Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft
File:                     k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft (raw, json)
Hash identifier:          DXi99ETnXhJXW+RVC5DhD1jtY2JV7GrxL/MUlB99Ff8=
Subject key identifier:   2C:09:4C:4C:A6:47:30:96:F5:DD:B3:69:61:46:FF:13:B6:2A:E1:A6
Authority key identifier: 93:C0:58:A0:DF:17:73:01:24:59:16:4B:5A:80:D8:53:72:C7:E2:92
Certificate issuer:       /CN=A91C56FB/serialNumber=93C058A0DF1773012459164B5A80D85372C7E292
Certificate serial:       1504
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft
Manifest number:          14DD
Signing time:             Thu 26 Mar 2026 16:49:26 +0000
Manifest this update:     Thu 26 Mar 2026 16:49:25 +0000
Manifest next update:     Thu 02 Apr 2026 16:49:25 +0000
Files and hashes:         1: k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl (hash: la/RfXSmGll1J2pFy5KMVEUxX8aiv3n0BZeZ1yLGFCU=)
                          2: 6BB6EF78EB5F11ECB4060F86C4F9AE02.roa (hash: +whKNCKBWu/fW8ZOLuLgPSDmcXDG1KA00Y9l8DL/PP0=)
                          3: 3A6D0CE4FF3E11F08F73BB4E4C6F56BC.roa (hash: AG7+A5Yb2KDtnoNzA36Acb2KghCB+Rzmi98/tCvvjZ4=)
                          4: B6DA2BD8E33F11EB9832A354C4F9AE02.roa (hash: Hr7OpNKmlMWAc1DIpsosFxnOhgjPdStDv79SYsuEpFU=)
                          5: B7F93F86E33F11EB9832A354C4F9AE02.roa (hash: nHdgdCvKY1Y9twOWSJSJeHzjweCUK60NzNjzUvm1MXs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl
                          rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5380 (0x1504)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C56FB, serialNumber=93C058A0DF1773012459164B5A80D85372C7E292
        Validity
            Not Before: Mar 26 16:49:25 2026 GMT
            Not After : Apr  2 16:49:25 2026 GMT
        Subject: CN=69c56396-3743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:35:4e:3a:eb:06:d6:c0:00:41:c1:cc:34:bf:
                    bd:d4:79:02:ae:f9:f0:be:99:c5:2c:49:2d:99:39:
                    4d:77:ad:43:cb:05:aa:6f:14:57:f7:dd:d0:b0:f1:
                    44:c5:17:8d:e9:2d:a0:66:ca:52:06:21:1b:ee:48:
                    d1:10:ee:4d:e3:62:2d:41:33:ee:37:3b:cb:78:66:
                    9a:df:3b:e3:de:6d:48:b9:0a:53:be:22:a0:2d:61:
                    e0:1a:ce:a4:d1:a5:b3:6b:ec:b8:14:c5:08:eb:6c:
                    64:4e:7b:c5:cb:af:60:f7:44:c0:29:c3:59:cb:8e:
                    94:e6:80:1b:89:38:c2:3d:b5:86:23:ef:76:06:1d:
                    8c:57:98:0d:99:1b:cb:82:df:12:2c:3a:37:bd:93:
                    26:ce:b3:2f:9f:db:a3:05:6b:9c:55:3a:01:6b:7f:
                    12:1d:13:6c:f1:7f:0f:36:f9:a0:22:5b:de:26:54:
                    7f:2f:1b:15:90:fb:60:d2:55:bb:93:11:62:2a:66:
                    b3:1a:52:b5:da:2c:b5:c2:61:5f:00:5f:64:3e:50:
                    f2:0f:c7:fe:87:b3:e0:d7:f7:c9:7e:f5:28:d4:2b:
                    e8:43:17:b9:46:0e:ee:10:a6:a9:25:7c:ab:3a:8d:
                    50:98:2c:01:c6:01:a1:81:16:8f:9c:21:e6:18:5d:
                    2a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:09:4C:4C:A6:47:30:96:F5:DD:B3:69:61:46:FF:13:B6:2A:E1:A6
            X509v3 Authority Key Identifier:
                keyid:93:C0:58:A0:DF:17:73:01:24:59:16:4B:5A:80:D8:53:72:C7:E2:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:56:31:a7:f3:de:41:f3:49:5d:19:10:18:3f:9d:06:f6:b6:
         7b:28:5a:e2:36:39:93:6b:36:e8:4f:af:bf:e8:09:90:f3:8d:
         c4:48:1e:97:13:e1:04:df:91:d4:d8:72:26:47:95:a4:4a:8d:
         de:2b:55:6b:a9:57:87:07:1d:aa:9c:cc:6a:43:2d:57:11:6f:
         65:80:cc:11:b7:cb:8b:b8:bc:cc:bd:bb:39:cc:0a:76:99:d7:
         89:ea:c3:19:e8:bb:d9:7b:49:33:d3:bf:6f:59:9d:4e:57:4a:
         9b:90:04:fd:15:30:ee:9e:8b:d4:56:dc:cf:eb:27:9d:5b:a8:
         34:d5:24:06:48:d5:c4:6d:f7:ce:ce:24:08:09:8e:d9:41:d8:
         3d:07:92:65:b4:76:e8:7a:93:7b:a1:6f:95:f5:6d:41:2e:e7:
         e5:af:3c:48:29:9d:b7:64:4d:13:ef:68:e3:41:ec:88:e3:32:
         98:18:37:31:42:6b:a5:42:e7:7c:ea:2e:df:a7:39:56:40:58:
         13:e9:dc:10:0f:47:e7:49:cf:7c:03:5a:2b:a4:d9:05:60:93:
         c2:41:49:14:52:49:8d:47:d3:03:b2:76:91:77:43:30:a2:de:
         0b:14:38:f2:3d:92:c8:0a:35:cb:ba:66:c6:a3:5b:1d:a9:00:
         85:f8:98:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:49:36 2026 by rpki-client