Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9706/F888443A114711F18BB454AF223D8C67/8eD9e9rxcZiQ9rJJs7xBghS6iss.mft
File:                     8eD9e9rxcZiQ9rJJs7xBghS6iss.mft (raw, json)
Hash identifier:          FDwQZdgwpiw+uRhv/QKg8uf/rx5ONjf15aEVsJFWp9E=
Subject key identifier:   7E:99:9C:48:69:31:29:13:10:6A:B2:96:DA:09:52:26:AC:B2:77:B3
Authority key identifier: F1:E0:FD:7B:DA:F1:71:98:90:F6:B2:49:B3:BC:41:82:14:BA:8A:CB
Certificate issuer:       /CN=A91C9706/serialNumber=F1E0FD7BDAF1719890F6B249B3BC418214BA8ACB
Certificate serial:       25
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8eD9e9rxcZiQ9rJJs7xBghS6iss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9706/F888443A114711F18BB454AF223D8C67/8eD9e9rxcZiQ9rJJs7xBghS6iss.mft
Manifest number:          21
Signing time:             Fri 17 Apr 2026 08:36:48 +0000
Manifest this update:     Fri 17 Apr 2026 08:36:48 +0000
Manifest next update:     Fri 24 Apr 2026 08:36:48 +0000
Files and hashes:         1: 8eD9e9rxcZiQ9rJJs7xBghS6iss.crl (hash: 80uOzfN7FBFnWyk4A38eLe1FeHADUmGFY0469ZW3Rk4=)
                          2: B7B7EE46118411F1951E019C333D8C67.roa (hash: nTrTUgHl4VUdhScRvQ7M38Aw7fBG/zsPSb6R6Q8BgHU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9706/F888443A114711F18BB454AF223D8C67/8eD9e9rxcZiQ9rJJs7xBghS6iss.crl
                          rsync://rpki.apnic.net/member_repository/A91C9706/F888443A114711F18BB454AF223D8C67/8eD9e9rxcZiQ9rJJs7xBghS6iss.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8eD9e9rxcZiQ9rJJs7xBghS6iss.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:36:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9706, serialNumber=F1E0FD7BDAF1719890F6B249B3BC418214BA8ACB
        Validity
            Not Before: Apr 17 08:36:48 2026 GMT
            Not After : Apr 24 08:36:48 2026 GMT
        Subject: CN=69e1f120-bcc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d0:2c:13:48:81:fe:01:fe:ed:45:25:b3:a4:
                    c1:b6:1d:e0:bb:81:55:3e:96:07:d4:51:8d:58:96:
                    4f:bd:70:0c:65:9b:2b:66:c7:be:0c:3e:73:cb:b8:
                    f7:0f:95:64:1e:7b:57:ce:ab:8b:cf:f5:bc:7a:72:
                    76:f2:55:3d:8c:c4:31:bd:3d:85:57:c3:4e:f7:1c:
                    df:86:0b:66:9d:2e:6b:be:9a:3f:7f:ee:56:72:80:
                    09:7b:de:37:2c:a3:59:8b:25:6b:ef:e1:54:9d:78:
                    5c:f4:af:94:f7:aa:08:a7:77:1e:d0:3c:72:52:77:
                    fa:df:69:45:22:32:e1:b4:fa:0b:9a:ea:ec:69:1f:
                    4b:9f:c1:b0:b6:05:19:98:4c:71:74:9c:d5:97:43:
                    8f:fc:9e:c1:58:b8:fb:f1:00:5d:e7:3b:7b:e8:66:
                    b2:9f:b6:59:d7:c7:96:8b:93:6c:53:b1:b5:44:34:
                    aa:31:59:fa:d2:e6:f4:dc:b4:e3:6a:67:68:75:0f:
                    92:dc:68:8c:aa:e2:de:dd:94:f2:41:b8:d6:6d:f8:
                    db:87:4d:b3:1f:61:0e:7b:22:22:24:6f:dd:c9:ca:
                    8e:88:bc:f9:82:94:18:3e:f2:75:15:68:28:1f:04:
                    51:03:2c:96:91:4d:89:77:19:22:73:37:17:a7:71:
                    f5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:99:9C:48:69:31:29:13:10:6A:B2:96:DA:09:52:26:AC:B2:77:B3
            X509v3 Authority Key Identifier:
                keyid:F1:E0:FD:7B:DA:F1:71:98:90:F6:B2:49:B3:BC:41:82:14:BA:8A:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9706/F888443A114711F18BB454AF223D8C67/8eD9e9rxcZiQ9rJJs7xBghS6iss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8eD9e9rxcZiQ9rJJs7xBghS6iss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9706/F888443A114711F18BB454AF223D8C67/8eD9e9rxcZiQ9rJJs7xBghS6iss.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:f8:52:9a:13:25:7a:5b:60:1f:94:95:ae:2f:f3:7e:bd:31:
         5d:72:95:03:a5:cf:2f:a5:b4:c2:70:73:36:b5:35:ae:7f:2f:
         ba:fd:8f:21:fd:21:36:3a:92:96:6b:2c:1a:a4:b9:74:b6:a5:
         43:82:e4:a6:43:d5:2d:d2:a9:a2:7a:39:84:e7:19:95:86:64:
         de:c9:7b:8f:e4:90:65:8e:1c:99:72:e0:d9:ff:5d:c6:2b:bf:
         34:32:21:61:ef:54:44:53:60:99:9c:43:c2:bd:da:38:67:eb:
         77:33:19:d1:7e:08:4d:73:31:8c:14:5e:bf:ea:39:ec:27:26:
         c9:09:72:65:56:0c:5e:23:97:c0:48:6a:50:cd:84:87:86:1d:
         47:ca:14:9a:53:5b:40:b3:21:0a:cd:fe:a4:8b:4b:a2:09:89:
         9c:53:f5:4a:bb:4e:a3:fd:6a:28:15:4c:d6:08:c7:21:5a:f2:
         ce:da:43:a4:f3:a0:d6:5e:fa:9e:94:c6:65:43:ac:43:55:ee:
         fd:e4:69:e0:8b:d7:94:67:34:3c:ec:c7:9c:f4:7e:14:33:1f:
         84:ab:b3:d8:ab:fe:b5:fe:b7:8b:1c:03:bb:36:57:cd:6f:1c:
         a3:0d:ac:26:8c:1b:e8:83:02:6b:75:c4:fa:0b:fc:7c:6d:7e:
         cc:8d:17:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:21:48 2026 by rpki-client