Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D671F/1EDC10BC171E11E8856BC443C4F9AE02/s8j34GTam1qm6nlgF-xg0okDeCo.mft
File:                     s8j34GTam1qm6nlgF-xg0okDeCo.mft (raw, json)
Hash identifier:          1MKvw9d0Hm3O5JO93KslDibzs/AKkhYVkMotyL0k0yc=
Subject key identifier:   FA:03:E2:FF:43:7B:F6:C5:B2:B4:73:02:C9:A3:97:3B:84:DB:0E:DB
Authority key identifier: B3:C8:F7:E0:64:DA:9B:5A:A6:EA:79:60:17:EC:60:D2:89:03:78:2A
Certificate issuer:       /CN=A91D671F/serialNumber=B3C8F7E064DA9B5AA6EA796017EC60D28903782A
Certificate serial:       16BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8j34GTam1qm6nlgF-xg0okDeCo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D671F/1EDC10BC171E11E8856BC443C4F9AE02/s8j34GTam1qm6nlgF-xg0okDeCo.mft
Manifest number:          16A9
Signing time:             Thu 26 Mar 2026 16:38:58 +0000
Manifest this update:     Thu 26 Mar 2026 16:38:57 +0000
Manifest next update:     Thu 02 Apr 2026 16:38:57 +0000
Files and hashes:         1: s8j34GTam1qm6nlgF-xg0okDeCo.crl (hash: MQWXYn0ITppmP+KZKw9IXJNQnYBho1uiweewwFcZA6Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D671F/1EDC10BC171E11E8856BC443C4F9AE02/s8j34GTam1qm6nlgF-xg0okDeCo.crl
                          rsync://rpki.apnic.net/member_repository/A91D671F/1EDC10BC171E11E8856BC443C4F9AE02/s8j34GTam1qm6nlgF-xg0okDeCo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8j34GTam1qm6nlgF-xg0okDeCo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 16:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5822 (0x16be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D671F, serialNumber=B3C8F7E064DA9B5AA6EA796017EC60D28903782A
        Validity
            Not Before: Mar 26 16:38:57 2026 GMT
            Not After : Apr  2 16:38:57 2026 GMT
        Subject: CN=69c56122-5b8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d4:5a:58:72:9e:dc:3a:29:1e:c8:d2:5d:3e:
                    3b:bc:fe:d3:f8:9a:8f:c2:6c:0c:3b:a9:cd:07:5d:
                    3c:c7:69:a5:a0:1c:1f:49:4a:6a:fe:87:88:d4:da:
                    bd:98:0f:8b:3c:95:20:eb:6b:d4:06:21:44:9f:7d:
                    4a:d8:fe:61:14:03:ae:19:16:5e:1b:4f:a1:1d:45:
                    2f:5a:ba:8b:eb:5b:1a:63:7a:e1:fd:f2:52:b2:d1:
                    97:d9:5a:22:15:8d:56:e0:8c:43:a6:23:b0:1a:c3:
                    8e:72:2e:ea:b2:45:50:4b:1b:83:a4:d9:7a:c4:cb:
                    9b:38:75:7a:7a:17:06:89:1d:e8:b7:1e:0f:d9:4e:
                    cb:9e:3a:5b:dc:6a:c7:2b:a6:e6:72:22:35:28:c8:
                    ab:74:b7:d6:35:cd:58:56:b5:2b:27:d0:86:47:ec:
                    f3:83:5e:43:17:e1:1d:0f:f1:54:a5:22:32:77:67:
                    cf:98:82:a4:a2:8a:07:bf:b3:a1:bf:7b:47:ba:32:
                    f8:16:c9:4c:da:ad:34:c6:1c:b1:8a:98:8a:cb:da:
                    ab:95:96:80:7f:12:36:02:b0:00:a9:06:8c:71:c2:
                    28:2b:fb:29:54:59:72:b1:18:b4:e0:33:77:7b:f7:
                    20:a6:b4:c8:36:bd:2a:26:c5:ec:61:32:82:04:0c:
                    a7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:03:E2:FF:43:7B:F6:C5:B2:B4:73:02:C9:A3:97:3B:84:DB:0E:DB
            X509v3 Authority Key Identifier:
                keyid:B3:C8:F7:E0:64:DA:9B:5A:A6:EA:79:60:17:EC:60:D2:89:03:78:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D671F/1EDC10BC171E11E8856BC443C4F9AE02/s8j34GTam1qm6nlgF-xg0okDeCo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8j34GTam1qm6nlgF-xg0okDeCo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D671F/1EDC10BC171E11E8856BC443C4F9AE02/s8j34GTam1qm6nlgF-xg0okDeCo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:89:74:d1:6a:08:0d:5f:70:8c:11:68:e7:e1:77:7b:b8:69:
         67:6d:df:ba:29:46:6d:01:08:01:e7:d3:49:75:cb:6d:19:06:
         8f:5f:10:1d:f3:7a:3b:f6:77:a9:d0:07:45:b7:bb:ed:6f:80:
         83:a4:37:3f:fe:98:76:1a:81:74:30:4f:73:2d:42:d9:90:55:
         ba:2f:e2:42:bb:e4:e5:cb:40:c0:15:e5:34:73:d8:1e:8c:fb:
         4a:be:28:6b:4a:35:93:37:1f:d9:cc:51:06:46:7e:7b:7a:6b:
         d3:22:c3:cf:02:e2:4f:59:9b:25:36:8e:c7:0a:35:65:f0:bf:
         ad:49:24:ea:c5:29:dd:4f:2f:74:99:cb:04:17:4c:45:43:23:
         53:62:76:50:69:10:eb:be:d9:3d:88:ca:c8:ab:2e:c4:e0:6e:
         e7:fe:04:36:c3:8d:ff:17:90:94:60:45:ed:4b:3b:86:53:ec:
         19:1d:58:56:c5:ba:31:e8:4d:c6:88:f2:12:18:7f:ca:8e:78:
         5f:20:ea:2e:b0:5d:34:19:eb:c0:ce:3b:ca:a5:53:fa:88:d1:
         9f:d6:85:96:b7:ca:0f:8b:f4:a0:8c:38:8f:03:ac:19:85:87:
         dc:30:19:ff:60:45:1e:5f:60:dc:3c:a7:19:a3:28:75:19:16:
         80:67:43:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:17:45 2026 by rpki-client