Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft
File:                     nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft (raw, json)
Hash identifier:          bbAn82oIgYDp8QGBXBG+htmGmyGUj+iiWhVDKSi4FLo=
Subject key identifier:   D9:2D:CD:A3:56:20:DC:72:3F:0B:8E:43:FD:DE:0A:45:4F:AB:93:03
Authority key identifier: 9C:1F:33:2C:12:55:45:78:2C:E2:0C:6E:F6:71:AF:1D:3F:C9:37:4B
Certificate issuer:       /CN=A91538E7/serialNumber=9C1F332C125545782CE20C6EF671AF1D3FC9374B
Certificate serial:       084E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft
Manifest number:          08CB
Signing time:             Tue 24 Mar 2026 20:35:04 +0000
Manifest this update:     Tue 24 Mar 2026 20:35:04 +0000
Manifest next update:     Tue 31 Mar 2026 20:35:04 +0000
Files and hashes:         1: nB8zLBJVRXgs4gxu9nGvHT_JN0s.crl (hash: kAqFrRpPX8KvGA5DmWCkjCmNjWwCy/bb8BtUMaAsOUA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.crl
                          rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 20:35:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2126 (0x84e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91538E7, serialNumber=9C1F332C125545782CE20C6EF671AF1D3FC9374B
        Validity
            Not Before: Mar 24 20:35:04 2026 GMT
            Not After : Mar 31 20:35:04 2026 GMT
        Subject: CN=69c2f578-e5b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:78:9b:3e:b2:98:c9:a6:5f:54:97:df:35:45:
                    96:5a:6f:f7:a8:8b:f9:35:e5:bd:0a:8d:f8:66:d3:
                    61:80:97:4e:7c:ec:a3:4c:2d:cd:4e:21:5e:ee:c2:
                    00:1a:75:c2:80:b8:0d:ee:6f:0a:f6:8c:0e:7d:d4:
                    76:0e:70:73:53:97:db:2b:58:8a:c9:df:29:33:a2:
                    1d:ae:d7:c1:0a:55:75:42:cf:9e:46:df:42:e2:45:
                    d7:73:1e:63:fa:34:fc:b9:29:ac:69:95:6f:20:cb:
                    32:a7:cd:b1:b8:3a:54:f3:5b:13:41:71:e2:2f:f3:
                    3c:a7:87:68:96:ca:95:a6:22:ba:d4:dc:8a:9e:c8:
                    8c:3d:c5:43:50:4f:8d:22:3e:d8:56:04:d8:7f:71:
                    35:39:b3:ec:27:0d:4e:53:57:eb:82:0e:94:7d:5b:
                    b7:86:ba:2b:01:a0:cf:04:f9:d7:2e:65:2f:69:8b:
                    85:80:24:d9:23:7d:d1:f2:69:c1:6d:e2:b8:fa:52:
                    37:ab:9a:0c:1f:20:64:02:7c:a1:8e:05:27:34:9e:
                    e2:0c:5a:e2:da:db:a2:ef:17:19:de:5b:65:a1:c7:
                    20:b7:52:17:cd:4a:00:ba:78:fd:2c:60:2d:c9:12:
                    05:83:ae:7c:3d:ae:a7:48:21:4f:0f:c3:1e:02:f4:
                    ae:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:2D:CD:A3:56:20:DC:72:3F:0B:8E:43:FD:DE:0A:45:4F:AB:93:03
            X509v3 Authority Key Identifier:
                keyid:9C:1F:33:2C:12:55:45:78:2C:E2:0C:6E:F6:71:AF:1D:3F:C9:37:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:f0:22:6c:15:7d:98:cd:7c:83:b3:3a:c1:59:1a:de:c0:9c:
         87:a3:ef:40:10:51:d2:fb:de:35:a8:41:50:25:e7:96:90:06:
         3f:d8:73:4a:a6:00:76:d4:2f:6d:85:69:83:ee:1d:71:3e:16:
         f9:8a:7f:49:38:0c:6d:95:11:46:82:1f:8c:45:31:f0:76:a4:
         4d:a3:50:9c:eb:03:5d:77:5c:0e:eb:7c:a7:3e:aa:75:13:f6:
         d5:24:32:14:1f:bf:3a:b7:31:6b:38:e2:82:d5:16:39:32:47:
         88:b5:c2:80:c5:8c:39:c0:bb:c7:69:8c:a8:64:ae:72:c6:d9:
         5a:54:cd:8e:d9:81:66:a2:31:19:aa:82:b1:fd:23:14:9c:e3:
         4e:31:58:ee:eb:a1:4a:d3:d1:74:7b:01:e5:1c:9d:38:5f:3c:
         2e:74:ab:15:25:05:3a:1f:1d:50:74:e4:f9:7c:f2:36:20:0f:
         ba:37:71:d7:37:01:38:0b:00:5a:e4:60:12:be:89:32:fa:3e:
         10:10:a1:be:35:96:1d:50:54:c1:31:88:d3:dc:9c:f7:24:97:
         ed:c2:d7:23:e7:83:74:80:91:a9:aa:63:f2:d6:5f:fb:6d:3c:
         8a:66:e8:b5:14:25:dd:50:b8:33:b9:de:30:79:c3:9a:b3:85:
         2a:ce:e0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:41:37 2026 by rpki-client