Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft
File:                     81QJOUhm-0CKDRiOC30AzFpzlI4.mft (raw, json)
Hash identifier:          QnvchPYjN9WzRI0VNmHarw8gbZHr/++64U0/O2E4lJM=
Subject key identifier:   DF:8A:63:74:CB:AA:B2:3B:DE:86:13:D0:90:1B:8B:F1:FA:A4:9C:25
Authority key identifier: F3:54:09:39:48:66:FB:40:8A:0D:18:8E:0B:7D:00:CC:5A:73:94:8E
Certificate issuer:       /CN=A91FDBE8/serialNumber=F35409394866FB408A0D188E0B7D00CC5A73948E
Certificate serial:       084C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81QJOUhm-0CKDRiOC30AzFpzlI4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft
Manifest number:          0831
Signing time:             Tue 24 Mar 2026 20:49:55 +0000
Manifest this update:     Tue 24 Mar 2026 20:49:54 +0000
Manifest next update:     Tue 31 Mar 2026 20:49:54 +0000
Files and hashes:         1: 81QJOUhm-0CKDRiOC30AzFpzlI4.crl (hash: P2Fw73qg2Lygjnojgq+Fhc0+6pcw0EP6YFBBp961bpM=)
                          2: 06F011A2134B11F0AA41F90AC4F9AE02.roa (hash: syS+9guCxEoztAFQkgarn4bONRAd62QCH19yi6osoP4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.crl
                          rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81QJOUhm-0CKDRiOC30AzFpzlI4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 20:49:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2124 (0x84c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDBE8, serialNumber=F35409394866FB408A0D188E0B7D00CC5A73948E
        Validity
            Not Before: Mar 24 20:49:54 2026 GMT
            Not After : Mar 31 20:49:54 2026 GMT
        Subject: CN=69c2f8f2-b75e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:32:71:0c:7b:ac:6b:e2:a9:2a:22:24:bb:75:
                    36:38:32:11:f7:93:b4:b0:04:7f:30:b2:f8:25:b8:
                    22:51:56:b1:23:3b:3b:1b:72:24:a9:ae:05:9e:a7:
                    d0:bc:d9:f0:72:7f:42:f2:86:c6:ac:88:6a:d1:4a:
                    34:6a:52:8c:88:54:83:48:3c:06:69:df:ec:bf:7f:
                    32:ec:d8:16:f1:da:01:9c:a9:20:29:b3:8e:43:c1:
                    22:42:5d:98:ea:ea:2d:fa:df:2d:ee:10:a1:de:9e:
                    7c:49:24:0e:c0:05:a5:b2:b2:53:1e:b7:21:c9:a5:
                    e7:30:02:9c:6e:05:a2:a8:dc:27:51:a6:fe:3d:7b:
                    5b:cc:63:82:66:ea:0e:59:0a:cd:ac:c4:46:9a:f5:
                    25:d1:5d:1d:39:5f:d3:e9:01:f2:00:3e:14:ac:e3:
                    df:f9:6e:9b:01:31:3c:31:a2:10:97:36:48:e9:1f:
                    c6:6a:79:c0:87:df:21:c9:49:84:2a:4a:f0:12:d7:
                    1e:6a:64:9f:bd:18:6b:77:bd:14:33:f0:a9:1c:c9:
                    a4:aa:72:5b:23:80:88:f3:cf:06:5a:3a:9e:af:7d:
                    45:f6:bf:fa:26:ce:02:6a:2f:55:20:73:5a:d9:86:
                    76:0e:6b:10:f6:76:e9:3a:63:df:8d:0b:63:90:88:
                    ed:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:8A:63:74:CB:AA:B2:3B:DE:86:13:D0:90:1B:8B:F1:FA:A4:9C:25
            X509v3 Authority Key Identifier:
                keyid:F3:54:09:39:48:66:FB:40:8A:0D:18:8E:0B:7D:00:CC:5A:73:94:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81QJOUhm-0CKDRiOC30AzFpzlI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:42:a8:0e:b0:07:a8:f6:5a:0e:2f:5b:94:66:05:be:f6:46:
         15:3b:8c:3f:29:8f:cc:19:12:8c:8c:49:6f:3f:75:d3:ff:0d:
         88:8a:21:cd:7c:40:bf:4c:16:e6:4f:6a:c1:9b:92:1b:1d:ea:
         f5:e0:51:0e:a1:73:59:52:af:66:62:6d:1f:de:d1:e1:49:ed:
         56:a0:7c:15:d0:e9:4d:e2:34:51:7a:7f:af:18:83:41:df:4a:
         38:f3:db:8f:1c:4c:cc:5d:80:4d:a6:56:1c:1f:8b:8a:3e:86:
         17:4f:af:c1:cf:d1:63:48:6a:ef:0f:b0:6a:ac:a1:1b:cc:31:
         b5:d3:20:a9:c9:9d:e4:e5:49:fe:fa:c7:dc:53:55:96:68:06:
         4e:7a:0a:20:8c:20:df:ed:9f:42:f8:87:30:66:7d:a0:b5:a3:
         fd:8b:d6:f8:0d:ff:25:1c:16:35:65:bf:9b:08:04:d3:cd:47:
         b1:74:41:f6:5e:09:cd:1a:5a:c1:fd:ce:e9:8b:5d:ac:d6:20:
         57:d5:e2:cc:2a:5f:ba:02:e9:7e:4f:dd:b0:e5:84:48:81:b7:
         77:78:ad:50:ce:25:a8:e4:8a:c5:1b:a3:2c:e8:3a:51:7a:d2:
         7a:5e:af:55:cb:bb:22:29:ba:13:14:9e:80:b5:1a:d6:40:23:
         2f:4b:1a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:21:28 2026 by rpki-client