Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft
File:                     s8iROAA2kV3l6qhM8TOrOzWz6dM.mft (raw, json)
Hash identifier:          Mug7vvk7ZKDSfKf59oFhihBmyXcTFywY3ZtXbATCsvA=
Subject key identifier:   8A:50:A6:56:71:DB:3B:9B:74:A6:DA:F0:33:FF:8B:5C:4D:E6:83:DC
Authority key identifier: B3:C8:91:38:00:36:91:5D:E5:EA:A8:4C:F1:33:AB:3B:35:B3:E9:D3
Certificate issuer:       /CN=A91D891D/serialNumber=B3C891380036915DE5EAA84CF133AB3B35B3E9D3
Certificate serial:       0807
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8iROAA2kV3l6qhM8TOrOzWz6dM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft
Manifest number:          0D8C
Signing time:             Tue 24 Mar 2026 20:54:20 +0000
Manifest this update:     Tue 24 Mar 2026 20:54:20 +0000
Manifest next update:     Tue 31 Mar 2026 20:54:19 +0000
Files and hashes:         1: s8iROAA2kV3l6qhM8TOrOzWz6dM.crl (hash: W96drQquwJ9Lt2ZT0EtFhQCokTDlBhbhKIE490PVU1o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.crl
                          rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8iROAA2kV3l6qhM8TOrOzWz6dM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 20:54:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2055 (0x807)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D891D, serialNumber=B3C891380036915DE5EAA84CF133AB3B35B3E9D3
        Validity
            Not Before: Mar 24 20:54:20 2026 GMT
            Not After : Mar 31 20:54:19 2026 GMT
        Subject: CN=69c2f9fc-3e78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5a:54:46:c2:13:18:a4:53:1f:1f:fd:7a:f1:
                    1e:5a:4e:20:2c:b3:93:c2:e8:d8:15:b6:c5:c5:81:
                    be:d4:38:21:49:63:c6:d8:4e:87:53:fb:65:20:73:
                    db:62:67:7e:c2:86:a3:b2:cf:65:68:70:f5:64:b6:
                    ae:ca:70:9b:99:38:94:ae:d9:ad:b7:a4:e4:22:fe:
                    c5:c7:06:52:75:8c:41:a3:1c:54:2a:7b:d5:9c:b7:
                    c8:41:25:72:68:af:9c:e1:4d:cf:c6:e2:f8:7a:88:
                    c3:66:18:86:9c:a4:89:a9:17:ed:66:5d:f3:62:a9:
                    c5:00:33:a5:f5:01:2c:98:ad:6d:8b:98:b3:cb:dc:
                    f4:7a:ac:de:56:16:f4:91:ab:30:bb:7d:d2:d3:98:
                    64:ea:ca:dd:2b:0c:ef:21:99:37:7c:fc:ad:64:1a:
                    ad:f7:4e:f7:83:96:68:7c:45:a4:cf:09:ab:e6:29:
                    c7:21:c6:cc:ad:b0:2b:56:a6:b4:e4:5c:76:b0:16:
                    5f:ee:2b:1e:fa:38:72:e6:da:99:db:ef:db:4c:ab:
                    da:b1:20:ef:e9:e4:66:71:f9:c9:4b:c7:a0:60:c9:
                    fa:b9:4a:93:c6:19:a1:ac:30:25:b8:8f:c8:43:70:
                    50:3f:73:dd:b1:d1:ab:f4:c4:cc:ed:ac:da:7a:20:
                    64:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:50:A6:56:71:DB:3B:9B:74:A6:DA:F0:33:FF:8B:5C:4D:E6:83:DC
            X509v3 Authority Key Identifier:
                keyid:B3:C8:91:38:00:36:91:5D:E5:EA:A8:4C:F1:33:AB:3B:35:B3:E9:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8iROAA2kV3l6qhM8TOrOzWz6dM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:9b:70:7f:be:60:80:1a:3e:75:e8:bd:69:f2:5a:3b:da:e2:
         2f:a4:cc:0e:e6:64:f6:be:be:9c:6f:98:57:fc:10:91:0c:67:
         25:c4:40:ad:1c:cb:ce:a6:7d:06:00:f4:9f:b0:6f:9d:85:78:
         d4:b3:9d:13:a9:a1:c3:66:a4:20:56:48:66:f8:97:2e:56:0d:
         bc:9a:71:e1:b2:03:97:ef:07:dd:80:f3:e0:4a:7d:0a:59:95:
         64:57:13:a1:08:1c:1c:80:50:ef:d1:41:a4:b7:35:20:a2:9e:
         4d:c6:30:28:8a:40:00:63:7b:36:c1:e5:76:3c:bd:6e:17:06:
         5a:ce:be:47:a9:77:df:5b:f8:9b:44:a4:30:dd:61:01:f5:fc:
         52:45:58:19:b8:9e:ae:16:0b:8e:36:f6:45:8b:1e:c8:27:e2:
         b5:d3:46:a9:48:17:ab:c8:c9:68:20:3e:0e:ab:1c:97:22:0d:
         01:8c:cd:f1:a2:48:0c:4e:6a:48:8f:07:3c:94:18:20:66:0c:
         be:60:75:49:4d:b3:a6:a0:06:40:66:f8:4c:46:1c:f5:f8:28:
         c4:0c:6a:78:f1:a9:df:5c:08:66:0f:79:17:42:1d:4a:bb:d0:
         9d:18:4d:b1:00:d5:a5:9d:ca:cc:77:b7:c3:74:90:45:b7:52:
         6a:19:e3:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:02:09 2026 by rpki-client