Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91491CC/A6E23B789A0E11F089C88B7CC4F9AE02/8GBCLBdcmuWu18weKBDySX-NlZo.mft
File:                     8GBCLBdcmuWu18weKBDySX-NlZo.mft (raw, json)
Hash identifier:          U2FRI8sVe11CLWwjtDVcMfTpFnCwtFRHDIPWVzrDrKU=
Subject key identifier:   81:8C:B0:08:E3:C6:BE:9A:DA:75:27:5D:31:5F:FF:04:83:1D:0E:28
Authority key identifier: F0:60:42:2C:17:5C:9A:E5:AE:D7:CC:1E:28:10:F2:49:7F:8D:95:9A
Certificate issuer:       /CN=A91491CC/serialNumber=F060422C175C9AE5AED7CC1E2810F2497F8D959A
Certificate serial:       61
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8GBCLBdcmuWu18weKBDySX-NlZo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91491CC/A6E23B789A0E11F089C88B7CC4F9AE02/8GBCLBdcmuWu18weKBDySX-NlZo.mft
Manifest number:          5F
Signing time:             Wed 25 Mar 2026 07:15:23 +0000
Manifest this update:     Wed 25 Mar 2026 07:15:22 +0000
Manifest next update:     Wed 01 Apr 2026 07:15:22 +0000
Files and hashes:         1: 8GBCLBdcmuWu18weKBDySX-NlZo.crl (hash: v637E5sc5ol92/C10G74cGZk+PZ/nFoa4FdOQMRWj+M=)
                          2: 3283B8BE9A0F11F0BC057E7DC4F9AE02.roa (hash: f3+asU1Hkvad4uoy4U98nCRF8Ct9CSMeVLGoRoOBm5U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91491CC/A6E23B789A0E11F089C88B7CC4F9AE02/8GBCLBdcmuWu18weKBDySX-NlZo.crl
                          rsync://rpki.apnic.net/member_repository/A91491CC/A6E23B789A0E11F089C88B7CC4F9AE02/8GBCLBdcmuWu18weKBDySX-NlZo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8GBCLBdcmuWu18weKBDySX-NlZo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:15:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97 (0x61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91491CC, serialNumber=F060422C175C9AE5AED7CC1E2810F2497F8D959A
        Validity
            Not Before: Mar 25 07:15:22 2026 GMT
            Not After : Apr  1 07:15:22 2026 GMT
        Subject: CN=69c38b8b-ee3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cf:23:50:d9:86:c3:01:9e:31:79:5f:4c:21:
                    f1:2d:ac:0c:7f:d2:76:df:83:dd:cc:b3:6a:7a:c1:
                    3f:2d:07:e2:a2:22:76:e8:58:0d:3f:d0:fa:68:74:
                    67:ad:e4:b3:42:42:ce:ba:1f:df:e6:67:e5:36:c6:
                    15:d9:ac:6b:96:59:a1:1b:d9:31:35:99:16:20:fe:
                    10:0a:14:f1:9f:73:3d:46:a8:18:50:dd:f5:82:08:
                    09:1a:84:88:bb:78:8c:3e:04:3b:72:42:a5:36:14:
                    23:bb:04:ac:01:c1:ab:f5:d0:d2:24:db:0b:49:dd:
                    3e:03:22:62:85:59:c6:bd:79:23:82:53:1c:dd:4e:
                    24:29:b0:02:45:ce:04:c6:64:06:51:01:7d:ee:ae:
                    98:04:94:1b:f0:0c:0f:8a:94:b1:78:a1:86:b3:1f:
                    68:d2:e8:ab:2e:87:cf:b0:be:b7:8e:88:41:59:d9:
                    d2:01:b2:b8:d3:a6:55:5e:b1:ac:4f:dc:00:c6:11:
                    4e:8d:ea:91:20:00:81:9f:8c:60:eb:64:e0:96:a2:
                    ef:4a:dd:88:3e:24:ff:74:68:f0:c2:c5:c1:37:d3:
                    6f:27:71:84:4e:2c:0d:a5:8d:c9:9c:69:9f:84:ab:
                    29:5f:bd:ba:42:ac:5b:8f:bc:12:bb:82:26:76:8a:
