Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9CD7/ABEB876083D511EE988DB744C4F9AE02/8fFj2FT-czviVA83o0T_alpayfY.mft
File:                     8fFj2FT-czviVA83o0T_alpayfY.mft (raw, json)
Hash identifier:          LvwkeLmdHSlpHtVIuli/89nHsMemXCOGroqRCtu+eag=
Subject key identifier:   50:05:11:6D:5B:25:5D:00:34:B2:5E:8F:55:CE:20:DB:B1:1E:65:F0
Authority key identifier: F1:F1:63:D8:54:FE:73:3B:E2:54:0F:37:A3:44:FF:6A:5A:5A:C9:F6
Certificate issuer:       /CN=A91F9CD7/serialNumber=F1F163D854FE733BE2540F37A344FF6A5A5AC9F6
Certificate serial:       01C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8fFj2FT-czviVA83o0T_alpayfY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9CD7/ABEB876083D511EE988DB744C4F9AE02/8fFj2FT-czviVA83o0T_alpayfY.mft
Manifest number:          01C0
Signing time:             Wed 25 Mar 2026 03:38:08 +0000
Manifest this update:     Wed 25 Mar 2026 03:38:08 +0000
Manifest next update:     Wed 01 Apr 2026 03:38:08 +0000
Files and hashes:         1: 8fFj2FT-czviVA83o0T_alpayfY.crl (hash: VOKVycp/ulmJJXzmR+I8ISdZ8XIdWcB5m3+PO1uZcbM=)
                          2: E84C2B9083D711EE871C4048C4F9AE02.roa (hash: ulWmZR//Cp/5ZRhCUJXQuusn5PcfSj8MZAxi2Z3a2FQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9CD7/ABEB876083D511EE988DB744C4F9AE02/8fFj2FT-czviVA83o0T_alpayfY.crl
                          rsync://rpki.apnic.net/member_repository/A91F9CD7/ABEB876083D511EE988DB744C4F9AE02/8fFj2FT-czviVA83o0T_alpayfY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8fFj2FT-czviVA83o0T_alpayfY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:38:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 455 (0x1c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9CD7, serialNumber=F1F163D854FE733BE2540F37A344FF6A5A5AC9F6
        Validity
            Not Before: Mar 25 03:38:08 2026 GMT
            Not After : Apr  1 03:38:08 2026 GMT
        Subject: CN=69c358a0-c9c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:aa:80:5c:99:ea:da:41:66:23:70:3e:c8:9c:
                    53:b4:86:27:27:19:75:47:69:78:0f:8a:11:6f:d5:
                    8a:ae:e6:59:d6:2a:9e:8d:24:c4:38:26:6c:1a:01:
                    e3:1b:a8:53:6f:89:cc:c1:f3:3a:2c:fc:62:07:25:
                    13:c7:9c:f0:14:7e:be:f7:42:11:89:0c:3c:4f:95:
                    23:34:9f:7e:81:6c:b1:c7:24:2d:1a:eb:0b:e0:14:
                    84:a0:ad:1c:ee:e2:f3:f6:a5:e0:53:91:17:26:1f:
                    95:f4:17:9b:29:6a:cb:65:37:b1:88:5c:4a:4a:a4:
                    db:e6:59:27:ba:15:4b:20:f8:4d:99:96:c2:07:36:
                    54:a6:5a:53:b8:71:cc:db:16:4b:c9:fc:e9:2e:dc:
                    36:d8:46:88:ea:76:f5:9b:53:3a:bd:f7:01:19:0f:
                    2f:79:f8:d6:7c:af:e0:c3:26:a9:3d:fc:62:3b:57:
                    a9:47:a6:cd:15:52:57:53:0f:86:ab:83:56:51:3c:
                    87:25:51:47:22:d7:2f:07:90:cc:b5:ef:52:4d:f2:
                    c4:b9:64:0a:7e:91:70:12:db:06:b1:c7:3e:3c:b7:
                    62:5b:f3:f7:78:cf:18:01:14:26:a2:95:da:f7:1e:
                    ac:b4:db:9b:a4:11:6c:b7:8d:a1:40:63:52:a3:20:
                    a6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:05:11:6D:5B:25:5D:00:34:B2:5E:8F:55:CE:20:DB:B1:1E:65:F0
            X509v3 Authority Key Identifier:
                keyid:F1:F1:63:D8:54:FE:73:3B:E2:54:0F:37:A3:44:FF:6A:5A:5A:C9:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9CD7/ABEB876083D511EE988DB744C4F9AE02/8fFj2FT-czviVA83o0T_alpayfY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8fFj2FT-czviVA83o0T_alpayfY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9CD7/ABEB876083D511EE988DB744C4F9AE02/8fFj2FT-czviVA83o0T_alpayfY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:bd:6b:a0:9b:3e:17:25:a9:01:8b:4c:1e:e3:1a:29:d3:8e:
         1f:70:2b:f8:83:cd:ba:9f:ce:c8:69:85:98:aa:ca:35:fd:50:
         6d:13:c1:5f:5b:28:42:7b:28:1a:36:e9:69:d6:11:0a:a9:5d:
         4d:1f:ea:0e:97:31:13:cf:6d:03:76:34:bf:79:2b:27:a6:5b:
         08:97:4c:1e:c1:17:e9:ca:3d:97:bb:97:9e:1b:09:53:72:0d:
         04:6d:f7:90:12:d3:6c:a9:df:79:d1:7d:2f:56:2b:da:05:f3:
         3b:0b:f7:93:21:00:56:cb:64:4c:07:24:74:71:ac:a4:f7:e5:
         61:d8:21:08:2d:8d:04:f1:6e:75:0c:a7:25:d1:91:2b:9b:e4:
         72:14:f9:d5:60:02:ef:58:17:cb:ce:42:27:a4:f0:a4:90:42:
         59:45:1a:09:1a:2d:24:c2:50:1d:53:e0:25:76:56:1f:c1:ec:
         15:62:1d:12:aa:11:19:9d:5e:c9:08:b5:c9:af:74:7d:42:15:
         1e:ea:7a:97:43:f7:2b:8b:06:bd:29:50:e7:80:02:c0:f0:5f:
         77:8f:60:cd:af:c9:bb:84:cd:b5:0d:21:88:a5:11:cf:70:76:
         88:41:a5:c5:b5:01:03:b1:04:88:4c:85:65:05:38:e3:1e:2b:
         8e:e5:fa:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:58:24 2026 by rpki-client