Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/83GJVwUMS84UpOw46qzunHQkTE8.mft
File:                     83GJVwUMS84UpOw46qzunHQkTE8.mft (raw, json)
Hash identifier:          1SQJkO2gCh2XOB7iJXgQmdKJ2i7rxHv5ic8lQw7m8qI=
Subject key identifier:   16:20:9C:50:58:67:31:60:63:B3:44:D6:0D:17:F1:B0:1D:82:05:DC
Authority key identifier: F3:71:89:57:05:0C:4B:CE:14:A4:EC:38:EA:AC:EE:9C:74:24:4C:4F
Certificate issuer:       /CN=A91426E8/serialNumber=F3718957050C4BCE14A4EC38EAACEE9C74244C4F
Certificate serial:       A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83GJVwUMS84UpOw46qzunHQkTE8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/83GJVwUMS84UpOw46qzunHQkTE8.mft
Manifest number:          9C
Signing time:             Wed 25 Mar 2026 06:37:02 +0000
Manifest this update:     Wed 25 Mar 2026 06:37:01 +0000
Manifest next update:     Wed 01 Apr 2026 06:37:01 +0000
Files and hashes:         1: 83GJVwUMS84UpOw46qzunHQkTE8.crl (hash: yxCIgABE3kBqX5Jxv4uQZ986CwnBU5zQ6Oxz/JOCChg=)
                          2: B240CFC23F8A11F0B3F03A67C4F9AE02.roa (hash: 1jd/x+c/FOgCs+jTMrNMeNYXR2ODxGAIH6mfN2rcKo4=)
                          3: F34C44FC3F7511F0A963EE11C4F9AE02.roa (hash: esjeBUskXeiuKK+21nCPNNCLp5PBYsrkVGWW22aTj9g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/83GJVwUMS84UpOw46qzunHQkTE8.crl
                          rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/83GJVwUMS84UpOw46qzunHQkTE8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83GJVwUMS84UpOw46qzunHQkTE8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:37:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 161 (0xa1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91426E8, serialNumber=F3718957050C4BCE14A4EC38EAACEE9C74244C4F
        Validity
            Not Before: Mar 25 06:37:01 2026 GMT
            Not After : Apr  1 06:37:01 2026 GMT
        Subject: CN=69c3828e-f225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:00:78:0a:cc:e1:2b:f2:28:07:f1:65:95:04:
                    b9:7c:0b:83:8a:68:6c:44:62:00:01:58:bf:25:f9:
                    d7:ad:5c:88:e5:01:3a:22:01:7c:7c:58:41:8e:8c:
                    bd:42:7e:c7:e3:4b:ec:f0:98:56:c7:2b:d6:23:c8:
                    08:3b:64:56:52:e3:03:fa:6c:5e:b5:88:db:98:96:
                    c7:32:23:51:61:c0:a4:d1:0a:bb:3e:ad:b6:37:df:
                    45:b8:9c:bc:fa:3d:02:9c:3f:45:bb:20:2e:68:34:
                    58:22:a6:f2:d1:53:22:74:f1:8f:fa:a3:f2:78:5d:
                    31:56:2e:65:db:69:80:e5:fe:ef:60:03:27:e1:1b:
                    63:5f:3c:6a:c4:0c:f5:6b:de:9f:c5:af:9e:e9:e7:
                    30:20:a0:b2:8a:d8:85:83:24:e0:37:7e:09:49:81:
                    9c:64:71:4c:7a:5a:00:d0:59:4c:8f:f8:82:da:b2:
                    a5:5c:dd:a5:9d:8e:e0:97:cc:8f:23:d8:23:d9:25:
                    0c:56:8d:88:0e:70:e8:ff:fe:a7:24:68:a9:5f:db:
                    87:e9:d8:23:ab:33:e0:be:5a:83:42:bf:4d:fd:79:
                    40:5d:f4:fc:e4:23:f1:87:50:04:36:c4:7e:ee:10:
                    86:34:56:58:77:33:18:72:b7:11:1d:61:4b:7e:08:
                    2f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:20:9C:50:58:67:31:60:63:B3:44:D6:0D:17:F1:B0:1D:82:05:DC
            X509v3 Authority Key Identifier:
                keyid:F3:71:89:57:05:0C:4B:CE:14:A4:EC:38:EA:AC:EE:9C:74:24:4C:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/83GJVwUMS84UpOw46qzunHQkTE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83GJVwUMS84UpOw46qzunHQkTE8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/83GJVwUMS84UpOw46qzunHQkTE8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:2d:da:fd:e3:34:79:81:7e:96:07:f4:59:e4:bc:46:05:49:
         34:d6:3c:10:65:8f:ec:63:6e:ca:68:8a:34:50:7c:45:39:ef:
         74:2e:22:8d:5f:ac:a6:1e:46:5a:1d:6f:29:a0:c1:72:1e:78:
         d1:ca:d9:6b:62:5a:76:12:b0:a1:aa:44:1b:b5:4d:df:18:99:
         97:7f:db:91:14:48:1f:81:51:96:2c:23:b3:10:68:b6:2f:50:
         84:d9:98:69:72:59:e4:3d:3b:48:6f:47:31:da:3a:41:1c:73:
         80:9a:d9:a4:11:ad:bb:e8:3c:6e:e6:05:a9:05:2a:c7:88:c8:
         e0:95:f5:e4:aa:6a:16:42:d3:f2:29:73:b9:5a:fe:d7:10:95:
         3e:d6:fc:f4:03:c2:f8:28:e6:7a:26:2d:00:2e:92:7b:38:1a:
         c4:71:3c:6c:d4:ee:55:db:f3:96:34:39:8b:b9:fb:88:00:40:
         a7:7d:cb:1f:0e:2b:b7:1e:30:5e:3f:b9:0f:89:93:fa:6e:10:
         b5:78:00:90:e7:96:28:06:be:2f:59:93:c7:5c:c3:34:39:55:
         c6:1d:5c:bd:d6:51:44:c7:74:59:97:d9:20:65:07:5a:b7:57:
         0d:ee:5b:5c:d7:d9:66:15:43:3f:30:65:9a:52:11:cb:fb:3b:
         89:d4:be:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:21:46 2026 by rpki-client