:2f:e1:b8:5d:
                    36:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:8E:FE:7D:2F:FE:17:86:9C:53:EC:39:DE:88:DF:68:54:25:D2:0A
            X509v3 Authority Key Identifier:
                keyid:EC:3B:90:C3:48:86:FD:09:28:E3:12:54:61:FB:B4:15:2B:E9:91:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DuQw0iG_Qko4xJUYfu0FSvpkTc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:85:a2:88:60:33:37:29:56:16:b7:4c:eb:98:39:39:40:bb:
         78:67:5d:47:f5:a4:17:b4:04:2b:2f:6f:68:1c:58:7c:f6:59:
         63:ba:64:0d:d2:e8:f7:18:f6:c8:11:c6:62:90:31:36:1f:1c:
         16:8a:94:ed:3a:f3:e8:9e:a7:f4:aa:98:fc:50:48:9c:de:dd:
         f0:52:48:a1:b0:f6:ac:55:0a:34:f0:b0:64:4c:ff:7f:75:88:
         e9:ef:dc:32:3e:ca:68:de:d7:fd:7e:3b:ad:f1:94:8e:26:ae:
         10:3f:5b:f1:65:95:9b:c5:c9:b7:72:48:25:9c:76:2c:fe:53:
         71:a1:af:7f:db:bb:75:03:c7:33:9a:8f:cf:16:71:05:e9:fd:
         c3:42:25:27:49:0e:77:7e:e6:37:b3:a2:e7:f0:7f:21:4f:b7:
         ef:d2:16:7e:cb:4b:22:59:1d:7e:0a:79:74:f5:9f:43:4f:c1:
         10:fc:a5:ff:19:d4:14:a8:bf:46:d2:30:58:09:3d:80:6d:08:
         9f:a5:f4:7c:69:28:fb:74:b4:c1:24:8a:6b:42:ad:99:4c:92:
         76:d8:39:52:82:15:80:58:96:a6:98:0b:3a:1f:82:0d:7d:2b:
         f1:a8:10:fd:0a:6b:00:5e:a9:3d:5d:15:d0:ac:0a:53:1d:ad:
         07:12:b9:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:49 2026 by rpki-client