Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft
File:                     mK6VbUJuFgLO2LtyWI9io9oSqVU.mft (raw, json)
Hash identifier:          3tWdi3w17/l0jWwime8n3d1G/cownD1uebrNSq6uvdI=
Subject key identifier:   B5:D2:24:DE:ED:9D:C3:C6:76:5B:D4:C0:65:00:94:91:34:81:9A:2F
Authority key identifier: 98:AE:95:6D:42:6E:16:02:CE:D8:BB:72:58:8F:62:A3:DA:12:A9:55
Certificate issuer:       /CN=A91A5FCF/serialNumber=98AE956D426E1602CED8BB72588F62A3DA12A955
Certificate serial:       BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mK6VbUJuFgLO2LtyWI9io9oSqVU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft
Manifest number:          B8
Signing time:             Wed 15 Apr 2026 06:35:52 +0000
Manifest this update:     Wed 15 Apr 2026 06:35:52 +0000
Manifest next update:     Wed 22 Apr 2026 06:35:52 +0000
Files and hashes:         1: mK6VbUJuFgLO2LtyWI9io9oSqVU.crl (hash: w+SngZYRix8C7rIDMJGxxgltf8p4w8PC+GATWFO7TA0=)
                          2: 301DED0C86F911F08DBDFA61C4F9AE02.roa (hash: vsIGVvlGCJQuRvbSj+mUc0cTXNJknUlsD/Soxx53ucA=)
                          3: 943B92961E6011F0B81D3A54C4F9AE02.roa (hash: 2Zw4KOVcRPZL7NToz0OAHJZCRTk4ni0giRlBSLkkuak=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.crl
                          rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mK6VbUJuFgLO2LtyWI9io9oSqVU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 06:35:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 188 (0xbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5FCF, serialNumber=98AE956D426E1602CED8BB72588F62A3DA12A955
        Validity
            Not Before: Apr 15 06:35:52 2026 GMT
            Not After : Apr 22 06:35:52 2026 GMT
        Subject: CN=69df31c8-f892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:fd:8e:68:62:ad:07:66:c0:aa:7b:3b:ce:0f:
                    ba:be:21:ab:19:51:a0:be:1b:90:9b:87:d6:76:7b:
                    b0:17:b8:17:1d:a9:02:0e:86:2b:90:09:9b:c3:34:
                    27:4d:c8:cc:76:8f:0d:c5:4f:46:bc:79:35:ac:4f:
                    cd:7e:28:58:61:65:cd:df:44:6e:ec:ee:21:ff:b8:
                    53:47:e9:09:2c:ee:35:eb:3e:64:16:a3:8e:be:e0:
                    2b:25:36:92:1e:fe:9f:dd:f5:98:d0:b5:d2:eb:f0:
                    17:99:3c:ba:b6:79:a5:5f:ff:42:bc:f1:dd:5a:27:
                    83:8b:6a:32:67:e8:b0:05:55:1f:5a:db:47:4f:23:
                    26:d4:ed:40:c7:3b:98:64:4c:93:fa:49:2f:b8:45:
                    d2:3b:e9:a3:10:97:03:f9:24:81:96:df:d7:39:0b:
                    0c:05:66:ca:58:38:ce:20:d3:c3:66:1a:5b:cf:2b:
                    4d:3b:04:08:dc:20:dd:e2:73:5d:fe:ee:a6:49:a9:
                    73:c9:89:ff:d9:f4:e5:b4:e4:42:b2:0e:b6:d7:34:
                    d8:49:a3:60:02:9b:25:d6:85:99:6e:2b:92:7f:76:
                    2b:0b:1f:96:92:4a:f0:ec:d8:57:9c:1a:48:9a:27:
                    d5:0a:b2:9a:60:2a:c9:cb:f6:c6:8c:79:56:3c:3d:
                    7d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:D2:24:DE:ED:9D:C3:C6:76:5B:D4:C0:65:00:94:91:34:81:9A:2F
            X509v3 Authority Key Identifier:
                keyid:98:AE:95:6D:42:6E:16:02:CE:D8:BB:72:58:8F:62:A3:DA:12:A9:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mK6VbUJuFgLO2LtyWI9io9oSqVU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:8e:6f:49:3c:45:33:ee:aa:6c:bd:cc:d6:97:7d:76:b7:e8:
         98:de:61:f0:7b:14:02:e3:12:34:97:d4:b3:33:99:da:24:81:
         18:86:0f:ad:58:3a:32:46:13:72:40:3a:58:dc:16:39:65:a4:
         80:36:7f:73:f0:cc:53:cf:91:d0:ac:6c:c5:6d:4f:f6:b4:a4:
         31:24:37:cd:d2:33:44:96:6b:28:e5:a7:d2:48:65:f7:d0:b1:
         3d:a4:17:0d:80:af:27:45:9d:2d:1a:f1:88:d2:88:ab:f8:91:
         71:f3:18:4f:e9:84:39:8d:70:dc:b2:99:fb:a2:1e:b2:c5:24:
         b1:54:03:d8:60:53:82:05:c3:18:32:3f:5e:6f:53:22:83:e5:
         39:9d:d3:2d:9c:89:26:68:8d:51:72:08:fb:f8:8f:57:b5:4e:
         e7:e9:da:bb:ea:ab:f0:b1:9d:8f:ec:fb:20:b0:b0:45:bb:db:
         cb:2d:a9:1d:44:0e:0e:9f:09:42:31:58:5f:a1:b4:1f:21:de:
         e4:67:fb:21:74:ca:14:82:04:7b:42:be:a7:2b:e7:a2:55:5f:
         60:03:5d:fe:12:51:b2:72:3e:41:ec:48:f9:4c:ca:6c:d0:05:
         45:15:8a:59:cc:c6:42:20:3d:8b:24:69:f5:78:a0:22:8a:04:
         49:8c:2f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:46:20 2026 by rpki-client