Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft
File:                     7sDpmYfcHqnUAviE_NqX4DFFpKA.mft (raw, json)
Hash identifier:          kzPafhzZ12SsBLSjpeGpLzZsItALpIoPooZTNEelee8=
Subject key identifier:   7D:C1:3C:13:E1:24:B6:EE:80:FF:B6:C2:5E:CC:64:FA:E2:44:82:13
Authority key identifier: EE:C0:E9:99:87:DC:1E:A9:D4:02:F8:84:FC:DA:97:E0:31:45:A4:A0
Certificate issuer:       /CN=A91AE1B5/serialNumber=EEC0E99987DC1EA9D402F884FCDA97E03145A4A0
Certificate serial:       01C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7sDpmYfcHqnUAviE_NqX4DFFpKA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft
Manifest number:          01B8
Signing time:             Wed 19 Aug 2026 04:36:23 +0000
Manifest this update:     Wed 19 Aug 2026 04:36:23 +0000
Manifest next update:     Wed 26 Aug 2026 04:36:23 +0000
Files and hashes:         1: 7sDpmYfcHqnUAviE_NqX4DFFpKA.crl (hash: HgAgv+C7SlWceNQ85tQBVbdJhIsAHWmB/y0ztcy5cQ0=)
                          2: D2A2FF4A003B11EFA6658D0DC4F9AE02.roa (hash: ShuWejN2dIhVPSYGiU/45kIcp67jd+NNHpFV+hRD9UQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.crl
                          rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7sDpmYfcHqnUAviE_NqX4DFFpKA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 04:36:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 451 (0x1c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE1B5, serialNumber=EEC0E99987DC1EA9D402F884FCDA97E03145A4A0
        Validity
            Not Before: Aug 19 04:36:23 2026 GMT
            Not After : Aug 26 04:36:23 2026 GMT
        Subject: CN=6a8532c7-3570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:83:95:ab:bd:cc:a8:ee:0e:4a:f4:43:fb:96:
                    44:d5:56:13:b7:df:c7:81:6f:3f:aa:89:eb:9d:48:
                    72:af:33:e6:02:52:d0:b3:06:be:88:2d:cc:2e:a7:
                    62:67:04:e7:ab:14:a0:50:e8:82:f5:d7:da:7f:76:
                    c9:3e:56:88:15:56:0e:51:7e:f5:02:a9:f6:a0:ab:
                    9d:aa:eb:15:eb:12:2c:a0:04:18:b7:51:b3:02:d3:
                    6a:f5:16:00:df:dd:8b:2c:4b:33:3d:09:85:39:98:
                    f1:22:f1:2f:05:ac:f0:d8:8b:91:e3:f4:aa:35:b6:
                    c3:21:f6:7d:db:17:59:19:f6:16:da:d4:29:5c:7e:
                    29:87:e3:2c:f0:11:3b:3d:57:58:80:41:5c:86:c3:
                    9d:07:05:00:4a:2f:c1:69:b8:5c:ed:ea:0e:cb:35:
                    0e:cd:46:1a:16:91:38:8b:f5:50:cc:1f:42:81:47:
                    5a:4e:80:29:e7:1b:f1:ad:ed:c3:1c:89:6e:f4:fb:
                    45:aa:f5:be:89:7a:d3:c9:cc:eb:5b:29:1d:10:9e:
                    f6:36:28:92:f3:c1:b5:fc:0a:db:f3:6a:64:a2:db:
                    ae:b5:c9:15:c8:af:6a:13:9e:53:3c:a3:63:91:cd:
                    85:52:4d:9e:e5:0c:db:68:5e:de:8c:8f:16:2e:d2:
