Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft
File:                     8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft (raw, json)
Hash identifier:          W3jbESi12TtBzYjnxI7N7ooyE3FCJ7EeL4ejWLUN6AA=
Subject key identifier:   A8:04:EB:E8:3A:23:EC:6C:0E:CC:70:70:5C:E4:F0:A9:8D:05:AB:01
Authority key identifier: F1:59:AC:04:B5:B8:93:79:05:E6:9D:1B:F2:5F:4D:53:B3:54:5C:97
Certificate issuer:       /CN=A91DC8F3/serialNumber=F159AC04B5B8937905E69D1BF25F4D53B3545C97
Certificate serial:       0808
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VmsBLW4k3kF5p0b8l9NU7NUXJc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft
Manifest number:          07FD
Signing time:             Tue 14 Jul 2026 21:39:16 +0000
Manifest this update:     Tue 14 Jul 2026 21:39:15 +0000
Manifest next update:     Tue 21 Jul 2026 21:39:15 +0000
Files and hashes:         1: 8VmsBLW4k3kF5p0b8l9NU7NUXJc.crl (hash: GPcfyae+qPBvQJQs+FL3LG/tat0Hm6TLOAwcjazwo3c=)
                          2: ADE3F5B635D611EB8466D634C4F9AE02.roa (hash: SuS1yUPf+qwRjP/UZ+1uUuOJ9N61dBJV/b2hqurWcUw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.crl
                          rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VmsBLW4k3kF5p0b8l9NU7NUXJc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Jul 2026 21:19:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2056 (0x808)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC8F3, serialNumber=F159AC04B5B8937905E69D1BF25F4D53B3545C97
        Validity
            Not Before: Jul 14 21:39:15 2026 GMT
            Not After : Jul 21 21:39:15 2026 GMT
        Subject: CN=6a56ac83-bf38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:52:ba:76:6d:00:68:7f:82:37:e2:86:b5:21:
                    3b:24:91:f7:05:d5:9a:58:9d:e4:bd:91:1f:78:8f:
                    ea:8e:84:64:61:cd:18:a1:b6:37:59:1e:a1:96:f2:
                    b6:14:4e:74:c1:76:41:8f:b2:df:37:25:a1:b9:a8:
                    eb:5f:1c:3b:25:cc:1e:18:81:f1:3a:b3:5e:bf:5b:
                    ff:5a:2e:cb:94:ac:62:73:ec:76:43:32:d0:da:45:
                    bf:f0:24:8d:8e:c3:da:91:03:07:f5:c2:6b:c5:04:
                    f1:69:67:3b:d0:f7:60:18:65:34:d2:97:b8:0c:74:
                    75:24:20:6d:3f:d1:71:e6:e8:11:82:3e:5f:2e:0f:
                    de:e2:6b:44:1e:fb:16:49:df:6d:ad:9a:88:1a:bd:
                    ff:a7:07:a7:d8:6c:f7:57:37:37:0e:2c:4b:89:97:
                    f0:4d:ef:73:86:7e:75:6a:a0:0e:74:cb:c2:7f:8c:
                    d1:12:1f:49:6e:7f:d1:61:86:7d:ec:05:60:85:91:
                    2c:08:ea:89:84:8b:46:be:79:d2:8a:03:a8:a5:6a:
                    1a:57:8f:ee:8c:0c:68:f6:76:5c:29:31:17:86:39:
                    0e:b4:ed:6d:fd:90:63:07:48:96:3e:fd:92:f0:49:
                    2b:30:64:2c:1a:e4:09:ad:20:4a:37:df:98:1e:65:
                    c0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:04:EB:E8:3A:23:EC:6C:0E:CC:70:70:5C:E4:F0:A9:8D:05:AB:01
            X509v3 Authority Key Identifier:
                keyid:F1:59:AC:04:B5:B8:93:79:05:E6:9D:1B:F2:5F:4D:53:B3:54:5C:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VmsBLW4k3kF5p0b8l9NU7NUXJc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:cb:6f:08:81:8a:e2:4d:1d:51:80:c3:f0:7a:74:ba:0a:95:
         87:ff:bf:b8:d9:f5:48:49:61:4c:c6:99:d3:e2:1e:53:01:17:
         c1:5a:4b:e1:98:2b:99:20:26:8a:cb:12:e2:2d:22:1e:97:0d:
         bd:90:43:3c:57:32:1b:7f:ef:c0:1b:fb:61:11:ce:05:f1:47:
         dc:11:2d:92:62:a2:b5:cb:7f:9d:c7:a4:16:47:34:d1:1a:84:
         f3:ce:89:2a:4e:28:ce:03:58:42:1a:e5:07:e9:05:22:09:c2:
         83:f6:ce:f5:db:b2:d6:d2:6b:74:cc:d7:23:62:50:ba:ea:a8:
         48:d5:d1:27:90:e8:6a:67:b7:f9:3a:d0:9c:d3:17:12:9a:66:
         3c:5e:49:29:58:14:58:52:83:51:b3:e8:06:30:d6:a9:99:55:
         52:0c:f5:57:84:af:09:42:08:28:7d:85:d9:2e:d6:ea:6a:36:
         a8:94:ef:f1:92:7e:12:ba:9e:26:1d:41:bc:ae:da:e0:23:21:
         fe:30:8f:6c:02:c3:98:1d:d2:d6:a3:d4:80:67:7f:bb:b4:9f:
         3c:04:63:21:99:be:c2:59:61:12:0d:54:f4:bb:a8:19:0a:50:
         c0:4c:4b:8e:5c:ab:09:66:d1:a0:fd:bc:7a:d4:2d:44:c0:92:
         2e:de:a8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 00:10:31 2026 by rpki-client