Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.mft
File:                     -8GBRK7YqJ12DV1eLe2MOPMeWeA.mft (raw, json)
Hash identifier:          H/pV5HKQwahRQTxnYKQWxezeGqdm1P5GFsFF0J+CAh4=
Subject key identifier:   6F:FA:80:47:42:B8:19:C2:A3:D0:98:D8:17:91:D6:31:1B:B5:6A:4D
Authority key identifier: FB:C1:81:44:AE:D8:A8:9D:76:0D:5D:5E:2D:ED:8C:38:F3:1E:59:E0
Certificate issuer:       /CN=A91A4543/serialNumber=FBC18144AED8A89D760D5D5E2DED8C38F31E59E0
Certificate serial:       08AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8GBRK7YqJ12DV1eLe2MOPMeWeA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.mft
Manifest number:          08A6
Signing time:             Tue 24 Mar 2026 20:16:06 +0000
Manifest this update:     Tue 24 Mar 2026 20:16:06 +0000
Manifest next update:     Tue 31 Mar 2026 20:16:06 +0000
Files and hashes:         1: -8GBRK7YqJ12DV1eLe2MOPMeWeA.crl (hash: 5d9hgjo815KvZVmF5uArZxu2f4e2vBes6hR7Npp89No=)
                          2: B3C41A60DD1B11EAAC9A0915C4F9AE02.roa (hash: 2eup2m0aHXQJQWm9cIyVkI2HXtK+Dw0dwIa6EDDGEm8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.crl
                          rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8GBRK7YqJ12DV1eLe2MOPMeWeA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 20:16:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2222 (0x8ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4543, serialNumber=FBC18144AED8A89D760D5D5E2DED8C38F31E59E0
        Validity
            Not Before: Mar 24 20:16:06 2026 GMT
            Not After : Mar 31 20:16:06 2026 GMT
        Subject: CN=69c2f106-5422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:8c:bd:3b:88:84:39:4a:d3:4a:e3:0c:1f:43:
                    64:a2:0d:6a:be:53:40:b3:f8:c9:b6:e4:c4:6c:9a:
                    70:c3:a3:ae:35:43:35:16:cb:b4:b9:59:ef:c6:23:
                    51:d8:58:a4:22:7e:1d:68:40:ec:ca:3f:68:08:d7:
                    b5:c4:ce:98:14:25:11:5d:d6:cd:2e:67:95:01:a0:
                    6a:b7:e2:49:b0:25:82:59:59:91:35:f7:2f:d9:20:
                    2f:92:3a:d1:51:87:89:96:99:82:06:e7:df:0f:7d:
                    a5:e2:84:53:8e:99:a5:5f:05:17:5d:9c:fe:63:16:
                    de:63:b3:b3:6c:72:ff:e4:74:a0:9c:e7:59:c0:e9:
                    46:e7:b2:a4:0f:8d:5d:2f:d1:55:3a:24:9b:cb:b0:
                    db:59:3e:1a:87:21:c2:8e:be:6f:35:a1:72:c5:ee:
                    13:75:34:3d:0c:03:bd:72:3e:d7:85:1b:2e:01:3d:
                    e7:80:76:af:4f:78:21:1c:27:ef:7b:d5:45:09:48:
                    bd:ae:86:bf:72:cf:f1:4a:ee:0d:3d:7c:9b:0b:94:
                    3c:96:72:7c:95:db:a7:54:8f:89:3a:dd:e1:00:c9:
                    ab:48:7d:c9:0f:b1:0a:31:42:f2:e9:9c:db:24:83:
                    3c:79:cc:10:2e:9a:42:97:82:1a:9d:03:f6:78:8f:
