Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft
File:                     k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft (raw, json)
Hash identifier:          Qa/MY6wc4lo1u7NvjB93g9nfe0H5Xa4R2/CKWd0R30s=
Subject key identifier:   BC:E4:11:53:3F:F2:F6:C8:ED:EA:8C:ED:46:8D:02:B5:2F:C4:04:2C
Authority key identifier: 93:C0:58:A0:DF:17:73:01:24:59:16:4B:5A:80:D8:53:72:C7:E2:92
Certificate issuer:       /CN=A91C56FB/serialNumber=93C058A0DF1773012459164B5A80D85372C7E292
Certificate serial:       1503
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft
Manifest number:          14DC
Signing time:             Tue 24 Mar 2026 16:45:42 +0000
Manifest this update:     Tue 24 Mar 2026 16:45:42 +0000
Manifest next update:     Tue 31 Mar 2026 16:45:42 +0000
Files and hashes:         1: k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl (hash: S+02v/noA+zSkaTh8Jrh0hYC4YK3exJiQ9qA2CyQhiM=)
                          2: B7F93F86E33F11EB9832A354C4F9AE02.roa (hash: nHdgdCvKY1Y9twOWSJSJeHzjweCUK60NzNjzUvm1MXs=)
                          3: B6DA2BD8E33F11EB9832A354C4F9AE02.roa (hash: Hr7OpNKmlMWAc1DIpsosFxnOhgjPdStDv79SYsuEpFU=)
                          4: 6BB6EF78EB5F11ECB4060F86C4F9AE02.roa (hash: +whKNCKBWu/fW8ZOLuLgPSDmcXDG1KA00Y9l8DL/PP0=)
                          5: 3A6D0CE4FF3E11F08F73BB4E4C6F56BC.roa (hash: AG7+A5Yb2KDtnoNzA36Acb2KghCB+Rzmi98/tCvvjZ4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl
                          rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 16:45:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5379 (0x1503)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C56FB, serialNumber=93C058A0DF1773012459164B5A80D85372C7E292
        Validity
            Not Before: Mar 24 16:45:42 2026 GMT
            Not After : Mar 31 16:45:42 2026 GMT
        Subject: CN=69c2bfb6-3c63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:26:97:8b:fb:e7:72:ab:30:58:b0:a9:e3:a8:
                    77:ec:89:8c:3b:71:3f:b3:6a:ee:17:51:7e:86:1a:
                    54:ff:b4:79:c5:53:fb:d9:1e:e0:9e:f4:8b:24:93:
                    39:78:e6:57:f6:a9:3f:a0:3c:ed:f1:bc:15:41:70:
                    e8:ce:dd:91:a8:0b:da:c0:2c:c7:99:54:8e:4c:b8:
                    f0:a2:57:60:d3:61:cc:68:c5:ae:e9:da:f3:86:8b:
                    88:e4:02:7a:8b:2a:15:d1:72:e3:c2:9a:53:6e:bf:
                    99:78:5c:45:53:6b:17:32:be:00:b9:53:1f:5d:88:
                    09:03:25:50:56:14:6a:5c:67:41:d0:c8:b8:1e:0c:
                    f9:80:7c:e4:e6:82:b4:01:2e:a1:20:7a:d5:b7:ef:
                    c5:08:7a:c1:b4:61:bd:3e:69:e9:82:63:c1:3b:e4:
                    d0:b1:0d:b2:4c:4d:ab:ca:1a:c9:09:e2:e1:5c:06:
                    3e:bc:cc:3e:82:25:e7:02:84:ae:45:c1:bd:69:27:
                    0b:40:c3:8f:64:29:de:84:ae:a3:ee:54:1d:c1:a3:
                    2f:b2:a6:21:e8:42:c5:f8:8d:65:77:a2:18:64:97:
                    34:9f:89:9a:50:66:32:82:7b:07:63:9a:44:8a:c8:
                    a5:76:96:d3:c8:55:d1:2b:59:ea:57:34:1e:c3:11:
                    f2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:E4:11:53:3F:F2:F6:C8:ED:EA:8C:ED:46:8D:02:B5:2F:C4:04:2C
            X509v3 Authority Key Identifier:
                keyid:93:C0:58:A0:DF:17:73:01:24:59:16:4B:5A:80:D8:53:72:C7:E2:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:18:40:c8:42:65:bb:62:04:67:dd:7d:6b:2b:d4:21:b8:06:
         6c:e4:da:7d:63:b1:55:2d:61:d1:19:d9:32:33:dc:a6:94:88:
         55:4d:39:28:11:46:9d:53:e0:97:90:12:0f:ee:26:9c:92:d4:
         7a:a8:b3:e6:b0:a8:8d:06:aa:30:3d:8e:37:84:c4:3a:7e:a6:
         d9:29:e3:cc:65:89:3a:eb:7c:6c:85:61:13:0f:87:9d:38:6c:
         b5:34:76:41:a5:0d:bd:0d:64:b0:13:ee:c3:96:cd:ea:12:98:
         b4:27:a4:bd:ad:c0:e3:e1:a9:86:09:09:80:1b:55:20:f6:a1:
         e3:41:a9:3b:92:6c:0a:5c:0d:7e:92:4b:34:ba:57:58:8f:ac:
         ce:5c:4f:10:98:95:e2:c8:ec:7e:da:77:2e:e9:95:90:70:5b:
         80:ee:be:79:58:f4:47:d5:9b:4b:b2:eb:c9:37:85:fb:c4:09:
         7f:24:c8:f0:85:c5:5a:01:fb:36:fb:a7:87:d2:a4:e0:ca:89:
         cf:ff:97:ce:91:99:81:d2:18:a5:a9:80:18:47:15:a9:fc:3d:
         3f:22:bf:7c:ce:b4:01:22:3e:10:bb:4b:3d:5a:e0:06:8c:ea:
         53:94:bd:6e:39:35:cf:61:22:af:ec:42:46:f5:2e:c8:f2:01:
         92:59:e6:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:30:14 2026 by rpki-client