Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.mft
File:                     8FIaW22wTXVvopUqDymjkSEsWLI.mft (raw, json)
Hash identifier:          KMWBMM5QvglQ2cSYBVkCKtfddf9lVcZCE5k6ue2ApL8=
Subject key identifier:   29:0D:E0:51:04:32:23:E5:74:E7:B0:FE:07:CD:58:7A:BE:05:A0:81
Authority key identifier: F0:52:1A:5B:6D:B0:4D:75:6F:A2:95:2A:0F:29:A3:91:21:2C:58:B2
Certificate issuer:       /CN=A919AE6A/serialNumber=F0521A5B6DB04D756FA2952A0F29A391212C58B2
Certificate serial:       57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8FIaW22wTXVvopUqDymjkSEsWLI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.mft
Manifest number:          55
Signing time:             Fri 17 Apr 2026 07:50:51 +0000
Manifest this update:     Fri 17 Apr 2026 07:50:50 +0000
Manifest next update:     Fri 24 Apr 2026 07:50:50 +0000
Files and hashes:         1: 8FIaW22wTXVvopUqDymjkSEsWLI.crl (hash: boalRZJPscLfCqLGWfnRRFYStDTkTuegb+fXGL/p04c=)
                          2: E9689162C8FE11F0BCA3A555C4F9AE02.roa (hash: ivbdN4NvvnbB10SMOQMCGpQDBPImMhiYIJBpIIj7B+I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.crl
                          rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8FIaW22wTXVvopUqDymjkSEsWLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87 (0x57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919AE6A, serialNumber=F0521A5B6DB04D756FA2952A0F29A391212C58B2
        Validity
            Not Before: Apr 17 07:50:50 2026 GMT
            Not After : Apr 24 07:50:50 2026 GMT
        Subject: CN=69e1e65b-13e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f2:4f:6e:37:1c:2e:a9:6a:c4:af:f2:28:ea:
                    3c:31:7a:2b:0e:11:34:01:21:7f:c2:b1:39:51:03:
                    98:da:86:32:cd:b0:d3:9a:96:24:01:c7:dd:3c:01:
                    d4:17:e6:c1:16:5b:22:25:a3:70:2c:28:f1:6a:ac:
                    63:37:ac:ea:c8:92:2e:8c:fa:18:81:77:67:14:d4:
                    fe:40:73:7e:5f:cc:11:31:e0:f8:e1:16:e9:82:cb:
                    7f:27:9b:a0:3f:cb:aa:88:b6:d8:72:73:2a:0b:e4:
                    81:2a:29:97:a0:15:fc:79:b4:f1:a9:13:ae:b2:28:
                    2d:83:49:9d:71:a7:00:04:7e:50:ea:e1:80:55:ef:
                    38:7f:c0:8f:e9:df:ca:df:1e:67:2e:2b:d7:4d:45:
                    96:66:16:45:da:63:93:8c:41:31:5d:22:c6:5a:bc:
                    ad:63:d7:d4:b6:e8:a8:12:31:aa:89:dd:cb:88:23:
                    3e:7f:80:8c:6f:9f:e2:79:dd:5a:0e:50:d7:00:d8:
                    db:73:10:9c:e4:46:07:62:18:82:e6:b8:4c:dc:54:
                    e9:88:ca:1d:11:90:15:e1:8a:cf:79:50:1c:36:6f:
                    e4:0d:a4:b4:be:1d:57:87:9c:f9:62:f2:0a:22:8c:
                    e8:4b:ef:2f:fd:18:63:da:d7:73:6a:8a:a3:42:0f:
                    05:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:0D:E0:51:04:32:23:E5:74:E7:B0:FE:07:CD:58:7A:BE:05:A0:81
            X509v3 Authority Key Identifier:
                keyid:F0:52:1A:5B:6D:B0:4D:75:6F:A2:95:2A:0F:29:A3:91:21:2C:58:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8FIaW22wTXVvopUqDymjkSEsWLI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:89:87:3b:d8:bf:2f:a1:f8:fd:24:04:f2:1e:42:59:2b:5c:
         ce:33:e8:b9:0e:62:39:44:71:98:99:08:16:84:f9:dc:0c:c3:
         0f:9f:b1:e6:15:5f:0b:87:d1:93:5c:f9:92:90:7d:a2:75:39:
         bf:ca:d2:0f:54:80:ec:20:3d:62:eb:81:e0:53:34:85:3e:20:
         e8:43:c7:d1:5a:98:4c:fa:49:fc:41:e0:91:2e:06:f0:f4:d1:
         6a:67:dc:6c:f6:c6:6d:e0:04:fe:ae:23:fc:53:82:b2:8e:24:
         cf:cb:77:0c:ea:1e:14:f3:f7:d7:a2:29:7f:bc:7c:f9:d1:86:
         0c:80:83:78:57:29:6b:71:5f:07:07:f8:bf:54:aa:00:4f:b3:
         01:e4:ef:8f:7e:fd:b2:fc:8a:2a:97:fa:53:87:cb:57:68:cb:
         ec:55:05:fe:08:c4:5c:0f:98:a3:6e:2b:93:3e:9b:67:3c:b2:
         e2:4b:97:36:fe:57:43:54:15:05:07:6b:7b:bd:6e:9f:a6:3b:
         1c:b8:2d:2e:de:63:96:e6:05:4b:6e:e0:c5:fb:fe:62:f1:14:
         26:f9:a5:22:ef:82:52:04:fc:39:d0:94:e5:9c:e9:59:c2:3d:
         7e:c9:ba:b2:bf:d3:a0:32:4c:4c:07:f0:17:34:c6:17:6d:05:
         63:3f:e8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:24:11 2026 by rpki-client