Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDF78/F0309BA647C611F19E38693EB1833773/8kSBXVs5HiAAt4ypbhkwIP-QIlg.mft
File:                     8kSBXVs5HiAAt4ypbhkwIP-QIlg.mft (raw, json)
Hash identifier:          QrJfS2J3gnT89xYgw2QH/1PorNHW4u7OI8IphNMi9MI=
Subject key identifier:   9B:09:88:B0:92:74:7B:02:6E:EE:41:51:56:40:2C:17:29:F7:18:0B
Authority key identifier: F2:44:81:5D:5B:39:1E:20:00:B7:8C:A9:6E:19:30:20:FF:90:22:58
Certificate issuer:       /CN=A91CDF78/serialNumber=F244815D5B391E2000B78CA96E193020FF902258
Certificate serial:       08
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kSBXVs5HiAAt4ypbhkwIP-QIlg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDF78/F0309BA647C611F19E38693EB1833773/8kSBXVs5HiAAt4ypbhkwIP-QIlg.mft
Manifest number:          07
Signing time:             Mon 11 May 2026 09:24:24 +0000
Manifest this update:     Mon 11 May 2026 09:24:23 +0000
Manifest next update:     Mon 18 May 2026 09:24:23 +0000
Files and hashes:         1: 8kSBXVs5HiAAt4ypbhkwIP-QIlg.crl (hash: qrj3YqEpjwkHRgU8moDG5zZBm+CMAeNhKSm77VBx4aI=)
                          2: 46165CDE490411F1BC93ABE395833773.roa (hash: X96VcqcjafQHkS8RXd769VXGiUvTLL5bk9V9PsYGSzw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDF78/F0309BA647C611F19E38693EB1833773/8kSBXVs5HiAAt4ypbhkwIP-QIlg.crl
                          rsync://rpki.apnic.net/member_repository/A91CDF78/F0309BA647C611F19E38693EB1833773/8kSBXVs5HiAAt4ypbhkwIP-QIlg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kSBXVs5HiAAt4ypbhkwIP-QIlg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 09:24:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDF78, serialNumber=F244815D5B391E2000B78CA96E193020FF902258
        Validity
            Not Before: May 11 09:24:23 2026 GMT
            Not After : May 18 09:24:23 2026 GMT
        Subject: CN=6a01a048-aa40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:13:3f:8c:3c:b0:aa:e6:07:eb:f5:b1:6e:78:
                    f8:c7:19:21:65:2f:4f:f7:5a:2e:cb:a5:f2:f8:f2:
                    ff:d4:c3:66:9c:b9:ce:9e:9e:a9:15:1b:a6:93:ad:
                    3c:6a:2c:6a:01:23:84:0d:98:f1:82:96:7b:c8:72:
                    3a:48:02:bf:29:bb:26:a1:5e:bf:cf:04:07:76:41:
                    e6:e6:ac:a8:be:72:0b:46:0b:ce:03:7a:81:24:75:
                    65:18:b4:10:be:35:e4:46:fc:4d:7c:48:36:78:dc:
                    e6:03:75:f3:84:3e:83:22:8a:39:f7:ec:aa:48:df:
                    e5:51:d1:3a:b9:bd:0c:8e:75:c6:11:ae:bf:59:0b:
                    2d:a5:f4:9b:13:50:10:0b:bd:8c:2a:7d:68:a2:05:
                    d9:94:08:36:3c:78:62:1d:8b:d4:1e:7b:4b:cc:b7:
                    76:33:3a:68:e6:f4:fe:9b:a6:39:f1:3b:ea:43:c4:
                    a5:11:60:78:8f:64:8e:2c:70:73:90:28:b3:9d:aa:
                    99:37:62:9c:52:d4:77:b5:da:6b:a4:bb:b0:6d:ac:
                    c7:fe:5b:3c:3f:40:fb:ee:a0:1d:22:41:dc:87:66:
                    68:14:5c:2c:51:b3:fd:a3:f6:ba:02:1a:a5:19:1e:
                    cf:c7:ee:3a:53:96:84:ee:87:2d:39:3b:2e:57:af:
