Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft
File:                     a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft (raw, json)
Hash identifier:          +eJDy5Wg1y/c7Nd1EEZplfY/HTPdD/P2XRbt7AZ/l44=
Subject key identifier:   A0:3F:23:8D:E9:DE:3B:77:DC:CA:D0:1E:1B:FB:6E:1A:0D:DF:A5:2B
Authority key identifier: 6B:C2:63:B5:1A:56:B5:17:40:77:74:59:79:62:27:ED:00:DF:4D:70
Certificate issuer:       /CN=A91D2F93/serialNumber=6BC263B51A56B51740777459796227ED00DF4D70
Certificate serial:       078C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a8JjtRpWtRdAd3RZeWIn7QDfTXA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft
Manifest number:          0784
Signing time:             Thu 16 Apr 2026 21:27:33 +0000
Manifest this update:     Thu 16 Apr 2026 21:27:33 +0000
Manifest next update:     Thu 23 Apr 2026 21:27:33 +0000
Files and hashes:         1: a8JjtRpWtRdAd3RZeWIn7QDfTXA.crl (hash: QZPuMuU4lHRxTHDG+wwfgHu2BmiD9CNUrZSfyvRZkuE=)
                          2: 715A7174F80411F099DDF14C6E6F56BC.roa (hash: vR+q/zKzwJ0cS0EI5NmaW8vlP008OwFN/8qpLRoeRrk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.crl
                          rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a8JjtRpWtRdAd3RZeWIn7QDfTXA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:27:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1932 (0x78c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D2F93, serialNumber=6BC263B51A56B51740777459796227ED00DF4D70
        Validity
            Not Before: Apr 16 21:27:33 2026 GMT
            Not After : Apr 23 21:27:33 2026 GMT
        Subject: CN=69e15445-7523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b9:c5:b3:ea:61:94:f5:0c:b3:1a:3a:ba:e0:
                    0e:14:97:df:f5:a7:ae:c2:41:b1:d5:ce:78:aa:48:
                    2d:15:e6:7a:d4:32:fc:28:33:ad:09:ce:98:98:38:
                    d5:4c:63:c1:61:ca:33:4d:b3:2c:49:5b:93:fa:f9:
                    48:9b:20:56:5b:f6:24:15:01:50:1d:7a:4f:ef:4b:
                    ac:38:8b:09:52:57:8a:05:06:a9:58:03:e6:a7:f0:
                    47:db:90:48:b8:e9:a5:0f:c6:66:70:a8:b5:51:ce:
                    a4:2d:8c:f1:78:63:4d:7e:0b:25:ac:de:5d:88:ee:
                    71:0c:f9:b9:34:4b:90:65:a2:16:99:82:7a:48:4d:
                    dc:15:01:9f:35:f2:e7:90:4e:f0:0d:c5:73:f4:40:
                    3e:82:e7:32:d6:5d:96:26:d8:00:74:1c:5b:ef:1c:
                    aa:86:14:17:0e:5b:4e:ee:74:13:a2:c9:ae:5d:0e:
                    c2:77:70:e3:0c:a6:d8:d5:60:bd:bc:67:e2:29:a5:
                    8f:8c:46:eb:55:f8:37:0c:78:fb:29:4b:d2:c8:79:
                    cf:3f:a9:4f:51:db:ff:eb:e2:0e:06:67:68:5a:0c:
                    f2:00:6e:7e:ce:2c:06:e4:19:f2:fa:49:61:74:04:
                    8a:6f:65:2f:4e:75:c5:22:cd:d6:35:5c:84:b0:3d:
                    c3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:3F:23:8D:E9:DE:3B:77:DC:CA:D0:1E:1B:FB:6E:1A:0D:DF:A5:2B
            X509v3 Authority Key Identifier:
                keyid:6B:C2:63:B5:1A:56:B5:17:40:77:74:59:79:62:27:ED:00:DF:4D:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a8JjtRpWtRdAd3RZeWIn7QDfTXA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:11:88:38:95:28:f0:2a:da:2b:8f:75:d6:ad:8e:c8:c6:00:
         cd:05:87:69:9c:98:c7:49:a6:fe:fc:6a:fe:55:cd:14:2b:64:
         b5:13:07:23:c9:81:c5:66:9c:4e:5b:5d:0c:b8:a4:78:da:32:
         45:17:5f:1a:97:d0:fc:3f:7b:0a:1c:31:69:af:bb:15:c9:e3:
         e0:81:74:6a:b5:59:3e:0a:47:d1:02:d7:4d:a5:db:eb:a0:70:
         14:cc:6d:69:0f:33:54:27:a3:d5:3d:95:b4:76:58:df:bd:74:
         3b:a1:fe:96:6c:f4:16:a3:e3:11:66:cd:31:aa:f2:f0:0e:9a:
         9b:f7:e6:fb:99:6d:03:f9:50:3d:96:63:aa:10:3c:bc:6f:c4:
         04:72:f1:4b:78:cc:07:dc:6c:3c:06:35:d9:1a:0d:7c:c2:88:
         26:85:a0:4c:06:26:e2:f6:a7:e4:09:cf:6c:a3:f0:d3:5b:c3:
         88:85:b0:57:dc:95:7e:f0:99:f2:46:6c:6f:91:c8:02:c3:47:
         19:de:54:ab:7a:e8:a2:e1:ba:4a:44:b5:48:f4:49:c9:97:c4:
         63:bb:e5:bc:c8:6b:3f:5d:50:67:a7:f1:0c:94:9b:2c:bb:e1:
         17:d7:33:a5:91:c3:dc:c9:bd:5a:dc:0a:ee:19:66:da:3a:3d:
         8f:57:ac:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:22:36 2026 by rpki-client