Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914F3BA/FF20EBDC013D11EBA000126BC4F9AE02/5GI8_UQ-YjLybCPoH9-XWLJvOyw.mft
File:                     5GI8_UQ-YjLybCPoH9-XWLJvOyw.mft (raw, json)
Hash identifier:          cs8Ea9cnByxRGvvuJMsGiZySoc0tvqFBgpAv0Uo57AE=
Subject key identifier:   50:ED:E1:13:C9:1E:04:89:A1:66:10:14:CA:E3:F2:84:91:5E:37:CE
Authority key identifier: E4:62:3C:FD:44:3E:62:32:F2:6C:23:E8:1F:DF:97:58:B2:6F:3B:2C
Certificate issuer:       /CN=A914F3BA/serialNumber=E4623CFD443E6232F26C23E81FDF9758B26F3B2C
Certificate serial:       0849
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GI8_UQ-YjLybCPoH9-XWLJvOyw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914F3BA/FF20EBDC013D11EBA000126BC4F9AE02/5GI8_UQ-YjLybCPoH9-XWLJvOyw.mft
Manifest number:          0844
Signing time:             Tue 24 Mar 2026 20:34:00 +0000
Manifest this update:     Tue 24 Mar 2026 20:33:59 +0000
Manifest next update:     Tue 31 Mar 2026 20:33:59 +0000
Files and hashes:         1: 5GI8_UQ-YjLybCPoH9-XWLJvOyw.crl (hash: xl8NXDm7ireywi78+WkkfIG+qDW7pw0L3PC5x437Hrg=)
                          2: D0D7EE48343211EFBF2C280DC4F9AE02.roa (hash: QBK2bfGdjPwo4v2ooL/I9Tsc0fhNTGv9YxWDlUwdQKI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914F3BA/FF20EBDC013D11EBA000126BC4F9AE02/5GI8_UQ-YjLybCPoH9-XWLJvOyw.crl
                          rsync://rpki.apnic.net/member_repository/A914F3BA/FF20EBDC013D11EBA000126BC4F9AE02/5GI8_UQ-YjLybCPoH9-XWLJvOyw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GI8_UQ-YjLybCPoH9-XWLJvOyw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 20:33:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2121 (0x849)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914F3BA, serialNumber=E4623CFD443E6232F26C23E81FDF9758B26F3B2C
        Validity
            Not Before: Mar 24 20:33:59 2026 GMT
            Not After : Mar 31 20:33:59 2026 GMT
        Subject: CN=69c2f537-505a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:30:a1:8d:59:f8:57:0d:e2:66:cf:21:42:94:
                    0b:f0:3f:50:b7:20:5a:cd:ff:24:14:3c:0e:57:b2:
                    17:c5:35:6c:a4:0b:fa:af:73:2f:6a:cd:fd:33:87:
                    8e:cd:d9:48:b3:ca:74:b8:e9:27:ac:38:44:28:27:
                    9b:21:fb:6e:00:05:9e:84:88:ef:6b:9b:06:ae:35:
                    2e:78:46:50:62:5e:02:26:3c:f0:91:c5:47:23:24:
                    7c:1b:cb:33:b6:0e:6c:cd:6f:81:fd:7c:6a:10:5b:
                    31:93:85:bf:3c:da:31:fb:5f:f3:66:ec:aa:5f:ac:
                    2a:fb:89:a9:09:6a:19:27:49:37:33:bd:0f:56:95:
                    60:90:92:e4:61:f6:2e:df:73:d7:f7:ae:7e:27:de:
                    1e:c9:c6:64:f0:64:a2:32:cc:21:1f:bb:6e:df:db:
                    f4:5a:3a:21:3a:88:de:a3:df:d9:07:dc:c2:fc:e3:
                    23:b9:b4:f2:91:7a:12:7c:34:6b:6a:ac:3a:02:83:
                    5d:71:76:06:5b:b3:9e:c8:5b:01:e3:3d:4f:9b:77:
                    1e:96:a6:a2:d4:bd:71:78:ad:03:dc:1a:cc:85:35:
                    50:53:26:3f:d7:8f:3d:e5:be:92:b5:f4:fa:f9:b1:
                    63:16:0d:0d:fc:37:cc:3f:8f:d0:af:55:d7:86:46:
                    68:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:ED:E1:13:C9:1E:04:89:A1:66:10:14:CA:E3:F2:84:91:5E:37:CE
            X509v3 Authority Key Identifier:
                keyid:E4:62:3C:FD:44:3E:62:32:F2:6C:23:E8:1F:DF:97:58:B2:6F:3B:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914F3BA/FF20EBDC013D11EBA000126BC4F9AE02/5GI8_UQ-YjLybCPoH9-XWLJvOyw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GI8_UQ-YjLybCPoH9-XWLJvOyw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F3BA/FF20EBDC013D11EBA000126BC4F9AE02/5GI8_UQ-YjLybCPoH9-XWLJvOyw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:14:89:06:4a:8b:8e:9a:86:b2:fd:08:e3:48:38:1b:68:a1:
         89:2e:87:05:bb:1b:09:9f:b3:cd:d2:65:5c:a3:10:1d:cf:1c:
         58:23:6b:a8:64:66:d1:31:6e:27:bf:4b:5b:0f:ba:00:3f:e4:
         e0:89:74:b8:30:74:8e:c1:72:18:57:16:a1:1f:6b:e8:f5:05:
         5b:d7:f9:31:55:6d:71:5c:8b:0e:7a:a7:85:53:8b:0e:51:45:
         41:04:1b:55:6c:0b:00:62:bf:bf:ea:2a:20:aa:8b:30:f8:61:
         e7:83:99:40:48:3b:fe:8a:8f:84:4a:d6:7c:19:db:06:be:48:
         0c:dd:50:be:a1:12:24:d2:95:e0:e7:41:df:e3:1e:ca:18:15:
         e4:34:2c:6a:90:3d:20:3b:3c:9a:de:64:68:a0:0d:20:89:a5:
         65:e8:bc:64:14:e5:ff:fb:b4:24:e2:f1:49:2c:3d:bf:6d:3a:
         10:32:c5:7f:a1:ec:de:dc:2b:0e:15:75:18:7a:a7:26:02:1c:
         86:55:23:fc:21:9d:a0:23:a8:ed:e6:15:af:c2:8d:f8:e9:68:
         0a:06:bb:40:68:d8:ce:ee:64:3f:99:e4:e3:e7:c1:d6:c5:78:
         2c:63:4a:cc:79:86:f6:fc:5a:21:b9:7e:1f:6f:ee:e0:35:16:
         b3:b1:26:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:36:13 2026 by rpki-client