Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft
File:                     81QJOUhm-0CKDRiOC30AzFpzlI4.mft (raw, json)
Hash identifier:          v4wZ2qwubsflro6KfS+YdJx8L67OQygTvcazXOn3zw4=
Subject key identifier:   EC:28:E8:BD:5E:7B:1C:49:BA:D6:F2:B8:D5:3D:52:06:FA:0F:EB:C5
Authority key identifier: F3:54:09:39:48:66:FB:40:8A:0D:18:8E:0B:7D:00:CC:5A:73:94:8E
Certificate issuer:       /CN=A91FDBE8/serialNumber=F35409394866FB408A0D188E0B7D00CC5A73948E
Certificate serial:       0865
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81QJOUhm-0CKDRiOC30AzFpzlI4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft
Manifest number:          084A
Signing time:             Tue 12 May 2026 21:05:42 +0000
Manifest this update:     Tue 12 May 2026 21:05:42 +0000
Manifest next update:     Tue 19 May 2026 21:05:42 +0000
Files and hashes:         1: 81QJOUhm-0CKDRiOC30AzFpzlI4.crl (hash: oufXJj75NdwQClqfHPnwlEQ53c89sweB/YzXs8ReGtU=)
                          2: 06F011A2134B11F0AA41F90AC4F9AE02.roa (hash: syS+9guCxEoztAFQkgarn4bONRAd62QCH19yi6osoP4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.crl
                          rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81QJOUhm-0CKDRiOC30AzFpzlI4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 21:05:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2149 (0x865)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDBE8, serialNumber=F35409394866FB408A0D188E0B7D00CC5A73948E
        Validity
            Not Before: May 12 21:05:42 2026 GMT
            Not After : May 19 21:05:42 2026 GMT
        Subject: CN=6a039626-447b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:58:f9:37:10:d8:c7:02:a2:d9:19:3d:b4:0e:
                    1b:8e:82:02:40:9b:67:98:cc:d8:10:81:b8:23:5e:
                    8f:f8:2a:28:86:ba:e8:e3:9a:c0:a1:74:40:03:ec:
                    d5:36:8d:f3:40:3a:38:fb:34:0c:d0:e7:de:36:8d:
                    02:1d:d0:4d:5f:8e:ae:75:69:d8:7b:36:d2:9c:28:
                    ad:50:6f:b7:fd:ab:26:07:64:37:37:5e:ea:50:f8:
                    2d:e4:7a:b0:60:d0:a5:9e:50:b1:e7:1d:07:16:19:
                    3a:8f:2c:8a:40:9d:83:02:8b:48:8a:03:ea:be:6b:
                    52:5e:03:87:ef:1e:30:0d:db:9d:7e:97:fd:fb:29:
                    fc:71:91:11:33:4e:b8:73:45:a8:ef:be:1c:c0:f7:
                    28:e1:35:ab:5f:32:8b:3d:3d:44:b9:25:ca:12:33:
                    0c:30:a3:c8:f4:87:81:ff:a8:8b:da:7c:cb:83:1e:
                    b1:36:f4:3e:4b:6d:71:c3:60:69:e7:33:cf:9d:75:
                    63:3b:a3:45:42:a5:23:97:93:d7:ac:10:5a:09:12:
                    c3:f5:59:d5:fa:4d:82:4b:7d:b4:2a:99:b3:19:44:
                    0f:27:a8:12:79:83:7b:41:69:49:6c:b5:28:85:0e:
                    b0:ac:ab:ab:8d:64:bd:ba:c1:85:f7:c2:45:55:c7:
                    d2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:28:E8:BD:5E:7B:1C:49:BA:D6:F2:B8:D5:3D:52:06:FA:0F:EB:C5
            X509v3 Authority Key Identifier:
                keyid:F3:54:09:39:48:66:FB:40:8A:0D:18:8E:0B:7D:00:CC:5A:73:94:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81QJOUhm-0CKDRiOC30AzFpzlI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:0c:57:25:3b:15:83:94:e5:27:3d:1d:25:98:01:0e:9e:0f:
         06:cc:fc:57:f5:77:cb:a9:d3:24:ed:b0:a2:dd:97:65:38:35:
         ce:da:fe:c6:55:5f:94:38:70:53:90:bf:90:d3:75:a0:e0:37:
         02:b1:23:17:ed:77:a5:25:bf:05:30:dc:0d:2a:bb:0c:53:53:
         f6:a6:04:dc:fc:b6:08:ef:6a:18:4e:12:76:b4:84:b2:35:87:
         56:54:e7:dc:cd:85:64:92:d4:db:16:98:92:ee:46:b5:c5:95:
         4c:b1:e9:9a:7a:09:4b:d6:9b:e2:36:63:dd:06:96:72:cc:06:
         55:4d:f3:1f:7e:36:af:84:dd:20:9e:8e:42:34:81:25:e1:46:
         5b:e0:15:e7:f5:1c:11:29:12:f7:6f:de:76:c5:01:29:9b:22:
         d6:07:f6:25:c2:b6:51:27:cc:45:bd:60:e0:bf:21:74:bb:c2:
         3b:4f:f4:57:e0:4d:71:83:69:ed:0f:8d:7a:6f:b8:e6:ec:74:
         46:af:ee:60:4d:8f:78:b5:6c:f4:44:ba:ef:f2:64:03:b4:40:
         a6:3b:83:6b:5b:be:5a:d8:56:c8:2e:02:ef:e3:1c:9b:6f:42:
         a2:d2:ad:88:32:d0:80:41:2e:80:7b:13:63:14:b9:32:76:f2:
         ab:f4:8e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:17:33 2026 by rpki-client