                    ce:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:C1:3C:13:E1:24:B6:EE:80:FF:B6:C2:5E:CC:64:FA:E2:44:82:13
            X509v3 Authority Key Identifier:
                keyid:EE:C0:E9:99:87:DC:1E:A9:D4:02:F8:84:FC:DA:97:E0:31:45:A4:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7sDpmYfcHqnUAviE_NqX4DFFpKA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:20:0d:b7:5e:62:f2:65:88:18:1b:9c:ba:51:95:10:e1:81:
         46:1d:f7:dd:f4:c3:40:be:41:7d:48:13:ee:b6:33:d2:31:4a:
         79:50:f1:c2:16:13:f2:d1:17:b4:30:6c:1f:a5:aa:3a:47:d4:
         b2:18:99:2e:71:eb:23:97:e1:4b:8e:60:ac:ef:7b:a7:02:06:
         dc:02:82:5e:c0:e6:58:92:a9:79:57:93:bb:2e:d9:41:f4:4e:
         bd:d1:d9:e8:bf:82:83:29:2c:f7:05:ee:58:92:3f:08:f2:ae:
         cb:00:21:ad:3c:e5:f2:17:3d:3d:82:ab:ec:e6:27:a0:bd:cb:
         6b:de:cb:66:80:6d:28:23:98:41:09:05:21:b1:63:8d:93:5e:
         ee:1c:83:92:94:d9:eb:82:a1:4f:07:78:07:61:ba:94:77:7e:
         cc:0e:7e:2c:03:44:cf:a2:d1:d9:ba:37:07:e1:89:d0:db:51:
         41:36:a0:8f:1d:10:3e:d2:11:0d:13:c5:12:f8:7d:16:82:67:
         fd:2d:1e:ba:0b:41:6a:12:46:14:d4:5a:b3:46:dc:30:8d:ca:
         2d:f4:94:a1:c5:f6:89:6c:d4:b4:12:0a:91:a9:c7:dc:99:5f:
         49:54:e2:5b:13:f2:a4:5a:b5:4e:45:b1:ea:26:e5:83:1e:8e:
         ba:00:8b:fc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUUxQjUxMTAvBgNVBAUTKEVFQzBFOTk5ODdEQzFFQTlENDAyRjg4NEZDREE5N0Uw
MzE0NUE0QTAwHhcNMjYwODE5MDQzNjIzWhcNMjYwODI2MDQzNjIzWjAYMRYwFAYD
VQQDEw02YTg1MzJjNy0zNTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAiYOVq73MqO4OSvRD+5ZE1VYTt9/HgW8/qonrnUhyrzPmAlLQswa+iC3MLqdi
ZwTnqxSgUOiC9dfaf3bJPlaIFVYOUX71Aqn2oKudqusV6xIsoAQYt1GzAtNq9RYA
392LLEszPQmFOZjxIvEvBazw2IuR4/SqNbbDIfZ92xdZGfYW2tQpXH4ph+Ms8BE7
PVdYgEFchsOdBwUASi/Babhc7eoOyzUOzUYaFpE4i/VQzB9CgUdaToAp5xvxre3D
HIlu9PtFqvW+iXrTyczrWykdEJ72NiiS88G1/Arb82pkotuutckVyK9qE55TPKNj
kc2FUk2e5QzbaF7ejI8WLtLOnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH3BPBPh
JLbugP+2wl7MZPriRIITMB8GA1UdIwQYMBaAFO7A6ZmH3B6p1AL4hPzal+AxRaSg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTFCNS84QjQwNUU1RTAw
M0IxMUVGOTExQjhGNjhDNEY5QUUwMi83c0RwbVlmY0hxblVBdmlFX05xWDRERkZw
S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdzRHBtWWZjSHFuVUF2aUVfTnFYNERGRnBLQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RTFCNS84QjQwNUU1RTAwM0IxMUVGOTExQjhGNjhDNEY5QUUwMi83c0RwbVlmY0hx
blVBdmlFX05xWDRERkZwS0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnCANt15i8mWIGBuculGVEOGBRh333fTDQL5BfUgT7rYz0jFKeVDxwhYT8tEX
tDBsH6WqOkfUshiZLnHrI5fhS45grO97pwIG3AKCXsDmWJKpeVeTuy7ZQfROvdHZ
6L+Cgyks9wXuWJI/CPKuywAhrTzl8hc9PYKr7OYnoL3La97LZoBtKCOYQQkFIbFj
jZNe7hyDkpTZ64KhTwd4B2G6lHd+zA5+LANEz6LR2bo3B+GJ0NtRQTagjx0QPtIR
DRPFEvh9FoJn/S0eugtBahJGFNRas0bcMI3KLfSUocX2iWzUtBIKkanH3JlfSVTi
WxPypFq1TkWx6iblgx6OugCL/A==
-----END CERTIFICATE-----
Generated at Wed Aug 19 13:42:08 2026 by rpki-client