Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft
File:                     8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft (raw, json)
Hash identifier:          d6ZBEQ2A71iRJ5Z0AaXyeZajkn6jsolPzxZdDUUFzrk=
Subject key identifier:   00:1B:4A:31:F7:29:49:FC:CD:BB:0A:72:E8:E9:D8:C4:E6:13:F4:CD
Authority key identifier: F0:FD:9E:5A:6D:C9:45:9A:88:E0:11:3F:24:F5:61:A6:FD:D7:40:5F
Certificate issuer:       /CN=A91FDC84/serialNumber=F0FD9E5A6DC9459A88E0113F24F561A6FDD7405F
Certificate serial:       85
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8P2eWm3JRZqI4BE_JPVhpv3XQF8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft
Manifest number:          80
Signing time:             Fri 17 Jul 2026 08:55:15 +0000
Manifest this update:     Fri 17 Jul 2026 08:55:15 +0000
Manifest next update:     Fri 24 Jul 2026 08:55:15 +0000
Files and hashes:         1: 8P2eWm3JRZqI4BE_JPVhpv3XQF8.crl (hash: JI4YDWg96PGlfJ1BrrlQpEqkwUZq0L4iqOTPNrLx9Fc=)
                          2: 635E7900C51211F093EC3E85C4F9AE02.roa (hash: mjo3hh7WWuFxyFUKnVZbsH/uC4E6yqFulVk1pK4NVdw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.crl
                          rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8P2eWm3JRZqI4BE_JPVhpv3XQF8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 08:55:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133 (0x85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDC84, serialNumber=F0FD9E5A6DC9459A88E0113F24F561A6FDD7405F
        Validity
            Not Before: Jul 17 08:55:15 2026 GMT
            Not After : Jul 24 08:55:15 2026 GMT
        Subject: CN=6a59edf3-dd3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:fd:31:e8:51:91:2a:6d:c1:15:05:96:af:47:
                    1c:0a:52:5d:06:69:a4:f5:54:ca:c9:8b:23:12:e4:
                    2d:cb:37:64:e2:32:9a:d0:d5:dc:10:2d:00:e3:e2:
                    f4:97:d7:1f:d4:af:0f:23:f7:f1:a8:d4:11:c0:13:
                    aa:fa:0c:2e:14:35:74:32:35:e2:5d:ca:00:25:38:
                    db:92:a7:b9:8e:05:39:9d:ab:f8:af:80:85:49:2f:
                    1e:59:06:13:72:c4:ce:91:b5:55:8b:75:10:e2:3c:
                    28:06:28:2b:88:fe:a4:50:a2:9e:6a:1c:6b:36:47:
                    fb:cc:f1:80:78:18:78:e8:a6:dc:93:22:00:c1:98:
                    c2:be:97:0f:fa:dd:38:39:9b:c8:44:ea:18:68:df:
                    5d:9f:57:e1:7c:3c:64:7a:f9:cf:36:f9:ca:e0:50:
                    f1:9a:13:8a:cf:74:db:76:89:61:2a:42:00:3e:2d:
                    a9:35:70:0d:04:38:a1:a9:be:0f:fe:9d:7b:8f:55:
                    34:42:30:32:ca:56:04:10:95:ec:4a:38:85:d1:ec:
                    f8:47:2f:83:f0:cb:13:d6:b9:50:b4:68:b9:49:2d:
                    83:69:bc:bf:3f:6c:73:d5:06:00:ac:28:d9:ce:64:
                    26:2e:42:a3:1f:25:c3:0d:bd:7c:72:67:9b:2a:e5:
                    a0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:1B:4A:31:F7:29:49:FC:CD:BB:0A:72:E8:E9:D8:C4:E6:13:F4:CD
            X509v3 Authority Key Identifier:
                keyid:F0:FD:9E:5A:6D:C9:45:9A:88:E0:11:3F:24:F5:61:A6:FD:D7:40:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8P2eWm3JRZqI4BE_JPVhpv3XQF8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:6d:4d:f4:a9:ae:45:2f:a3:4a:df:49:f4:6f:7b:9b:57:71:
         d6:f0:33:c0:e3:cc:31:34:b2:f1:ee:2c:2a:75:9b:31:cd:3c:
         94:2e:b0:07:01:83:06:1c:9f:5d:f4:38:c8:0c:35:fc:5e:5a:
         fe:61:a8:28:e4:9d:65:d6:3e:df:20:b9:a6:26:f5:ef:bb:30:
         66:7a:6f:f0:d3:ac:e2:6e:70:d9:df:61:9d:37:12:2e:eb:22:
         48:a0:ce:e5:93:5a:3c:f6:15:2c:32:a2:58:5d:f9:29:ad:86:
         24:b0:22:77:b3:e2:e9:80:ad:9a:ca:ba:80:ca:32:e5:25:15:
         ca:a3:39:28:6a:bb:fd:1a:9c:ee:f5:6c:e9:b9:23:dd:fc:0d:
         54:b9:74:a4:3f:2d:df:f5:48:04:6a:74:ef:c7:42:4e:c9:cd:
         a1:e4:17:04:6d:a2:82:78:b0:18:96:b6:01:be:a7:e8:a9:42:
         8c:d6:02:99:b3:3a:30:05:44:a1:c0:54:26:38:a7:e5:31:d6:
         51:0d:0a:d7:05:d1:8c:31:10:73:9e:c2:73:c0:a1:df:ec:dd:
         e8:83:59:26:55:09:f4:ae:62:33:24:10:96:5e:4b:82:f4:04:
         6d:6c:52:64:16:c1:57:72:ba:f2:c9:1a:cb:40:33:ea:cc:2f:
         d2:cf:95:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:27:09 2026 by rpki-client