Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/U8lIF-sTZfHejDwrRAIjmIHBlD0.mft
File:                     U8lIF-sTZfHejDwrRAIjmIHBlD0.mft (raw, json)
Hash identifier:          YZDyvq6xXTN4bbck8QQCmt9sg3l77YudJfqcs0w0+1E=
Subject key identifier:   60:25:C2:BF:DB:D6:55:16:E5:3F:AB:E8:CF:5B:91:DF:C8:0C:42:4F
Authority key identifier: 53:C9:48:17:EB:13:65:F1:DE:8C:3C:2B:44:02:23:98:81:C1:94:3D
Certificate issuer:       /CN=A91D3307/serialNumber=53C94817EB1365F1DE8C3C2B4402239881C1943D
Certificate serial:       059F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8lIF-sTZfHejDwrRAIjmIHBlD0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/U8lIF-sTZfHejDwrRAIjmIHBlD0.mft
Manifest number:          057E
Signing time:             Tue 18 Aug 2026 23:43:49 +0000
Manifest this update:     Tue 18 Aug 2026 23:43:48 +0000
Manifest next update:     Tue 25 Aug 2026 23:43:48 +0000
Files and hashes:         1: U8lIF-sTZfHejDwrRAIjmIHBlD0.crl (hash: jR11pfgDW2qH67sdnwudAe8/RHKU79DYp75xIUaO9Z0=)
                          2: C9C70AEA696F11EFA4DA475FC4F9AE02.roa (hash: 593+o8elVRSxa1C/n0n+gLQTiowZqiqwRC7MRYiWVSc=)
                          3: C908B72A696F11EFA4DA475FC4F9AE02.roa (hash: W6dcDrB3RcselU+HE/a3UN93ZRWn0E/P0SOzXj78T2A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/U8lIF-sTZfHejDwrRAIjmIHBlD0.crl
                          rsync://rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/U8lIF-sTZfHejDwrRAIjmIHBlD0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8lIF-sTZfHejDwrRAIjmIHBlD0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 23:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1439 (0x59f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D3307, serialNumber=53C94817EB1365F1DE8C3C2B4402239881C1943D
        Validity
            Not Before: Aug 18 23:43:48 2026 GMT
            Not After : Aug 25 23:43:48 2026 GMT
        Subject: CN=6a84ee35-aad3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e0:b1:84:d7:e3:c1:7d:14:6b:51:20:fd:52:
                    d3:2b:72:92:52:c1:7c:04:b3:e4:94:4e:16:83:d9:
                    cd:8a:b1:80:ee:9d:e9:29:29:7a:86:65:76:86:24:
                    48:25:13:c4:ba:de:15:c4:46:99:6d:b7:b5:0d:63:
                    cd:40:40:e8:d2:8e:d9:71:01:34:86:79:d7:ea:78:
                    d4:c6:f4:0a:6e:eb:10:10:8a:54:b9:2e:1c:7f:3c:
                    0a:7b:e0:be:07:9f:95:b2:80:c9:ea:8c:7f:45:1e:
                    0f:8f:84:91:0d:d4:7a:14:51:a3:19:60:6b:10:58:
                    7c:a0:c7:a6:ba:fe:13:08:7a:f8:33:c6:da:67:1b:
                    a4:ec:88:5d:07:ff:0c:56:9e:d8:ab:c0:68:e7:b7:
                    6b:01:fe:de:e3:4f:d0:08:d0:32:fb:9f:a9:4e:c1:
                    28:8c:4d:2a:bc:e6:9f:78:2f:3b:a4:a7:d0:d5:bb:
                    7d:a4:dc:3b:61:69:90:00:ac:bf:fe:28:04:7e:c6:
                    43:91:69:2c:07:b4:5c:0d:cd:4d:46:aa:8b:a4:ba:
                    c5:9c:84:3b:6e:92:29:a9:bc:c0:e3:ed:f9:c9:e1:
                    e3:5f:43:b3:e4:bd:78:17:10:0b:87:79:77:ce:0a:
                    e7:8a:e1:1c:e9:7b:37:cb:d0:8c:f8:db:22:d1:b5:
                    50:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:25:C2:BF:DB:D6:55:16:E5:3F:AB:E8:CF:5B:91:DF:C8:0C:42:4F
            X509v3 Authority Key Identifier:
                keyid:53:C9:48:17:EB:13:65:F1:DE:8C:3C:2B:44:02:23:98:81:C1:94:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/U8lIF-sTZfHejDwrRAIjmIHBlD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8lIF-sTZfHejDwrRAIjmIHBlD0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/U8lIF-sTZfHejDwrRAIjmIHBlD0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:eb:55:c0:fb:7d:bd:ac:25:d5:9e:a8:03:e0:6d:ea:0c:9f:
         13:b1:47:80:db:d3:1b:1f:04:55:39:1e:08:2d:15:f4:8a:74:
         bf:77:b2:ea:98:88:6c:ac:46:6f:17:16:12:bc:c5:47:b9:41:
         cb:e3:ba:d7:b0:5f:87:5e:ef:00:a4:26:5a:3f:6b:f9:7e:af:
         df:16:eb:44:29:6a:84:c2:2d:8c:d3:1d:ba:dd:2f:47:1d:7b:
         ba:90:b7:69:33:c8:2c:16:ce:8d:ed:bb:d7:3d:11:02:ec:cd:
         95:bb:20:4b:ce:4b:a8:f4:30:1e:20:70:49:fb:31:5d:84:b6:
         b1:53:a8:6b:1b:ed:f0:b4:79:6b:df:af:5f:81:55:75:a3:61:
         2e:05:59:1c:3b:5f:a2:4c:2c:63:dd:4d:dc:80:e4:06:19:70:
         72:1a:18:fa:aa:54:32:96:c9:56:25:6f:1b:2d:0b:2e:dd:86:
         da:7f:64:39:19:67:a2:e8:d8:46:2d:08:0c:ab:15:5c:35:9f:
         c5:3e:c3:09:a0:62:93:d2:e3:d9:2a:48:b0:3b:c1:cc:d4:4a:
         4c:fd:db:2f:fe:74:e6:2d:2b:37:e1:7b:c3:fa:dc:93:e2:f6:
         93:43:32:8a:31:91:c2:42:90:93:72:9c:68:24:11:bd:1d:a1:
         16:a9:40:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:02 2026 by rpki-client