Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.mft
File:                     8KAMMdCR4kVxN9Ko7zJndH7dfCI.mft (raw, json)
Hash identifier:          flaodCwCjzedmpcDMqsT1jgM6CyMjz5A+Vg9JlYhWrE=
Subject key identifier:   78:E4:1B:14:96:7A:D2:D9:CC:92:87:93:21:92:BF:04:A6:17:75:E9
Authority key identifier: F0:A0:0C:31:D0:91:E2:45:71:37:D2:A8:EF:32:67:74:7E:DD:7C:22
Certificate issuer:       /CN=A915E402/serialNumber=F0A00C31D091E2457137D2A8EF3267747EDD7C22
Certificate serial:       8F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8KAMMdCR4kVxN9Ko7zJndH7dfCI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.mft
Manifest number:          8B
Signing time:             Wed 15 Apr 2026 07:12:24 +0000
Manifest this update:     Wed 15 Apr 2026 07:12:24 +0000
Manifest next update:     Wed 22 Apr 2026 07:12:24 +0000
Files and hashes:         1: 8KAMMdCR4kVxN9Ko7zJndH7dfCI.crl (hash: crh8r4FjSgGEbKPmifR/HparT1TFXOv/C76zpWcrAPM=)
                          2: 9F9EE58C783011F0B097E07BC4F9AE02.roa (hash: fSYltpxk2u14lPvWhCXB9QKuMuDj8l4c6pcDEmZNiXo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.crl
                          rsync://rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8KAMMdCR4kVxN9Ko7zJndH7dfCI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 07:12:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 143 (0x8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E402, serialNumber=F0A00C31D091E2457137D2A8EF3267747EDD7C22
        Validity
            Not Before: Apr 15 07:12:24 2026 GMT
            Not After : Apr 22 07:12:24 2026 GMT
        Subject: CN=69df3a58-b8f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5c:cb:43:29:b8:8a:08:20:46:62:ff:94:85:
                    17:df:b6:f2:30:03:89:66:7a:89:ba:75:a5:6e:5b:
                    c8:7f:31:12:eb:04:0a:61:dc:48:38:8c:64:ba:e0:
                    15:50:ab:aa:d0:7d:f0:8e:90:40:11:d9:3b:aa:d0:
                    7d:27:1f:c2:93:6e:fd:d8:a6:e6:e0:81:06:c0:8e:
                    2e:32:43:03:ea:79:b9:0a:d0:9f:32:1a:f6:ce:e6:
                    91:10:81:d0:10:cd:1f:3f:19:0b:bd:71:1f:71:3b:
                    9b:87:76:a4:b8:19:48:49:0d:b7:e3:a0:3b:2c:01:
                    e9:14:11:b6:ce:f8:93:3a:88:e6:75:10:6f:13:21:
                    7c:b7:22:35:67:ff:0f:40:e0:4b:89:6d:29:f4:72:
                    85:03:85:6e:95:3e:cb:74:5c:37:0c:d2:4f:fa:5f:
                    46:9b:e3:fd:ab:a5:02:1a:14:f9:15:2b:3c:67:0c:
                    ec:93:1c:94:e7:b7:a6:6d:68:dd:d2:93:16:1c:e4:
                    e2:4c:c5:1c:16:4d:2e:b3:fb:25:5f:a7:25:e3:94:
                    a5:41:0a:a2:07:e0:31:ce:8d:d3:5e:9e:df:43:37:
                    04:42:aa:ea:e3:de:bb:8b:f8:32:b1:be:d2:37:01:
                    3c:c8:15:e5:3c:c9:04:bc:83:6d:fc:5c:1f:39:f6:
                    57:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:E4:1B:14:96:7A:D2:D9:CC:92:87:93:21:92:BF:04:A6:17:75:E9
            X509v3 Authority Key Identifier:
                keyid:F0:A0:0C:31:D0:91:E2:45:71:37:D2:A8:EF:32:67:74:7E:DD:7C:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8KAMMdCR4kVxN9Ko7zJndH7dfCI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:2f:14:7b:d9:54:ec:07:4e:fa:a7:8d:aa:60:71:55:c7:4e:
         a8:b3:02:ce:58:eb:e9:52:38:5a:62:bd:f1:84:5e:74:60:7a:
         e4:86:0c:d7:44:f1:50:4b:37:0a:90:96:a2:32:b8:3f:c0:b5:
         d4:03:15:c9:c1:21:21:e2:ca:2e:d1:be:81:b8:18:96:53:0c:
         61:6e:4f:1b:43:f3:15:e0:f4:ab:ea:48:6b:c0:9e:5e:aa:5b:
         48:6a:44:0c:7d:86:94:b6:c8:92:a4:33:e8:9d:29:73:48:0f:
         dd:f5:e1:22:72:29:73:5e:60:c8:1e:73:fc:42:35:07:5b:d7:
         1c:c3:f8:82:9f:e3:3e:55:e6:f0:e5:76:55:b3:52:1e:42:75:
         7f:33:c7:de:c5:49:7b:c7:76:ac:38:6e:c6:98:15:9e:f8:10:
         d9:b7:68:ff:be:2e:ff:d6:a7:4a:42:68:f2:d1:ab:19:f3:ff:
         98:02:aa:d9:69:62:16:a9:05:61:c8:1c:ef:aa:87:1f:f8:a6:
         ca:62:2e:25:e4:a5:ad:59:87:16:cf:73:dc:bc:fd:fe:cc:6a:
         f2:c5:3b:1c:38:d7:bb:6a:a4:a7:05:4b:40:a1:53:05:7b:e8:
         ef:ba:2a:0b:f2:8f:0b:9d:d6:96:28:ba:2c:bd:18:e4:f1:3d:
         81:f6:99:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:53:01 2026 by rpki-client