Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft
File:                     08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft (raw, json)
Hash identifier:          PZcIxvCrypsnhoOh+Kw4rCZ7ZUlCd3cu1nd54KyWOwE=
Subject key identifier:   31:86:B9:B1:87:EB:8F:BD:FC:EA:23:7C:B3:4F:7C:DB:4B:FC:D3:67
Authority key identifier: D3:C6:22:E7:90:F1:DE:F1:69:28:BB:E5:54:18:17:27:CF:8C:88:F8
Certificate issuer:       /CN=A91D1234/serialNumber=D3C622E790F1DEF16928BBE554181727CF8C88F8
Certificate serial:       03C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft
Manifest number:          03BA
Signing time:             Fri 17 Apr 2026 00:33:42 +0000
Manifest this update:     Fri 17 Apr 2026 00:33:41 +0000
Manifest next update:     Fri 24 Apr 2026 00:33:41 +0000
Files and hashes:         1: 08Yi55Dx3vFpKLvlVBgXJ8-MiPg.crl (hash: mLBr0XR4dP90bAIi3PnyW1GpTtCnAZZNLSSGHHUF/1M=)
                          2: 84A0C6B4D02811ECB2472344C4F9AE02.roa (hash: WbGGMYVbpJXDnL0JcrVJ6qdZ3VyHvFVqCSZIT3Dtr7M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.crl
                          rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:33:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 961 (0x3c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1234, serialNumber=D3C622E790F1DEF16928BBE554181727CF8C88F8
        Validity
            Not Before: Apr 17 00:33:41 2026 GMT
            Not After : Apr 24 00:33:41 2026 GMT
        Subject: CN=69e17fe6-2440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9c:fa:ae:f9:c1:52:ff:52:01:d8:d4:bb:7e:
                    95:fb:4f:a3:1e:f2:a2:61:61:06:e9:03:ac:c5:a3:
                    8e:ca:19:60:ae:9c:aa:f6:15:29:fa:55:44:d3:a4:
                    39:02:59:12:a5:56:d5:ac:db:5c:50:2f:1b:af:32:
                    5c:c3:0e:8f:46:dd:e8:5c:64:25:fb:b4:d2:20:20:
                    c1:6a:76:3d:32:64:d6:1f:1b:38:85:83:71:17:d4:
                    8d:99:da:5e:8e:27:9c:7f:5c:6b:85:88:56:88:86:
                    4d:ae:52:50:2a:1b:96:b0:c8:4c:13:97:ea:57:f7:
                    47:cb:0f:3b:67:7a:18:9f:62:be:6e:81:71:bb:25:
                    4b:0d:23:7d:e7:96:3f:ca:f2:86:c4:6c:4c:eb:ad:
                    83:55:2b:be:cc:5c:3a:27:d9:61:37:09:cd:10:c4:
                    f7:1a:75:7d:9f:c0:5d:1e:40:21:73:d3:7e:19:38:
                    56:58:89:a6:41:74:6b:69:7d:cb:36:94:47:5e:9e:
                    b5:25:df:0c:a7:d6:17:12:9a:c0:c0:27:f4:66:c0:
                    ec:c6:74:3c:58:18:ac:ff:3e:bf:7c:da:cb:54:26:
                    83:dd:36:41:11:8d:e8:fa:1b:f5:74:d2:15:c2:f3:
                    9f:94:6e:69:ec:18:13:0d:cd:b9:4d:80:0b:e2:58:
                    91:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:86:B9:B1:87:EB:8F:BD:FC:EA:23:7C:B3:4F:7C:DB:4B:FC:D3:67
            X509v3 Authority Key Identifier:
                keyid:D3:C6:22:E7:90:F1:DE:F1:69:28:BB:E5:54:18:17:27:CF:8C:88:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:92:f8:73:11:a5:c8:f1:84:d1:7d:87:9d:6b:ef:58:d6:e1:
         77:95:b6:95:85:8c:9a:2c:74:17:b2:fe:53:f3:96:14:bf:e1:
         98:82:9a:07:1e:1a:e9:67:5d:13:0c:63:e9:f4:11:9a:45:7e:
         0d:47:9b:27:c3:b0:5f:b2:c2:6a:c9:fc:88:4a:27:26:6a:cc:
         07:1f:00:01:9e:57:3d:3e:04:02:bb:dc:84:0f:fd:39:5e:da:
         ea:e1:20:79:38:5a:22:a5:1b:b1:62:77:70:a9:2c:99:db:d2:
         c1:d4:34:c1:83:e8:c4:65:76:3a:2a:3c:49:08:4d:e4:3c:82:
         68:77:f6:3d:fe:65:2d:98:83:a0:0b:85:2c:f8:cc:37:e0:00:
         47:aa:60:0a:0c:62:3b:98:2c:e1:c5:27:7e:1b:48:ef:d9:c6:
         eb:cf:f6:db:b7:10:d1:0c:d6:26:93:41:63:5d:65:2e:19:88:
         02:1c:f6:5d:00:59:39:bb:40:d8:c7:50:3f:0e:f2:8e:14:fb:
         c1:17:e9:45:c6:fe:62:3d:b3:d0:c2:82:8d:52:a1:b8:f0:f3:
         1d:1f:3c:9c:6f:3f:74:c2:62:75:ab:51:17:8e:db:d2:67:30:
         53:54:c2:bc:8b:79:10:37:06:bb:b4:2b:1a:47:6b:2c:61:70:
         43:d2:a2:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:02:39 2026 by rpki-client