Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft
File:                     08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft (raw, json)
Hash identifier:          3YqhNHwTFwXm0pzCY7BJka6PQVPF9Ppmmt2DT6QzVuI=
Subject key identifier:   79:27:8A:9D:37:72:61:01:52:7C:1E:74:D8:31:CD:A4:61:B5:CF:76
Authority key identifier: D3:C6:22:E7:90:F1:DE:F1:69:28:BB:E5:54:18:17:27:CF:8C:88:F8
Certificate issuer:       /CN=A91D1234/serialNumber=D3C622E790F1DEF16928BBE554181727CF8C88F8
Certificate serial:       03B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft
Manifest number:          03AF
Signing time:             Fri 27 Mar 2026 00:27:38 +0000
Manifest this update:     Fri 27 Mar 2026 00:27:38 +0000
Manifest next update:     Fri 03 Apr 2026 00:27:38 +0000
Files and hashes:         1: 08Yi55Dx3vFpKLvlVBgXJ8-MiPg.crl (hash: JI7IT3Nrn0UxMBdyKi8v8ExWjfjbqCmA4tMXe0fdpfs=)
                          2: 84A0C6B4D02811ECB2472344C4F9AE02.roa (hash: WbGGMYVbpJXDnL0JcrVJ6qdZ3VyHvFVqCSZIT3Dtr7M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.crl
                          rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 00:27:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 950 (0x3b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1234, serialNumber=D3C622E790F1DEF16928BBE554181727CF8C88F8
        Validity
            Not Before: Mar 27 00:27:38 2026 GMT
            Not After : Apr  3 00:27:38 2026 GMT
        Subject: CN=69c5cefa-1a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:52:42:18:e7:3c:bf:6f:29:92:79:54:8c:c3:
                    8e:f3:84:b3:00:10:48:97:3a:80:97:73:5a:ca:ce:
                    bb:20:6e:2e:4b:90:f8:74:ef:0a:6c:95:8d:22:3d:
                    95:6a:47:00:3b:c6:aa:97:af:6b:a4:7d:b2:c4:bb:
                    af:82:fb:da:82:ac:c3:15:78:73:35:19:cd:61:29:
                    c2:b2:0a:66:57:0d:2a:a2:83:a9:0f:7a:a9:9a:c8:
                    eb:ba:18:21:ad:ac:da:0b:fc:0d:ca:16:b4:bb:4e:
                    6b:c0:ee:85:79:f3:ec:1a:35:a1:10:e2:df:1c:68:
                    07:3b:e5:61:0c:aa:9a:9e:67:00:2e:86:ef:c9:f5:
                    86:e8:0d:f6:df:ee:cf:04:ab:bc:6a:b0:a7:cb:8a:
                    6a:ba:7e:e6:f5:93:b2:fe:88:fd:8d:5f:9c:7e:29:
                    17:be:7b:c2:be:ed:52:58:c0:a9:59:68:b6:65:f7:
                    76:d2:53:7f:df:a3:a0:20:74:11:68:d8:6b:21:a0:
                    0f:cf:6b:61:b0:36:34:2c:d7:70:be:4d:f0:ec:f1:
                    02:8e:02:a8:5a:50:94:a1:90:af:d2:90:0c:f1:d3:
                    41:34:fd:80:49:fb:19:1d:34:41:c4:4f:51:9c:02:
                    cf:22:98:d0:b4:ed:0f:e6:08:ad:c4:e8:3d:b0:c0:
                    c1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:27:8A:9D:37:72:61:01:52:7C:1E:74:D8:31:CD:A4:61:B5:CF:76
            X509v3 Authority Key Identifier:
                keyid:D3:C6:22:E7:90:F1:DE:F1:69:28:BB:E5:54:18:17:27:CF:8C:88:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:bb:f9:8d:76:ef:49:93:da:ee:e8:0d:6d:76:c8:81:e6:3c:
         14:14:08:b4:c6:1b:06:ae:63:36:50:21:c0:d7:5a:bb:60:76:
         06:0b:d9:48:17:0d:bc:77:2a:34:bd:3d:f4:9b:ae:87:1b:03:
         6a:ea:07:b9:fb:29:c9:59:1c:b8:1d:da:8d:28:55:ca:7b:ab:
         34:aa:5c:ba:e9:b1:21:41:66:0e:ab:fb:6b:b6:45:51:da:0d:
         d9:7f:57:f4:3b:8f:df:33:17:92:ca:d0:6f:38:d4:8b:ab:b0:
         ab:38:6f:b9:ff:2e:9c:b6:06:1d:f4:b6:e1:2d:53:d6:39:43:
         d7:82:04:de:75:e6:20:c8:1d:c6:26:34:73:96:49:29:80:c3:
         7d:be:8b:30:a3:d4:7c:00:21:eb:c8:ad:cd:b0:5a:89:0d:a6:
         94:0b:fb:6a:dc:75:99:fe:6a:07:d4:8c:d5:30:d2:a9:52:fe:
         2d:3f:7b:db:61:4e:c2:66:92:c7:00:7f:1e:90:bd:1d:e5:2a:
         32:1d:0a:c0:c4:bc:9d:3e:4d:e5:35:66:f5:78:e5:1b:e5:0a:
         ab:8f:0c:9c:20:65:d8:9c:0c:bd:7d:53:ab:60:e6:43:c7:40:
         6e:f6:7d:47:a1:89:d0:65:01:2c:bc:df:9f:17:ac:bc:86:10:
         50:2a:b7:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 08:43:45 2026 by rpki-client