Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91243F8/BA6481F616D111ED88248428C4F9AE02/8pKKSxDdhHSm3QrGXNE5TwIVXN4.mft
File:                     8pKKSxDdhHSm3QrGXNE5TwIVXN4.mft (raw, json)
Hash identifier:          801bRVgyxxz6qQchZHhdChTw88XxSYXyZ5xhoRiSofs=
Subject key identifier:   8F:31:D9:48:FB:11:AA:CE:BC:AA:CB:A5:C9:D6:5F:34:1B:EC:23:34
Authority key identifier: F2:92:8A:4B:10:DD:84:74:A6:DD:0A:C6:5C:D1:39:4F:02:15:5C:DE
Certificate issuer:       /CN=A91243F8/serialNumber=F2928A4B10DD8474A6DD0AC65CD1394F02155CDE
Certificate serial:       02F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8pKKSxDdhHSm3QrGXNE5TwIVXN4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91243F8/BA6481F616D111ED88248428C4F9AE02/8pKKSxDdhHSm3QrGXNE5TwIVXN4.mft
Manifest number:          02F5
Signing time:             Wed 25 Mar 2026 00:55:03 +0000
Manifest this update:     Wed 25 Mar 2026 00:55:02 +0000
Manifest next update:     Wed 01 Apr 2026 00:55:02 +0000
Files and hashes:         1: 8pKKSxDdhHSm3QrGXNE5TwIVXN4.crl (hash: /ZM8/IYK9C/681WhpGS9dQeG0MXaQ9/v1GrzX6hI9MI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91243F8/BA6481F616D111ED88248428C4F9AE02/8pKKSxDdhHSm3QrGXNE5TwIVXN4.crl
                          rsync://rpki.apnic.net/member_repository/A91243F8/BA6481F616D111ED88248428C4F9AE02/8pKKSxDdhHSm3QrGXNE5TwIVXN4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8pKKSxDdhHSm3QrGXNE5TwIVXN4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:55:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 757 (0x2f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91243F8, serialNumber=F2928A4B10DD8474A6DD0AC65CD1394F02155CDE
        Validity
            Not Before: Mar 25 00:55:02 2026 GMT
            Not After : Apr  1 00:55:02 2026 GMT
        Subject: CN=69c33267-8966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6c:cc:54:40:46:1d:aa:70:b4:10:10:0c:b0:
                    d8:e3:46:a3:43:cd:52:40:7c:77:81:30:fe:45:2b:
                    4a:5d:04:7f:9f:45:2c:de:66:5c:2d:9e:21:c5:de:
                    6c:6f:c9:0f:53:be:7e:20:48:54:f2:9e:74:b4:56:
                    3c:00:06:ae:1f:bf:17:e3:4c:74:a8:88:8c:22:f9:
                    0d:ee:60:bb:04:a2:4e:f5:db:0d:cc:5c:a9:37:5b:
                    9e:f3:bb:15:a4:f3:85:95:5b:e4:b1:91:08:05:8f:
                    48:ca:f6:1c:a4:b3:5f:24:41:97:15:ef:38:b5:82:
                    5f:a7:f4:dd:89:ac:3b:72:db:c3:04:0a:aa:65:27:
                    e7:7e:e6:2b:2b:e5:5d:61:12:69:f8:b3:69:f7:86:
                    96:22:9d:2f:02:aa:5c:34:31:e6:a1:7e:1d:f2:33:
                    81:fc:5a:9d:65:93:b0:44:e7:a4:ad:19:14:08:17:
                    37:eb:5a:21:c2:c5:5c:27:e7:cf:c3:3a:0d:0e:e4:
                    63:70:58:a0:90:60:05:ce:4e:f8:60:d2:da:c3:42:
                    28:27:df:97:79:b5:fb:30:5f:c0:a0:de:10:88:c6:
                    91:00:5f:39:27:70:16:11:1d:a7:7f:e7:c5:2e:b5:
                    32:eb:72:6b:37:e5:42:2e:f7:18:b5:e9:9f:cc:52:
                    fe:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:31:D9:48:FB:11:AA:CE:BC:AA:CB:A5:C9:D6:5F:34:1B:EC:23:34
            X509v3 Authority Key Identifier:
                keyid:F2:92:8A:4B:10:DD:84:74:A6:DD:0A:C6:5C:D1:39:4F:02:15:5C:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91243F8/BA6481F616D111ED88248428C4F9AE02/8pKKSxDdhHSm3QrGXNE5TwIVXN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8pKKSxDdhHSm3QrGXNE5TwIVXN4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91243F8/BA6481F616D111ED88248428C4F9AE02/8pKKSxDdhHSm3QrGXNE5TwIVXN4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:7c:1f:c8:01:90:98:49:60:e5:b5:db:78:f1:6f:c0:fe:d8:
         8a:05:bf:7d:4b:a4:9b:2b:46:dc:c1:10:12:b7:b8:e3:fe:3a:
         c1:44:a8:2c:5d:24:26:00:44:ec:77:c7:2c:0b:57:6a:e6:7c:
         3d:32:1b:5c:35:98:95:f3:1a:4a:ab:e5:58:3f:2e:25:e5:ad:
         34:c4:42:4e:78:e1:9e:e4:3c:c9:02:01:cf:a3:a0:9c:43:da:
         52:68:0e:51:54:72:68:67:bf:74:ad:85:af:0b:8f:fd:18:09:
         53:d0:4b:91:47:cd:9b:cd:19:aa:d2:dd:15:12:95:c1:90:a9:
         05:18:ee:dc:48:20:92:3e:8a:bb:c8:17:81:8f:7e:48:9f:44:
         c9:2f:8f:b7:d3:60:a9:08:01:61:67:01:68:3b:f5:53:1e:86:
         3d:25:51:6f:ed:40:40:2c:42:b5:5c:85:4e:10:b2:09:c4:e0:
         ab:3f:26:2d:ba:22:17:e0:1e:c0:3a:82:87:e0:ef:8b:f2:6c:
         ee:9a:c3:fa:7e:97:04:41:e4:ce:c6:a9:0a:6e:4e:10:8c:4e:
         ba:9f:ea:e4:c9:ff:fd:39:ce:b6:9d:74:ce:a0:88:90:90:47:
         84:77:cd:17:a8:76:41:22:e9:44:e7:49:cf:df:a8:e2:b3:cf:
         ad:db:91:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:59:45 2026 by rpki-client