Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.mft
File:                     q8dSj86PeUX0YPdSdIJB2tVnilo.mft (raw, json)
Hash identifier:          8rBgSiPP6mT9tNYmIGCx+1gj7tCAmUcVTo87hqk2atg=
Subject key identifier:   D3:F2:4D:9B:B7:F8:4B:8F:1E:01:9F:F5:18:5D:D8:E7:F0:1A:9D:7F
Authority key identifier: AB:C7:52:8F:CE:8F:79:45:F4:60:F7:52:74:82:41:DA:D5:67:8A:5A
Certificate issuer:       /CN=A91F367D/serialNumber=ABC7528FCE8F7945F460F752748241DAD5678A5A
Certificate serial:       0893
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q8dSj86PeUX0YPdSdIJB2tVnilo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.mft
Manifest number:          088B
Signing time:             Tue 18 Aug 2026 21:01:20 +0000
Manifest this update:     Tue 18 Aug 2026 21:01:19 +0000
Manifest next update:     Tue 25 Aug 2026 21:01:19 +0000
Files and hashes:         1: q8dSj86PeUX0YPdSdIJB2tVnilo.crl (hash: w8HBorNTMSf7iFYHSQPZYh7rGuEq0LoCpJuZ8lMdRB0=)
                          2: AC1CD860039511EBBE8C7F47C4F9AE02.roa (hash: qS1ZoDt2aNwKGyjoFIpFYDmjrousmLlYXDWuZSQ3NCA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.crl
                          rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q8dSj86PeUX0YPdSdIJB2tVnilo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 21:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2195 (0x893)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F367D, serialNumber=ABC7528FCE8F7945F460F752748241DAD5678A5A
        Validity
            Not Before: Aug 18 21:01:19 2026 GMT
            Not After : Aug 25 21:01:19 2026 GMT
        Subject: CN=6a84c81f-28c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:98:8f:78:44:25:a3:72:69:f5:4c:0a:76:6b:
                    d9:c6:6e:21:51:22:24:f0:98:72:f5:60:0e:c2:d0:
                    f0:30:89:a9:40:18:28:c6:4e:eb:89:2b:14:a1:1e:
                    90:44:dd:18:17:9f:4d:4d:d3:89:c5:25:0a:cb:47:
                    05:c1:ba:68:20:6e:e2:56:8e:21:e4:35:7c:32:31:
                    e2:9f:20:bd:7a:a7:69:93:19:c6:e1:0d:4b:e0:48:
                    56:f4:af:96:6f:6d:0b:9e:e6:51:47:2e:d5:33:1e:
                    9e:60:9a:66:fc:4f:fa:d1:cc:08:ec:10:c7:00:31:
                    81:c8:21:7e:1f:5a:ee:d1:4b:37:cb:6a:e7:12:28:
                    6f:1d:cc:5f:86:5d:4c:d5:c0:f0:8b:80:64:75:80:
                    73:81:18:d2:d0:58:4b:5b:f5:2d:97:70:6c:ef:bf:
                    72:62:6e:31:22:07:97:54:fd:82:db:fe:4f:84:14:
                    c7:53:73:25:53:ad:d0:76:12:90:5d:46:bf:08:78:
                    47:be:55:20:a4:cb:03:9d:63:25:e5:ad:da:e6:f9:
                    97:81:18:eb:eb:31:06:3b:0f:c7:ae:02:18:89:b8:
                    8c:b6:55:cf:7b:f7:4a:a5:7c:32:7b:7c:a9:cd:ab:
                    2c:29:34:68:21:fb:90:ab:75:78:57:a2:fe:a3:5c:
                    ed:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:F2:4D:9B:B7:F8:4B:8F:1E:01:9F:F5:18:5D:D8:E7:F0:1A:9D:7F
            X509v3 Authority Key Identifier:
                keyid:AB:C7:52:8F:CE:8F:79:45:F4:60:F7:52:74:82:41:DA:D5:67:8A:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q8dSj86PeUX0YPdSdIJB2tVnilo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:4f:f1:34:3f:90:9d:e4:1c:c4:ce:42:c4:44:4f:be:c4:49:
         19:bc:09:22:41:38:41:ed:cb:14:99:5b:bd:81:d3:fb:28:5f:
         0b:b1:00:e9:89:c5:9b:18:d6:b0:c2:0c:1b:af:52:83:9b:90:
         57:fb:6f:b8:91:48:ca:98:c7:f1:b7:a1:7f:38:a6:31:ea:a2:
         2a:77:12:e1:d3:7e:5d:66:3f:f7:db:d8:8b:74:fa:9c:33:1a:
         f8:0f:2c:d9:76:54:06:75:ee:4b:18:6b:11:16:a0:46:b8:d2:
         a2:db:78:3b:91:40:54:13:d4:f1:05:a8:4e:50:52:af:77:43:
         02:8c:57:a9:ba:8e:23:5b:7f:28:ef:3a:19:9d:2c:c3:54:ca:
         e3:b2:f7:cb:c8:e3:e2:85:7c:93:79:05:66:5e:7d:f2:ba:ab:
         da:68:0f:35:0b:77:19:27:70:b7:4a:10:9f:3d:46:5b:ab:b9:
         91:d1:18:f2:e7:3a:ff:59:e6:9b:0a:0b:53:99:8c:a5:44:44:
         85:ab:92:e0:86:49:d4:7d:38:10:98:2f:2e:02:a3:ce:3a:9f:
         13:d2:af:dd:12:d9:a6:6c:bc:b6:92:52:e4:ce:f4:ec:c6:f8:
         44:ff:1d:c1:16:41:f9:9e:80:af:b3:9f:98:7b:0f:63:f5:d7:
         58:80:de:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:00 2026 by rpki-client