Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E1C4/15695762CE9311F0969E1524C4F9AE02/8ElXN_-ojhn_HhUqVgIex1bYUps.mft
File:                     8ElXN_-ojhn_HhUqVgIex1bYUps.mft (raw, json)
Hash identifier:          HVA3DIq9dV5fd49C1b9C+KazhqAVZt6CFx6sJVK+UQA=
Subject key identifier:   B6:B8:C5:E6:74:10:21:EB:D7:B9:5A:D2:66:94:AD:DA:0D:F4:20:06
Authority key identifier: F0:49:57:37:FF:A8:8E:19:FF:1E:15:2A:56:02:1E:C7:56:D8:52:9B
Certificate issuer:       /CN=A918E1C4/serialNumber=F0495737FFA88E19FF1E152A56021EC756D8529B
Certificate serial:       34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ElXN_-ojhn_HhUqVgIex1bYUps.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E1C4/15695762CE9311F0969E1524C4F9AE02/8ElXN_-ojhn_HhUqVgIex1bYUps.mft
Manifest number:          32
Signing time:             Tue 03 Mar 2026 08:18:04 +0000
Manifest this update:     Tue 03 Mar 2026 08:18:04 +0000
Manifest next update:     Tue 10 Mar 2026 08:18:04 +0000
Files and hashes:         1: 8ElXN_-ojhn_HhUqVgIex1bYUps.crl (hash: IjUJIWjNYVctMix8S36uleeRqQcUjLF3AZblKLqNZNU=)
                          2: E209029ACE9311F09FB94826C4F9AE02.roa (hash: ufH3RqyZs/KCX/MEMIMIi9q3jKuJOCXeHV0hgCUZTCM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E1C4/15695762CE9311F0969E1524C4F9AE02/8ElXN_-ojhn_HhUqVgIex1bYUps.crl
                          rsync://rpki.apnic.net/member_repository/A918E1C4/15695762CE9311F0969E1524C4F9AE02/8ElXN_-ojhn_HhUqVgIex1bYUps.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ElXN_-ojhn_HhUqVgIex1bYUps.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 08:18:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E1C4, serialNumber=F0495737FFA88E19FF1E152A56021EC756D8529B
        Validity
            Not Before: Mar  3 08:18:04 2026 GMT
            Not After : Mar 10 08:18:04 2026 GMT
        Subject: CN=69a6993c-3ab4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4d:49:81:8d:8c:06:5c:6f:e0:eb:c0:75:0a:
                    96:57:70:5f:76:7f:f2:95:f9:ba:49:36:5b:5e:19:
                    91:d9:1f:7d:ed:eb:b3:2f:55:3f:c5:fc:39:e3:ea:
                    4c:a3:69:33:f8:49:17:9a:72:65:2e:10:53:f7:1d:
                    7e:a6:bb:de:a3:02:07:14:04:07:40:6e:db:42:ab:
                    3b:a5:23:46:4b:13:f6:42:53:95:65:44:4e:63:1a:
                    e8:cd:8a:8a:5e:b2:09:36:c4:cc:50:22:44:03:24:
                    10:d8:3c:e6:44:b9:b4:ce:40:43:88:1f:92:52:08:
                    46:1a:7f:f9:b1:8f:71:4c:fd:db:dc:c3:8f:1e:ac:
                    9f:5a:f2:7b:7b:93:36:ca:fc:ec:8d:2f:17:84:15:
                    df:fd:37:d1:20:ab:4e:ed:bf:77:c5:bd:ad:cd:62:
                    7d:ae:f1:68:dd:9a:3e:f7:c9:db:dd:6b:93:ac:15:
                    4d:7e:76:4a:e0:96:08:de:20:66:ba:7c:a1:cd:6a:
                    15:55:c3:ff:20:1b:02:8b:b4:a2:7b:b9:c2:b2:ef:
                    b8:06:dc:72:7f:ac:c8:81:3f:39:de:49:eb:dd:61:
                    ce:5a:c5:32:b7:7e:ea:87:e0:e8:ae:a4:a4:6d:b2:
                    36:21:42:5d:ce:7c:bd:b7:24:c9:9d:c9:91:68:f7:
                    48:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B8:C5:E6:74:10:21:EB:D7:B9:5A:D2:66:94:AD:DA:0D:F4:20:06
            X509v3 Authority Key Identifier:
                keyid:F0:49:57:37:FF:A8:8E:19:FF:1E:15:2A:56:02:1E:C7:56:D8:52:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E1C4/15695762CE9311F0969E1524C4F9AE02/8ElXN_-ojhn_HhUqVgIex1bYUps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ElXN_-ojhn_HhUqVgIex1bYUps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E1C4/15695762CE9311F0969E1524C4F9AE02/8ElXN_-ojhn_HhUqVgIex1bYUps.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:ad:c1:2f:d9:e6:07:3d:32:3b:2b:7c:44:1d:89:d6:e4:45:
         47:14:35:aa:45:01:c8:46:80:3c:92:ca:e5:6f:98:e9:b7:2d:
         04:b7:74:77:28:fd:08:50:bc:89:79:91:e0:96:e2:08:7c:a3:
         56:2c:c5:ba:78:2e:0f:3b:c5:77:cb:ad:cb:f9:48:b8:8c:2c:
         c9:90:5f:33:7e:e6:f6:2a:fb:10:d1:df:77:3c:98:bc:5e:9c:
         14:64:a7:8c:15:1f:b5:db:aa:32:c2:f2:16:25:24:f0:de:9a:
         db:f1:db:97:50:33:96:75:0f:4e:8e:30:97:7a:b2:1d:2e:08:
         a3:7c:ad:4f:f0:e3:82:55:78:10:8f:46:17:23:ea:93:88:7e:
         67:48:16:e5:04:a2:4e:ef:6f:ef:5e:6a:9c:39:a1:f3:c1:de:
         54:3b:af:5c:96:65:92:91:4c:40:c7:32:67:b3:ab:82:b4:ff:
         f8:08:76:69:e6:00:c2:d4:5d:ec:0f:31:ec:f0:87:a3:7c:85:
         3f:cc:40:cb:9c:a3:fe:10:b8:bd:b3:53:a4:b1:3c:ca:6a:87:
         a4:69:10:c6:e8:c0:5a:a3:67:39:fd:3e:d0:f5:3a:05:18:67:
         6e:ed:2a:50:9d:47:7c:ff:97:0a:6b:ce:89:25:76:f6:59:83:
         0d:67:6d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 16:36:18 2026 by rpki-client