Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft
File:                     3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft (raw, json)
Hash identifier:          Pqg1Umli9aucG3aDlYPxyUISMuZswZ43ArB9lonHpyM=
Subject key identifier:   C5:B1:13:73:D2:6D:34:ED:E6:B5:C9:5A:A1:47:E0:22:77:40:25:60
Authority key identifier: DF:0F:1C:E8:F6:8C:07:11:43:67:0E:25:1E:BB:76:3B:DB:49:BF:D6
Certificate issuer:       /CN=A91F716F/serialNumber=DF0F1CE8F68C071143670E251EBB763BDB49BFD6
Certificate serial:       025A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft
Manifest number:          0250
Signing time:             Wed 19 Aug 2026 02:56:53 +0000
Manifest this update:     Wed 19 Aug 2026 02:56:53 +0000
Manifest next update:     Wed 26 Aug 2026 02:56:53 +0000
Files and hashes:         1: 3w8c6PaMBxFDZw4lHrt2O9tJv9Y.crl (hash: j9rqG9oXORSTV9RQZCRt/pmbsg5emwhAPAtTyKFOd0c=)
                          2: 6F882FB01D5211EE94C36C2FC4F9AE02.roa (hash: NXDoT4OlUYq2pn7T1c4gGP0I8F4wFZ9IHq9xnpLAKD8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.crl
                          rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 02:56:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 602 (0x25a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F716F, serialNumber=DF0F1CE8F68C071143670E251EBB763BDB49BFD6
        Validity
            Not Before: Aug 19 02:56:53 2026 GMT
            Not After : Aug 26 02:56:53 2026 GMT
        Subject: CN=6a851b75-9f64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:71:86:85:10:b3:dd:ee:cd:f8:07:3b:8d:78:
                    cb:fd:ba:7d:82:bb:ab:2b:a0:07:69:68:45:c2:29:
                    5c:fa:56:b6:59:1d:88:fb:4b:18:8e:dc:54:c0:f7:
                    24:ac:e3:4f:25:4f:f6:bb:43:cb:a3:c6:5b:71:c8:
                    b4:cb:47:1a:fc:a1:f2:67:56:a7:03:1e:a1:20:6a:
                    a4:03:bf:d3:2d:61:9b:cc:f8:46:63:e5:98:0c:b0:
                    f0:dd:82:6c:2b:92:59:10:b1:7e:6a:a4:de:b0:c8:
                    f9:8e:af:82:04:a4:63:1a:62:48:d6:43:8a:39:80:
                    fb:4f:74:f0:92:0a:7d:f5:97:7c:f3:4b:9b:54:f2:
                    9b:4e:2e:69:93:16:91:ac:99:06:06:93:2b:69:c0:
                    b8:50:80:bf:3f:50:dd:96:af:58:6b:c0:ba:c2:80:
                    45:0f:aa:ce:fa:98:04:89:29:c9:2a:2c:95:fe:78:
                    b4:60:27:05:93:64:f4:d0:d0:be:93:fb:02:43:5f:
                    3c:64:45:07:a0:2d:f3:59:35:bb:4e:8d:60:5f:4c:
                    5c:70:fb:98:f7:8d:73:b9:91:d1:8c:e7:12:98:fc:
                    b2:cc:32:d4:b6:60:86:06:67:46:4c:43:b3:c2:91:
                    b9:14:03:b2:5e:30:ee:60:a8:0e:f6:fc:06:78:b9:
                    e5:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:B1:13:73:D2:6D:34:ED:E6:B5:C9:5A:A1:47:E0:22:77:40:25:60
            X509v3 Authority Key Identifier:
                keyid:DF:0F:1C:E8:F6:8C:07:11:43:67:0E:25:1E:BB:76:3B:DB:49:BF:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:7b:09:e6:ef:58:dc:0e:41:a4:ac:b2:56:15:7e:35:f8:85:
         ff:bd:3a:0b:31:48:55:d1:ba:f5:ef:f8:94:e3:af:b7:06:f1:
         76:33:87:82:13:77:40:df:99:10:e4:58:cd:76:2a:a5:e1:50:
         18:e0:3a:15:72:25:18:22:25:39:ed:a9:71:f4:14:b7:57:3f:
         e3:36:7a:1f:c4:01:f5:08:de:8d:53:53:5d:0e:a0:f9:76:86:
         f8:96:4e:d8:a4:73:02:62:56:91:22:90:c0:96:f8:0e:5f:e0:
         b0:d5:09:8b:6f:b3:47:ff:6d:66:ba:a4:3e:5a:5b:68:58:a1:
         dc:cf:bc:6f:61:33:21:e5:71:a1:b8:b3:b2:b8:db:d1:93:aa:
         55:45:96:c6:1c:4f:72:9d:96:26:28:49:28:ca:a6:51:76:06:
         e0:65:bd:1c:56:8f:08:fd:af:86:04:5e:35:90:86:de:74:49:
         f7:21:36:2a:19:77:f3:fc:8f:46:ac:3c:28:78:82:a7:1c:56:
         20:04:57:f7:fd:25:15:e0:21:79:eb:84:e6:7d:dd:97:75:a1:
         f2:d4:ca:30:9b:47:dc:80:28:cd:35:29:78:6c:ec:e2:e0:ba:
         95:03:74:fb:83:ee:9d:5f:d4:b6:19:84:00:c5:18:d2:2c:70:
         7b:a4:37:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:51:04 2026 by rpki-client