Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/83VHbzI13D1SUXHivpIRY45JCEc.mft
File:                     83VHbzI13D1SUXHivpIRY45JCEc.mft (raw, json)
Hash identifier:          AIl8xZUV3uCCuAdPgrIA57KdrVr82e8k+S8a1374v6Y=
Subject key identifier:   7A:CC:E1:A7:E6:42:68:79:72:50:29:FE:4E:D1:84:8A:41:B8:04:6C
Authority key identifier: F3:75:47:6F:32:35:DC:3D:52:51:71:E2:BE:92:11:63:8E:49:08:47
Certificate issuer:       /CN=A91627F9/serialNumber=F375476F3235DC3D525171E2BE9211638E490847
Certificate serial:       DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83VHbzI13D1SUXHivpIRY45JCEc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/83VHbzI13D1SUXHivpIRY45JCEc.mft
Manifest number:          D8
Signing time:             Wed 25 Mar 2026 05:55:58 +0000
Manifest this update:     Wed 25 Mar 2026 05:55:58 +0000
Manifest next update:     Wed 01 Apr 2026 05:55:58 +0000
Files and hashes:         1: 83VHbzI13D1SUXHivpIRY45JCEc.crl (hash: LEVTrfdxmyC+t58QLpBszN8UnGj0YopsyApHO2UhLEE=)
                          2: BA8DB662085911F082EDFD31C4F9AE02.roa (hash: hDpWfk2oDepevCOOT5MXSbWRVa0BBv9T+rrhb2S1tV4=)
                          3: 99E2D388E9C411EFAFABDD0BC4F9AE02.roa (hash: U5XpQ0ehMGdgmuN8+HXp5RjG+d9wkF5svI623aYi6Vk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/83VHbzI13D1SUXHivpIRY45JCEc.crl
                          rsync://rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/83VHbzI13D1SUXHivpIRY45JCEc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83VHbzI13D1SUXHivpIRY45JCEc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:55:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 223 (0xdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91627F9, serialNumber=F375476F3235DC3D525171E2BE9211638E490847
        Validity
            Not Before: Mar 25 05:55:58 2026 GMT
            Not After : Apr  1 05:55:58 2026 GMT
        Subject: CN=69c378ee-910b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:72:fc:e7:78:b6:74:e9:91:75:ad:16:d7:38:
                    9c:d9:7d:62:e7:05:9b:43:31:ac:0f:f3:fd:33:89:
                    d7:0e:89:0b:32:57:c2:5e:99:b0:17:8f:6f:83:d2:
                    d4:98:de:f1:6d:7d:9b:37:fe:92:c7:36:c5:37:4e:
                    2b:3a:a2:4f:e8:e3:be:51:11:a0:3c:f8:b3:b4:23:
                    4d:eb:d7:f8:31:80:68:08:10:d7:47:6d:9b:b7:a5:
                    9f:80:8c:cc:f9:db:60:23:36:be:90:58:2c:44:8d:
                    d8:88:98:bf:dd:29:33:84:e1:a1:cf:9c:88:9f:a7:
                    39:29:1e:df:2a:69:35:85:98:d6:92:f4:0a:3d:a7:
                    e0:95:89:db:66:85:45:6a:59:aa:e4:b6:17:fe:67:
                    46:99:bf:cd:bc:06:75:7a:cd:34:d6:eb:d7:cd:22:
                    24:85:17:83:71:ef:ad:51:f2:9e:60:2c:e8:c1:cc:
                    5a:57:0f:71:97:14:1a:1a:f2:64:bc:4c:42:09:65:
                    c3:d3:00:5e:11:64:06:22:ae:b4:39:41:3b:c7:1e:
                    6c:8d:5f:d0:20:11:ae:22:a3:47:08:e3:99:61:fb:
                    ff:0e:45:cc:24:85:0e:6b:71:91:90:bd:fd:61:28:
                    57:72:a7:68:5e:b7:28:8f:4d:b1:8b:92:c2:35:bf:
                    b6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:CC:E1:A7:E6:42:68:79:72:50:29:FE:4E:D1:84:8A:41:B8:04:6C
            X509v3 Authority Key Identifier:
                keyid:F3:75:47:6F:32:35:DC:3D:52:51:71:E2:BE:92:11:63:8E:49:08:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/83VHbzI13D1SUXHivpIRY45JCEc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83VHbzI13D1SUXHivpIRY45JCEc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/83VHbzI13D1SUXHivpIRY45JCEc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:c1:60:8b:f2:a8:c6:36:44:47:d2:09:67:a9:a2:8e:55:4d:
         29:5b:c1:e2:67:18:6c:18:7b:b2:6b:8c:6d:27:6e:c7:16:52:
         e3:9b:75:49:1a:fc:b2:ad:a2:d0:26:af:0a:92:e4:15:4f:05:
         46:08:8f:b6:58:c0:76:db:f8:5c:8e:f3:07:67:74:b1:cf:f1:
         c9:c7:74:d9:b9:24:5f:4c:b7:03:6d:96:6f:f7:12:d4:f6:e8:
         1e:5c:62:61:09:06:67:b0:b4:29:57:bf:98:9b:36:1d:d0:00:
         05:88:42:e0:19:6b:b5:5b:92:d5:5c:11:0a:f4:86:48:c5:a0:
         20:3e:63:e3:34:60:7f:76:f7:62:01:98:b1:64:0a:30:48:23:
         83:a3:b3:9d:ee:40:50:07:a3:d1:d6:85:cc:aa:12:2f:13:3b:
         96:16:0a:dc:46:b2:0d:c1:7d:66:a1:fb:64:5b:a5:42:90:96:
         b3:d7:70:82:5a:69:1f:da:39:f6:29:c8:33:38:75:8b:5e:cc:
         07:b4:d5:b5:04:07:52:32:ce:c2:95:ad:55:6d:6e:6e:15:10:
         2d:e6:fb:4a:45:64:b9:88:40:f8:6e:8d:11:45:de:df:f7:f4:
         8f:56:3d:27:06:6a:a0:06:d0:a5:95:eb:13:0b:dd:12:e4:3f:
         05:c1:22:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:49:56 2026 by rpki-client