Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/80xSFZH7LNAtxnvdctzyiwekL_Y.mft
File:                     80xSFZH7LNAtxnvdctzyiwekL_Y.mft (raw, json)
Hash identifier:          ZAaBr/IvzxML4YzHE4eNdsa8jUSgq9jp4gAtMX4wJUk=
Subject key identifier:   33:C4:C5:7F:B2:B7:6A:B5:8A:80:38:C7:5C:FD:D3:58:E9:23:68:1D
Authority key identifier: F3:4C:52:15:91:FB:2C:D0:2D:C6:7B:DD:72:DC:F2:8B:07:A4:2F:F6
Certificate issuer:       /CN=A91B8CE1/serialNumber=F34C521591FB2CD02DC67BDD72DCF28B07A42FF6
Certificate serial:       85
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/80xSFZH7LNAtxnvdctzyiwekL_Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/80xSFZH7LNAtxnvdctzyiwekL_Y.mft
Manifest number:          82
Signing time:             Fri 17 Apr 2026 07:22:59 +0000
Manifest this update:     Fri 17 Apr 2026 07:22:59 +0000
Manifest next update:     Fri 24 Apr 2026 07:22:59 +0000
Files and hashes:         1: 80xSFZH7LNAtxnvdctzyiwekL_Y.crl (hash: gVgOf6He2iVj8ndhukG+i12wJMnYH1xit8FkBAix/bg=)
                          2: 5C2EA0E477D111F0940AFF7AC4F9AE02.roa (hash: y9XglzGcT/yANEywLEKFOF3/z+vv31d43TaG6CEceQI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/80xSFZH7LNAtxnvdctzyiwekL_Y.crl
                          rsync://rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/80xSFZH7LNAtxnvdctzyiwekL_Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/80xSFZH7LNAtxnvdctzyiwekL_Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:22:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133 (0x85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8CE1, serialNumber=F34C521591FB2CD02DC67BDD72DCF28B07A42FF6
        Validity
            Not Before: Apr 17 07:22:59 2026 GMT
            Not After : Apr 24 07:22:59 2026 GMT
        Subject: CN=69e1dfd3-5c75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:eb:d9:4d:5f:77:7d:1b:53:19:01:50:42:68:
                    ed:e5:de:42:2f:f7:df:5b:d1:92:d2:d4:f8:46:08:
                    ca:40:4e:54:50:3f:7d:78:f6:cd:5c:a4:7f:40:be:
                    b3:0c:5f:69:8b:f9:54:20:bb:a5:93:eb:ae:40:c6:
                    55:1e:a4:bf:cf:19:43:a9:6c:50:a1:87:80:f9:49:
                    ec:e4:2a:a1:7e:99:40:b1:d3:06:3c:33:4d:98:e7:
                    f3:da:60:82:c1:ad:ea:a6:31:e2:74:7e:73:7d:dc:
                    65:d3:c0:8b:fd:94:fc:1b:a5:ce:dd:d6:66:c6:d5:
                    84:bc:cb:07:09:32:a1:18:8c:01:1c:3f:f5:19:bd:
                    fd:b8:7f:d9:6a:96:bc:82:24:93:af:a8:83:d3:2e:
                    37:ce:46:2b:ff:7d:2d:0a:a9:f1:36:93:54:f1:eb:
                    cf:29:82:8f:c3:86:0f:d5:01:7b:dc:ce:37:38:32:
                    11:b5:6f:81:29:6d:07:91:fa:da:93:d9:03:85:dc:
                    ba:62:8b:91:6a:bc:ce:c2:29:f9:2d:49:1c:5b:b1:
                    61:4a:4f:00:0c:db:a2:92:2e:cc:eb:4e:f8:1a:4c:
                    f3:73:61:54:03:96:eb:b7:d8:8a:4d:8e:e8:73:ae:
                    7b:45:b3:78:e0:b7:cc:63:00:2e:35:7c:6d:66:e3:
                    4e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:C4:C5:7F:B2:B7:6A:B5:8A:80:38:C7:5C:FD:D3:58:E9:23:68:1D
            X509v3 Authority Key Identifier:
                keyid:F3:4C:52:15:91:FB:2C:D0:2D:C6:7B:DD:72:DC:F2:8B:07:A4:2F:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/80xSFZH7LNAtxnvdctzyiwekL_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/80xSFZH7LNAtxnvdctzyiwekL_Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/80xSFZH7LNAtxnvdctzyiwekL_Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:6e:17:d3:ca:59:01:30:e3:1c:cc:8c:c5:6b:24:c5:9d:1b:
         d1:02:a3:2a:e7:03:63:3a:7e:3d:ff:f5:d4:78:22:72:84:ca:
         a8:46:58:fb:a2:b8:c1:81:7e:dd:92:8b:bd:ce:d3:86:ff:75:
         14:63:dd:0a:f2:1e:b4:12:6b:38:02:92:50:38:80:4c:82:c2:
         9d:9c:a2:fb:ce:bd:55:b6:1e:26:a8:09:67:4d:4b:75:db:f7:
         98:8a:54:bf:3c:8e:9d:cf:54:3e:7c:9b:0c:35:cc:b1:a6:ed:
         81:76:c3:19:f7:cd:4a:de:5a:00:d9:5d:ac:1b:06:e0:61:e7:
         d8:67:71:85:8a:c5:dd:4d:e2:3c:af:37:a0:45:c2:ea:04:31:
         74:aa:7c:8b:7e:5c:a1:21:ee:8f:46:43:4d:30:00:a8:86:3c:
         ea:98:b5:68:56:95:0a:ee:8f:45:eb:0a:c6:63:08:b9:40:f1:
         62:67:58:1d:10:b3:e3:0b:66:e4:ed:2c:df:e9:2e:00:04:5c:
         32:9c:db:bf:2e:e0:ae:e7:bd:27:27:84:30:6a:f0:f5:5b:74:
         bc:37:d9:a3:50:82:d2:2d:9e:35:b0:97:33:3c:7c:67:1e:b6:
         e6:91:d0:f5:bf:6c:51:44:54:f0:29:b0:a1:f5:ca:b3:9b:46:
         bc:22:46:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:33:17 2026 by rpki-client