                    c1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:8C:B0:08:E3:C6:BE:9A:DA:75:27:5D:31:5F:FF:04:83:1D:0E:28
            X509v3 Authority Key Identifier:
                keyid:F0:60:42:2C:17:5C:9A:E5:AE:D7:CC:1E:28:10:F2:49:7F:8D:95:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91491CC/A6E23B789A0E11F089C88B7CC4F9AE02/8GBCLBdcmuWu18weKBDySX-NlZo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8GBCLBdcmuWu18weKBDySX-NlZo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91491CC/A6E23B789A0E11F089C88B7CC4F9AE02/8GBCLBdcmuWu18weKBDySX-NlZo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:d5:da:8f:2e:6a:e5:b8:bd:b7:88:cf:ec:b5:ef:17:cb:a3:
         ec:06:23:0b:2d:05:29:99:e9:11:22:4e:b0:5c:71:d9:2d:dc:
         13:3e:2b:bd:fd:33:ed:56:e7:62:94:83:79:4b:22:4b:c1:25:
         d2:65:60:4c:1c:67:a3:43:f5:5e:92:f6:f1:7b:04:84:53:c9:
         75:6f:2d:19:75:38:27:8d:9a:8b:88:71:8a:4f:52:d8:d5:33:
         67:4c:dd:7e:53:62:b6:7d:84:69:1e:ce:b7:f4:84:7a:02:84:
         27:e7:cc:09:73:cb:17:f6:b0:23:8e:63:cf:b4:38:74:db:bf:
         bc:31:cf:fd:04:72:dc:6a:ba:ce:82:5b:d7:99:0c:52:b6:f6:
         e7:c8:f8:23:90:98:ee:82:1e:55:03:5d:a5:5d:f3:df:c5:96:
         98:f7:80:dd:5a:75:d8:b0:84:c7:55:3f:28:9d:53:25:b7:7c:
         d8:59:eb:d1:af:10:0c:2d:ad:38:41:17:0a:ab:dd:ec:0b:f5:
         dd:bd:f2:61:36:ce:0d:5e:0e:12:5d:60:c4:98:cd:a8:25:3e:
         e1:e6:17:e1:d4:1e:46:e4:d9:01:94:59:c8:31:f8:25:15:1a:
         1d:87:d7:42:87:6d:ba:96:06:5c:58:b0:41:dd:c5:1c:60:9e:
         54:c7:98:86
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
OTFDQzExMC8GA1UEBRMoRjA2MDQyMkMxNzVDOUFFNUFFRDdDQzFFMjgxMEYyNDk3
RjhEOTU5QTAeFw0yNjAzMjUwNzE1MjJaFw0yNjA0MDEwNzE1MjJaMBgxFjAUBgNV
BAMTDTY5YzM4YjhiLWVlM2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCszyNQ2YbDAZ4xeV9MIfEtrAx/0nbfg93Ms2p6wT8tB+KiInboWA0/0PpodGet
5LNCQs66H9/mZ+U2xhXZrGuWWaEb2TE1mRYg/hAKFPGfcz1GqBhQ3fWCCAkahIi7
eIw+BDtyQqU2FCO7BKwBwav10NIk2wtJ3T4DImKFWca9eSOCUxzdTiQpsAJFzgTG
ZAZRAX3urpgElBvwDA+KlLF4oYazH2jS6Ksuh8+wvreOiEFZ2dIBsrjTplVesaxP
3ADGEU6N6pEgAIGfjGDrZOCWou9K3Yg+JP90aPDCxcE3028ncYROLA2ljcmcaZ+E
qylfvbpCrFuPvBK7giZ2isFJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUgYywCOPG
vpradSddMV//BIMdDigwHwYDVR0jBBgwFoAU8GBCLBdcmuWu18weKBDySX+NlZow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ5MUNDL0E2RTIzQjc4OUEw
RTExRjA4OUM4OEI3Q0M0RjlBRTAyLzhHQkNMQmRjbXVXdTE4d2VLQkR5U1gtTmxa
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvOEdCQ0xCZGNtdVd1MTh3ZUtCRHlTWC1ObFpvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ5
MUNDL0E2RTIzQjc4OUEwRTExRjA4OUM4OEI3Q0M0RjlBRTAyLzhHQkNMQmRjbXVX
dTE4d2VLQkR5U1gtTmxaby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCz1dqPLmrluL23iM/ste8Xy6PsBiMLLQUpmekRIk6wXHHZLdwTPiu9/TPtVudi
lIN5SyJLwSXSZWBMHGejQ/VekvbxewSEU8l1by0ZdTgnjZqLiHGKT1LY1TNnTN1+
U2K2fYRpHs639IR6AoQn58wJc8sX9rAjjmPPtDh027+8Mc/9BHLcarrOglvXmQxS
tvbnyPgjkJjugh5VA12lXfPfxZaY94DdWnXYsITHVT8onVMlt3zYWevRrxAMLa04
QRcKq93sC/XdvfJhNs4NXg4SXWDEmM2oJT7h5hfh1B5G5NkBlFnIMfglFRodh9dC
h226lgZcWLBB3cUcYJ5Ux5iG
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:29:48 2026 by rpki-client