Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft
File:                     x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft (raw, json)
Hash identifier:          wwTZPxYoHcNwNVgaZtGPwU9Q5eLRGahtnVQTspHEUyY=
Subject key identifier:   B5:1F:A4:42:9F:B6:37:D9:70:5D:DA:1B:1A:85:B4:39:80:44:B0:89
Authority key identifier: C7:CF:94:3E:3A:76:4F:37:C0:03:CD:43:5A:2B:85:43:BC:E4:76:09
Certificate issuer:       /CN=A91C85E9/serialNumber=C7CF943E3A764F37C003CD435A2B8543BCE47609
Certificate serial:       124A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8-UPjp2TzfAA81DWiuFQ7zkdgk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft
Manifest number:          1232
Signing time:             Thu 26 Mar 2026 17:04:54 +0000
Manifest this update:     Thu 26 Mar 2026 17:04:54 +0000
Manifest next update:     Thu 02 Apr 2026 17:04:54 +0000
Files and hashes:         1: x8-UPjp2TzfAA81DWiuFQ7zkdgk.crl (hash: uWQiPkzSgwogrX5Fbi3k/51q0kx1KFOB+tJDFIleTTY=)
                          2: 8446564EF96611E8BE431B17C4F9AE02.roa (hash: yX06bXibRyqYQ53QWArbh3lavUZOOzpp/mZPOnVc/hA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.crl
                          rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8-UPjp2TzfAA81DWiuFQ7zkdgk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 17:04:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4682 (0x124a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C85E9, serialNumber=C7CF943E3A764F37C003CD435A2B8543BCE47609
        Validity
            Not Before: Mar 26 17:04:54 2026 GMT
            Not After : Apr  2 17:04:54 2026 GMT
        Subject: CN=69c56736-64e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9d:a5:03:16:4f:06:51:b4:75:3c:a8:44:31:
                    4a:65:85:de:b9:47:ee:f0:9e:ed:87:e5:e5:c3:05:
                    b6:c7:57:d7:a3:ba:0b:58:96:53:a7:84:07:e2:c1:
                    e3:6d:94:53:c7:72:88:4f:fd:94:8e:14:3c:d8:82:
                    8e:e0:59:f0:a3:5d:be:d7:5c:00:ca:32:14:ff:5c:
                    47:93:df:0f:6f:fa:85:24:5a:83:7c:fd:71:da:92:
                    a6:aa:55:f9:f3:a9:7a:27:b9:3f:89:91:dd:05:ae:
                    05:ca:db:3d:7b:ef:89:4f:b5:36:c2:8e:2a:97:c8:
                    2a:b3:61:de:91:d1:39:fe:b5:64:c2:b5:e5:81:f9:
                    6a:87:25:48:e3:5b:45:0f:d4:0f:66:2d:e2:e7:99:
                    8c:cc:7f:b4:ed:b3:8f:8c:04:a2:dc:5f:0a:c3:7a:
                    c8:42:e8:41:a0:1a:38:7a:26:69:e9:b7:f3:de:be:
                    d4:c5:da:5a:a4:e1:09:79:8b:f4:80:3d:2f:3b:61:
                    7c:91:17:94:01:86:84:72:30:2e:76:0a:f0:9d:3d:
                    e4:35:b0:d7:99:2b:0d:df:05:1b:48:80:d4:8d:91:
                    f9:e2:80:4e:71:5e:b3:71:f1:78:51:0c:dc:90:05:
                    0b:72:9b:ae:dc:e4:a8:79:4f:60:09:5f:c2:2f:12:
                    f2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:1F:A4:42:9F:B6:37:D9:70:5D:DA:1B:1A:85:B4:39:80:44:B0:89
            X509v3 Authority Key Identifier:
                keyid:C7:CF:94:3E:3A:76:4F:37:C0:03:CD:43:5A:2B:85:43:BC:E4:76:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8-UPjp2TzfAA81DWiuFQ7zkdgk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:1f:78:3f:60:42:f6:f4:28:28:b3:d1:b1:15:54:b6:17:9f:
         b2:70:b8:cf:3d:4f:64:89:b2:10:a7:07:25:00:10:7d:3f:d0:
         72:01:c2:b9:86:b4:d0:e8:dd:3e:bd:0d:44:b6:d8:8d:a8:94:
         ea:63:93:34:2b:d8:22:7f:16:e8:4d:a3:4e:25:bf:17:46:47:
         cc:75:1c:60:65:6e:9c:4a:da:88:68:19:c2:a5:d3:1c:b8:7e:
         8c:11:67:d5:68:4f:7d:48:d8:b6:72:f5:00:34:c7:72:60:1e:
         b0:9b:69:c9:00:a4:95:95:ca:30:5c:30:a2:36:6c:7f:f5:99:
         6b:47:1e:fd:57:b9:5e:61:41:80:67:af:91:dc:77:df:61:68:
         c2:1f:0e:a3:f8:7e:21:48:ff:16:d6:7c:6f:15:b5:35:fd:83:
         52:20:09:af:43:a0:f8:e1:75:2b:c0:d4:95:2b:9d:6d:9d:28:
         3a:d0:a3:22:5e:00:59:dc:4a:83:07:8c:5b:46:c4:f8:c4:49:
         f7:a3:96:21:f6:4a:75:2e:81:a5:96:8e:24:7a:d1:49:4d:ca:
         c3:ff:34:73:91:13:c8:9d:2b:34:b7:28:2c:4f:24:0a:dd:99:
         0b:81:e7:92:81:8b:d9:8e:b6:e8:1c:5f:74:cf:82:e9:ee:83:
         9a:dd:51:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:14:30 2026 by rpki-client