                    18:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:FA:80:47:42:B8:19:C2:A3:D0:98:D8:17:91:D6:31:1B:B5:6A:4D
            X509v3 Authority Key Identifier:
                keyid:FB:C1:81:44:AE:D8:A8:9D:76:0D:5D:5E:2D:ED:8C:38:F3:1E:59:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8GBRK7YqJ12DV1eLe2MOPMeWeA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:4d:94:f3:56:b5:2f:b6:70:ff:a5:d2:92:43:9f:ed:62:ef:
         db:41:68:3a:2c:3b:04:7a:c9:0c:35:99:3f:95:d2:63:a5:07:
         7b:08:02:25:75:3b:5a:09:0a:ac:83:e9:71:44:b5:cc:f2:bf:
         b4:a8:bd:78:99:27:e8:c5:65:6a:68:62:2d:a2:19:16:da:c4:
         fd:f6:13:83:ad:67:bb:20:f7:72:26:d4:f0:4f:23:6d:b6:61:
         12:36:c8:7e:aa:d7:76:24:a6:f3:f5:b3:34:09:16:05:ea:b1:
         19:2e:b6:81:74:84:9c:0d:30:0d:22:14:76:9b:f3:02:4f:d4:
         f1:06:0c:6a:bb:87:90:69:ad:48:4e:09:11:34:09:c3:a3:90:
         ee:d6:d0:44:c1:88:20:9a:70:e0:7e:4b:72:2e:08:61:1d:07:
         30:7f:3c:7a:15:f5:5d:67:34:49:90:a7:78:55:88:56:18:6d:
         76:75:7d:a3:1b:3f:77:c5:18:ac:d6:29:52:37:80:fc:27:80:
         3c:7c:40:78:79:d5:ec:3f:0c:57:af:9c:cf:01:74:20:55:bc:
         83:ca:cf:2a:a4:d9:d1:e9:d2:01:f2:ae:00:6f:cf:f6:32:31:
         5c:7b:ce:e5:6b:17:39:87:2a:01:ae:36:06:e5:c5:09:c9:94:
         30:bf:d2:d0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTQ1NDMxMTAvBgNVBAUTKEZCQzE4MTQ0QUVEOEE4OUQ3NjBENUQ1RTJERUQ4QzM4
RjMxRTU5RTAwHhcNMjYwMzI0MjAxNjA2WhcNMjYwMzMxMjAxNjA2WjAYMRYwFAYD
VQQDEw02OWMyZjEwNi01NDIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3Yy9O4iEOUrTSuMMH0Nkog1qvlNAs/jJtuTEbJpww6OuNUM1Fsu0uVnvxiNR
2FikIn4daEDsyj9oCNe1xM6YFCURXdbNLmeVAaBqt+JJsCWCWVmRNfcv2SAvkjrR
UYeJlpmCBuffD32l4oRTjpmlXwUXXZz+YxbeY7OzbHL/5HSgnOdZwOlG57KkD41d
L9FVOiSby7DbWT4ahyHCjr5vNaFyxe4TdTQ9DAO9cj7XhRsuAT3ngHavT3ghHCfv
e9VFCUi9roa/cs/xSu4NPXybC5Q8lnJ8ldunVI+JOt3hAMmrSH3JD7EKMULy6Zzb
JIM8ecwQLppCl4IanQP2eI8Y5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG/6gEdC
uBnCo9CY2BeR1jEbtWpNMB8GA1UdIwQYMBaAFPvBgUSu2Kiddg1dXi3tjDjzHlng
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDU0My81N0VGOUY2Q0RE
MUExMUVBOEE0MzlGMTNDNEY5QUUwMi8tOEdCUks3WXFKMTJEVjFlTGUyTU9QTWVX
ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy04R0JSSzdZcUoxMkRWMWVMZTJNT1BNZVdlQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NDU0My81N0VGOUY2Q0REMUExMUVBOEE0MzlGMTNDNEY5QUUwMi8tOEdCUks3WXFK
MTJEVjFlTGUyTU9QTWVXZUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkU2U81a1L7Zw/6XSkkOf7WLv20FoOiw7BHrJDDWZP5XSY6UHewgCJXU7WgkK
rIPpcUS1zPK/tKi9eJkn6MVlamhiLaIZFtrE/fYTg61nuyD3cibU8E8jbbZhEjbI
fqrXdiSm8/WzNAkWBeqxGS62gXSEnA0wDSIUdpvzAk/U8QYMaruHkGmtSE4JETQJ
w6OQ7tbQRMGIIJpw4H5Lci4IYR0HMH88ehX1XWc0SZCneFWIVhhtdnV9oxs/d8UY
rNYpUjeA/CeAPHxAeHnV7D8MV6+czwF0IFW8g8rPKqTZ0enSAfKuAG/P9jIxXHvO
5WsXOYcqAa42BuXFCcmUML/S0A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:22:43 2026 by rpki-client