Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.mft
File:                     8FIaW22wTXVvopUqDymjkSEsWLI.mft (raw, json)
Hash identifier:          rTfNZf/lXu4SOg2qasJB+AqP/iWeu+IEPaQ4tjTb44A=
Subject key identifier:   22:DE:0A:07:1C:22:ED:26:5E:64:11:97:54:C0:5E:13:65:94:A8:09
Authority key identifier: F0:52:1A:5B:6D:B0:4D:75:6F:A2:95:2A:0F:29:A3:91:21:2C:58:B2
Certificate issuer:       /CN=A919AE6A/serialNumber=F0521A5B6DB04D756FA2952A0F29A391212C58B2
Certificate serial:       78
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8FIaW22wTXVvopUqDymjkSEsWLI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.mft
Manifest number:          76
Signing time:             Tue 23 Jun 2026 07:59:17 +0000
Manifest this update:     Tue 23 Jun 2026 07:59:17 +0000
Manifest next update:     Tue 30 Jun 2026 07:59:17 +0000
Files and hashes:         1: 8FIaW22wTXVvopUqDymjkSEsWLI.crl (hash: dKErQupS9DgGMVxe1n/XKs7JqbmJk4BGXouPIslNe3k=)
                          2: E9689162C8FE11F0BCA3A555C4F9AE02.roa (hash: ivbdN4NvvnbB10SMOQMCGpQDBPImMhiYIJBpIIj7B+I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.crl
                          rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8FIaW22wTXVvopUqDymjkSEsWLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 07:59:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120 (0x78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919AE6A, serialNumber=F0521A5B6DB04D756FA2952A0F29A391212C58B2
        Validity
            Not Before: Jun 23 07:59:17 2026 GMT
            Not After : Jun 30 07:59:17 2026 GMT
        Subject: CN=6a3a3cd5-7f79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a1:1d:b2:17:c2:b0:bd:15:60:6e:1e:60:1d:
                    d0:7e:af:91:b1:cc:a0:bc:b8:12:0e:3c:4a:ab:78:
                    48:3e:2e:4f:4b:fc:bc:a7:29:69:93:ce:17:ff:16:
                    23:ae:bf:9c:51:0d:45:8b:4f:59:51:b9:ab:1c:1e:
                    b5:01:01:5c:03:c7:75:49:a7:9f:7e:d5:fc:21:b0:
                    6d:45:c1:09:77:e3:c8:af:0f:92:22:f2:61:6d:66:
                    ca:21:c4:79:1a:13:b5:0d:f7:e2:af:57:53:e7:6b:
                    7b:6e:85:0f:9c:62:db:02:66:e3:3b:ef:ec:ac:16:
                    ab:98:89:f3:01:f1:f1:cc:3a:37:a4:19:af:10:61:
                    96:49:bc:7e:a6:e3:91:8e:eb:70:1a:49:c1:b5:b6:
                    8f:78:57:93:b4:94:20:5b:c2:5d:c0:19:13:61:2e:
                    f7:58:60:fd:a2:f5:2b:37:c7:d3:a6:db:d6:f2:4f:
                    18:b4:2b:ae:5d:15:54:0a:1f:2e:ea:95:f5:7c:55:
                    e2:e1:87:3f:e2:3f:a2:83:ac:3f:d2:7c:d8:06:ad:
                    06:fc:8e:eb:de:1a:0f:59:73:75:74:60:5f:e2:73:
                    a2:2e:e2:d6:ab:46:2a:df:fd:f2:97:52:43:92:08:
                    cf:c7:20:bb:ff:ab:eb:14:78:cf:c4:60:f8:1c:23:
                    c1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:DE:0A:07:1C:22:ED:26:5E:64:11:97:54:C0:5E:13:65:94:A8:09
            X509v3 Authority Key Identifier:
                keyid:F0:52:1A:5B:6D:B0:4D:75:6F:A2:95:2A:0F:29:A3:91:21:2C:58:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8FIaW22wTXVvopUqDymjkSEsWLI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:12:27:ed:de:e3:6c:bd:c2:95:4e:04:88:f3:75:36:22:68:
         46:34:12:8d:42:4b:54:c9:38:db:89:f9:b0:a0:de:a5:93:9f:
         5c:64:c7:22:38:70:5e:dd:6f:3f:4d:8f:ce:da:f0:b1:42:a2:
         64:1b:a2:86:bd:40:60:1b:01:59:9a:ee:23:c6:cd:7b:b0:21:
         07:6c:ce:9a:28:72:3a:5d:df:8d:f4:72:f3:d2:c1:75:0b:be:
         56:5c:a8:df:85:64:c3:ec:20:60:0d:95:25:0a:01:c8:c7:cd:
         a4:db:f1:34:a3:30:5c:f8:5e:28:cb:0b:92:f6:39:a3:1e:7a:
         e8:db:ca:a4:0e:7b:b0:c7:82:d4:45:20:fd:d3:4d:64:e1:d6:
         4c:84:dd:0d:72:56:f3:79:52:78:ef:c5:84:49:3f:5d:16:48:
         bf:53:04:98:bd:e4:2b:3d:1e:5a:d7:03:0f:4d:0d:60:90:19:
         b3:31:1b:87:62:78:16:b8:b4:04:25:e6:cf:2b:b9:95:83:46:
         22:23:84:36:38:c8:dc:d9:5d:3e:7e:c2:5a:2f:8b:0d:e6:d2:
         5f:90:67:cd:8d:6f:d0:f5:61:8c:2c:76:2f:88:ec:bc:c4:59:
         28:b8:35:09:b9:51:21:59:b4:58:56:7e:18:26:1f:78:d1:cd:
         51:44:1b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:24:45 2026 by rpki-client