Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.mft
File:                     u8x2Cv4-nwqbiMjsekntfN0Dlvc.mft (raw, json)
Hash identifier:          COyTWmf8AwGZGo8TGzQEFPpMzyX4svXzPPpwyBeawlk=
Subject key identifier:   03:A5:1A:2E:9D:A3:D5:B8:67:05:08:2E:60:3D:67:1A:4E:B0:70:AA
Authority key identifier: BB:CC:76:0A:FE:3E:9F:0A:9B:88:C8:EC:7A:49:ED:7C:DD:03:96:F7
Certificate issuer:       /CN=A919E3E3/serialNumber=BBCC760AFE3E9F0A9B88C8EC7A49ED7CDD0396F7
Certificate serial:       079A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u8x2Cv4-nwqbiMjsekntfN0Dlvc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.mft
Manifest number:          0791
Signing time:             Sun 04 Oct 2026 21:35:06 +0000
Manifest this update:     Sun 04 Oct 2026 21:35:06 +0000
Manifest next update:     Sun 11 Oct 2026 21:35:06 +0000
Files and hashes:         1: u8x2Cv4-nwqbiMjsekntfN0Dlvc.crl (hash: 6aisJlhLxpjp26UECrR63gdft9Xg4nTYSqK9YeGAIlQ=)
                          2: 58B04DD46F3C11EB924C4E2AC4F9AE02.roa (hash: 1ykJMGL6at4RQBXZd1ybx9+1UkR4f2L3m4pa6rsank8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.crl
                          rsync://rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u8x2Cv4-nwqbiMjsekntfN0Dlvc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 21:35:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1946 (0x79a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E3E3, serialNumber=BBCC760AFE3E9F0A9B88C8EC7A49ED7CDD0396F7
        Validity
            Not Before: Oct  4 21:35:06 2026 GMT
            Not After : Oct 11 21:35:06 2026 GMT
        Subject: CN=6ac2c68a-fc66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:37:48:5b:c8:ff:f5:9b:63:06:5b:61:d3:98:
                    ef:57:bc:98:67:27:54:78:d9:ad:d2:f0:cc:6b:f2:
                    74:be:6c:1a:e9:f0:93:d2:14:13:23:f7:06:d0:6c:
                    7f:fa:c3:41:17:ba:29:7f:35:ce:c9:64:00:bc:a5:
                    63:c9:c4:bc:b8:52:a4:e0:56:e1:13:5e:d4:71:62:
                    61:3e:b6:22:d3:77:60:87:bc:f8:06:36:15:07:79:
                    7d:ff:71:83:b7:f1:28:02:d8:94:73:5a:35:ad:f4:
                    83:42:bf:66:13:d9:3b:34:0d:d2:6b:15:24:89:c8:
                    e3:a2:27:d1:78:45:37:ac:b6:92:42:b9:c7:f0:b9:
                    5d:fd:bf:c2:dd:ba:bd:5f:6c:c3:42:0c:7d:df:c6:
                    10:fb:3f:7c:eb:59:01:16:c0:99:68:ef:1e:78:d8:
                    37:dc:71:56:17:3d:9d:77:7b:c6:2b:70:db:37:aa:
                    38:93:15:2e:2e:6d:bd:8c:10:c8:38:9c:3a:cb:1d:
                    58:c0:13:01:ec:d5:93:5a:86:99:72:ea:67:23:4a:
                    ff:f1:bb:45:b4:4f:44:89:61:1f:a8:1d:7b:54:6d:
                    f3:39:7c:00:29:04:30:a8:ec:3d:39:81:87:bc:91:
                    19:d7:00:25:a7:72:60:da:51:a3:ec:e2:61:13:61:
                    c6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A5:1A:2E:9D:A3:D5:B8:67:05:08:2E:60:3D:67:1A:4E:B0:70:AA
            X509v3 Authority Key Identifier:
                keyid:BB:CC:76:0A:FE:3E:9F:0A:9B:88:C8:EC:7A:49:ED:7C:DD:03:96:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u8x2Cv4-nwqbiMjsekntfN0Dlvc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:0c:05:1f:0a:13:c4:f0:ab:be:8b:ca:e3:66:09:04:91:f1:
         66:a1:6f:70:cf:1a:3f:f8:1a:6c:fe:18:1d:25:d4:3e:7c:4e:
         50:78:28:3b:d9:b7:2c:6b:a0:6a:e7:ba:ea:77:16:e4:62:ff:
         a4:61:40:57:c3:d9:d1:52:a7:34:64:54:38:77:9f:1c:02:9a:
         49:eb:26:be:c3:84:11:27:3e:02:31:74:b6:94:0f:d1:ae:4e:
         6a:93:57:9f:fe:62:84:71:6a:8a:20:6b:2b:a3:91:01:b4:4b:
         b3:b2:2f:c7:6b:3d:c4:c1:33:37:e3:70:a8:22:97:f1:52:74:
         94:bf:64:f6:21:2d:23:ea:07:e9:7d:af:94:4b:61:f5:b2:b6:
         29:fe:c3:82:ab:ec:47:f2:18:60:6f:d0:22:27:12:1a:47:c3:
         a5:11:e0:fd:a8:46:01:7d:50:77:31:fe:21:81:78:ae:40:9d:
         92:c9:bd:8b:3c:eb:e2:ef:4c:35:c8:fc:e9:7a:cb:cd:e1:f8:
         de:b7:5e:b4:ee:7f:44:fc:a0:c1:2a:84:d6:81:af:5e:a8:11:
         79:3d:6f:a1:6d:60:8b:e8:12:41:dc:0d:dc:b9:59:59:37:80:
         67:ff:46:2d:59:4b:5a:db:14:20:0c:25:d0:4a:a3:52:b4:49:
         c4:bf:43:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:39:52 2026 by rpki-client