Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.mft
File:                     8P2iSILGdaPGAdv6XAJjwjppKiI.mft (raw, json)
Hash identifier:          aevYlZHYOgG5FD1tjBLcnlXIqAV031f+mlxbg2AIM9A=
Subject key identifier:   0D:97:C4:ED:EF:D4:38:47:CF:6A:4B:82:FD:4A:4C:50:DD:74:F9:A2
Authority key identifier: F0:FD:A2:48:82:C6:75:A3:C6:01:DB:FA:5C:02:63:C2:3A:69:2A:22
Certificate issuer:       /CN=A91F18DE/serialNumber=F0FDA24882C675A3C601DBFA5C0263C23A692A22
Certificate serial:       0AA2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8P2iSILGdaPGAdv6XAJjwjppKiI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.mft
Manifest number:          0A9B
Signing time:             Tue 24 Mar 2026 19:19:20 +0000
Manifest this update:     Tue 24 Mar 2026 19:19:19 +0000
Manifest next update:     Tue 31 Mar 2026 19:19:19 +0000
Files and hashes:         1: 8P2iSILGdaPGAdv6XAJjwjppKiI.crl (hash: kErO5lGmAZmdFgmX1DSUak3KCDlDBLUmFIl55Z3craI=)
                          2: 8880996075DC11EA84E0A94CC4F9AE02.roa (hash: vo53YtzGeGIKeOoWqYEtmacMxuuNHq234aBr2CO7Z5w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.crl
                          rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8P2iSILGdaPGAdv6XAJjwjppKiI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:19:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2722 (0xaa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F18DE, serialNumber=F0FDA24882C675A3C601DBFA5C0263C23A692A22
        Validity
            Not Before: Mar 24 19:19:19 2026 GMT
            Not After : Mar 31 19:19:19 2026 GMT
        Subject: CN=69c2e3b8-c552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:74:97:d9:9a:f6:28:f0:e8:a7:c0:f3:95:ee:
                    eb:e7:a7:18:62:84:33:ce:2f:66:4d:35:45:4a:20:
                    0b:6c:c4:f3:5d:15:a7:ae:de:8c:b8:6c:23:01:68:
                    c4:1d:91:d3:0a:f3:36:65:47:5d:20:d1:75:85:80:
                    f5:32:56:a6:75:8b:80:f4:58:a5:5a:4a:72:0a:d8:
                    c7:7b:09:cb:cb:43:11:e9:25:bd:87:29:e9:f2:7c:
                    fe:df:8d:f1:35:2f:e2:c4:94:26:26:48:3c:83:1b:
                    62:0e:72:be:96:5a:2c:42:36:f8:57:df:d2:12:00:
                    72:df:59:75:d1:65:0d:b5:08:c2:6d:b3:84:5c:1e:
                    1d:be:eb:a8:94:42:a5:fb:0d:f3:e8:40:c6:7e:30:
                    95:ee:7c:ec:34:b5:11:48:a5:9e:3a:81:c8:e3:ab:
                    2f:e9:2f:99:45:03:e3:44:49:f6:1e:eb:e3:0e:0e:
                    4e:8e:5f:f4:be:b4:b9:da:0b:75:91:b9:6a:77:9b:
                    1c:dc:9a:dc:b7:bd:94:66:31:03:bd:dc:40:02:7a:
                    8f:86:ad:19:4c:44:ee:22:e0:a9:57:5a:6c:68:9d:
                    d4:6f:22:7a:22:7d:37:8e:5d:27:cd:9a:55:25:3b:
                    e4:6d:00:fb:f3:b3:73:99:7d:15:90:c1:b8:2b:49:
                    bd:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:97:C4:ED:EF:D4:38:47:CF:6A:4B:82:FD:4A:4C:50:DD:74:F9:A2
            X509v3 Authority Key Identifier:
                keyid:F0:FD:A2:48:82:C6:75:A3:C6:01:DB:FA:5C:02:63:C2:3A:69:2A:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8P2iSILGdaPGAdv6XAJjwjppKiI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:a8:3c:2e:45:53:00:95:2c:29:95:cb:0c:40:d8:ca:96:f3:
         fe:26:22:7e:62:49:c6:99:68:2b:dc:61:12:19:04:fa:a5:48:
         6e:47:b1:53:8d:ee:d1:db:5b:68:b2:46:e6:83:cc:86:1b:d4:
         e8:4e:7c:25:19:09:f1:27:c1:19:4d:99:41:ce:d9:b7:ab:5f:
         7f:de:80:80:21:6f:94:80:e2:b2:60:77:cf:c4:5f:68:15:7b:
         b1:c3:f2:a5:b9:5f:6b:0d:c5:d2:d5:78:04:62:fd:38:8a:2b:
         0e:a4:40:6a:d9:2d:40:1a:d5:1c:68:e0:64:86:3c:1a:cf:c6:
         81:3e:6f:40:80:ff:c6:ca:45:79:f2:1a:13:f8:af:e4:96:11:
         bc:b9:c2:52:48:5e:28:6a:2b:a0:22:b4:40:d8:38:2d:79:5d:
         4d:43:dc:24:c8:7d:2a:b3:33:61:71:b0:69:e5:92:b8:2f:de:
         43:e8:09:c9:4d:69:fd:26:e1:ac:c5:46:a7:2f:cd:0f:70:8c:
         2a:e8:05:51:54:7f:d4:a7:0b:0c:96:09:9c:90:d0:2c:5b:ff:
         a2:50:af:86:1a:aa:90:41:82:a3:a5:f6:c3:0b:2e:fc:c7:2f:
         b6:26:71:03:df:1f:87:8c:e4:49:2a:51:89:e9:f5:d6:8f:88:
         b9:18:3b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:52:27 2026 by rpki-client