                    94:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:09:88:B0:92:74:7B:02:6E:EE:41:51:56:40:2C:17:29:F7:18:0B
            X509v3 Authority Key Identifier:
                keyid:F2:44:81:5D:5B:39:1E:20:00:B7:8C:A9:6E:19:30:20:FF:90:22:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDF78/F0309BA647C611F19E38693EB1833773/8kSBXVs5HiAAt4ypbhkwIP-QIlg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kSBXVs5HiAAt4ypbhkwIP-QIlg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDF78/F0309BA647C611F19E38693EB1833773/8kSBXVs5HiAAt4ypbhkwIP-QIlg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:be:fe:46:9f:99:06:2c:54:f9:a5:34:d7:6a:92:80:03:a8:
         2e:72:ca:0b:71:68:43:b5:b1:98:06:63:53:39:db:4b:b0:f4:
         aa:ac:a8:68:08:9d:83:19:31:9a:45:37:ad:f1:d4:a2:79:e6:
         fd:c0:71:3f:09:22:2a:0f:d2:0e:b8:28:37:82:7a:87:43:ac:
         54:f6:fe:b8:2f:8a:e2:5a:f0:fe:d4:3c:d4:ad:89:c6:ac:05:
         a0:64:ec:12:89:a5:d8:f4:00:46:2b:47:ed:c7:20:60:8d:20:
         72:d0:23:0a:8a:12:4c:a9:1c:f1:f4:f2:b9:53:6c:fc:64:e9:
         c0:bf:37:13:5a:81:a3:ab:af:e5:b8:72:a8:f1:0b:9d:89:d2:
         38:47:c9:d2:62:7b:07:1d:03:56:10:f1:42:80:25:f0:d4:6c:
         0b:f6:d3:99:97:ee:10:4e:b1:d5:d3:b1:d6:2a:6c:d2:ff:d2:
         f2:b8:21:42:74:57:1f:0a:60:37:21:96:78:f4:10:90:a9:64:
         b2:89:88:7f:dc:aa:95:a8:2d:5d:e6:e9:60:34:6f:cb:0f:21:
         4d:48:fb:3c:a7:38:28:15:42:9b:b3:1b:27:0e:50:a2:59:96:
         83:7d:c1:5b:d2:d8:6d:f4:5c:65:a0:61:45:04:cf:2f:ed:ef:
         86:31:6d:4a
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
REY3ODExMC8GA1UEBRMoRjI0NDgxNUQ1QjM5MUUyMDAwQjc4Q0E5NkUxOTMwMjBG
RjkwMjI1ODAeFw0yNjA1MTEwOTI0MjNaFw0yNjA1MTgwOTI0MjNaMBgxFjAUBgNV
BAMTDTZhMDFhMDQ4LWFhNDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC9Ez+MPLCq5gfr9bFuePjHGSFlL0/3Wi7LpfL48v/Uw2acuc6enqkVG6aTrTxq
LGoBI4QNmPGClnvIcjpIAr8puyahXr/PBAd2QebmrKi+cgtGC84DeoEkdWUYtBC+
NeRG/E18SDZ43OYDdfOEPoMiijn37KpI3+VR0Tq5vQyOdcYRrr9ZCy2l9JsTUBAL
vYwqfWiiBdmUCDY8eGIdi9Qee0vMt3YzOmjm9P6bpjnxO+pDxKURYHiPZI4scHOQ
KLOdqpk3YpxS1He12muku7BtrMf+Wzw/QPvuoB0iQdyHZmgUXCxRs/2j9roCGqUZ
Hs/H7jpTloTuhy05Oy5Xr5R7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUmwmIsJJ0
ewJu7kFRVkAsFyn3GAswHwYDVR0jBBgwFoAU8kSBXVs5HiAAt4ypbhkwIP+QIlgw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNERjc4L0YwMzA5QkE2NDdD
NjExRjE5RTM4NjkzRUIxODMzNzczLzhrU0JYVnM1SGlBQXQ0eXBiaGt3SVAtUUls
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvOGtTQlhWczVIaUFBdDR5cGJoa3dJUC1RSWxnLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE
Rjc4L0YwMzA5QkE2NDdDNjExRjE5RTM4NjkzRUIxODMzNzczLzhrU0JYVnM1SGlB
QXQ0eXBiaGt3SVAtUUlsZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQC4vv5Gn5kGLFT5pTTXapKAA6gucsoLcWhDtbGYBmNTOdtLsPSqrKhoCJ2DGTGa
RTet8dSieeb9wHE/CSIqD9IOuCg3gnqHQ6xU9v64L4riWvD+1DzUrYnGrAWgZOwS
iaXY9ABGK0ftxyBgjSBy0CMKihJMqRzx9PK5U2z8ZOnAvzcTWoGjq6/luHKo8Qud
idI4R8nSYnsHHQNWEPFCgCXw1GwL9tOZl+4QTrHV07HWKmzS/9LyuCFCdFcfCmA3
IZZ49BCQqWSyiYh/3KqVqC1d5ulgNG/LDyFNSPs8pzgoFUKbsxsnDlCiWZaDfcFb
0tht9FxloGFFBM8v7e+GMW1K
-----END CERTIFICATE-----
Generated at Wed May 13 02:13:40 2026 by rpki-client