Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft
File:                     x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft (raw, json)
Hash identifier:          PnDq6HZpuTooREmczyK3eC1lyg+9W+DjJJBNFNfUyT4=
Subject key identifier:   A4:30:50:14:76:59:B5:00:40:93:FE:08:57:AF:EB:22:10:66:2A:15
Authority key identifier: C7:CF:94:3E:3A:76:4F:37:C0:03:CD:43:5A:2B:85:43:BC:E4:76:09
Certificate issuer:       /CN=A91C85E9/serialNumber=C7CF943E3A764F37C003CD435A2B8543BCE47609
Certificate serial:       1255
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8-UPjp2TzfAA81DWiuFQ7zkdgk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft
Manifest number:          123D
Signing time:             Thu 16 Apr 2026 17:02:58 +0000
Manifest this update:     Thu 16 Apr 2026 17:02:58 +0000
Manifest next update:     Thu 23 Apr 2026 17:02:58 +0000
Files and hashes:         1: x8-UPjp2TzfAA81DWiuFQ7zkdgk.crl (hash: U8aUXXMQWytqcFk4F31Je+sFVutsKkJ9d4BTJMpNdkM=)
                          2: 8446564EF96611E8BE431B17C4F9AE02.roa (hash: yX06bXibRyqYQ53QWArbh3lavUZOOzpp/mZPOnVc/hA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.crl
                          rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8-UPjp2TzfAA81DWiuFQ7zkdgk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 17:02:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4693 (0x1255)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C85E9, serialNumber=C7CF943E3A764F37C003CD435A2B8543BCE47609
        Validity
            Not Before: Apr 16 17:02:58 2026 GMT
            Not After : Apr 23 17:02:58 2026 GMT
        Subject: CN=69e11642-3f01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5f:f8:1d:2a:2f:35:3c:6c:18:76:4e:32:78:
                    9c:5e:4d:37:aa:08:90:3b:b4:c8:0b:bc:24:1d:bf:
                    d0:3d:90:5f:16:0a:73:5d:c4:36:8a:38:e6:17:19:
                    99:e3:0b:af:3f:1e:cd:94:00:55:83:f0:04:0d:c7:
                    37:f0:3d:5a:90:15:a7:96:26:f7:3c:62:9c:ec:74:
                    69:56:47:72:5d:70:66:1e:e9:4e:65:9f:58:8f:6d:
                    68:6a:76:79:ac:56:d4:9e:1b:bd:fa:a4:1f:9e:30:
                    35:26:97:9c:3b:52:2a:4d:ab:c5:2f:0f:ee:74:43:
                    09:c8:70:e0:73:55:23:a3:01:4a:94:66:05:d8:43:
                    4d:4f:22:15:da:03:22:ba:46:fb:3a:38:5c:ec:d7:
                    81:37:10:a9:ed:30:77:87:90:b2:83:56:02:79:09:
                    94:af:07:82:5c:1c:45:11:13:77:b5:68:52:a5:25:
                    ba:4d:f4:5f:1e:57:99:d4:b9:71:3f:79:f3:5b:ce:
                    84:f1:2e:e1:2a:98:7b:c0:6c:08:d3:90:19:1a:4e:
                    ce:50:c9:43:e3:ac:2a:fd:3e:a4:da:d6:23:6a:63:
                    e9:50:a2:ce:4d:9e:02:73:92:dd:cb:93:40:76:80:
                    bf:27:cd:e4:73:25:5f:bd:ca:20:ef:17:2d:2c:cb:
                    7f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:30:50:14:76:59:B5:00:40:93:FE:08:57:AF:EB:22:10:66:2A:15
            X509v3 Authority Key Identifier:
                keyid:C7:CF:94:3E:3A:76:4F:37:C0:03:CD:43:5A:2B:85:43:BC:E4:76:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8-UPjp2TzfAA81DWiuFQ7zkdgk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:d2:71:5b:eb:28:e6:73:11:df:9c:74:29:96:bf:bd:df:e9:
         89:bc:08:67:e6:28:86:bb:1f:51:5c:a6:6e:52:9e:7f:8c:b5:
         f8:37:be:f2:75:ef:90:cf:ed:11:1f:71:10:ce:ee:ad:71:2f:
         49:0d:b9:d1:86:3d:ac:9a:c2:e5:c6:38:b2:04:13:93:68:3b:
         22:72:b4:d4:56:69:4e:a0:e5:0c:83:e9:94:99:b5:83:1d:01:
         38:07:f7:53:83:ad:14:b7:48:53:e6:e2:6e:73:e5:e5:87:5f:
         dc:bb:2b:da:95:e0:8d:f8:b1:0d:66:db:b0:c3:e1:cc:fc:88:
         50:d3:f7:ad:d9:c2:82:eb:72:c8:a7:08:8a:c8:8c:89:ce:97:
         c7:09:8c:76:26:a5:4c:37:ff:8f:3a:3c:59:93:a8:f5:f7:af:
         6a:34:cc:64:39:4d:5e:f6:9e:10:67:9a:c4:2a:3e:0d:97:5d:
         8b:0e:c4:56:d4:8b:a1:c4:2e:bb:8a:09:31:07:67:55:6c:97:
         45:3c:59:53:76:af:a1:a5:9a:16:36:6d:5f:bb:61:d2:9a:e8:
         9a:4c:c2:d2:8c:24:76:5d:2b:2a:fd:4d:d0:9b:01:8a:56:41:
         c0:df:6b:92:e1:1f:89:a2:6f:78:c8:0f:03:b3:e7:4b:2e:b6:
         a5:09:43:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:09:30 2026 by rpki-client