Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.mft
File:                     AchYGBCI4bnFd13KDEuum5_1d7M.mft (raw, json)
Hash identifier:          103GiasvuuE4nRyap/bCxShYJg9hqGSxggX7s2fP6JQ=
Subject key identifier:   0C:14:DA:0B:98:A0:DF:C5:42:C6:10:A6:BA:ED:01:3E:7E:5F:E6:F5
Authority key identifier: 01:C8:58:18:10:88:E1:B9:C5:77:5D:CA:0C:4B:AE:9B:9F:F5:77:B3
Certificate issuer:       /CN=A91D5979/serialNumber=01C858181088E1B9C5775DCA0C4BAE9B9FF577B3
Certificate serial:       87
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AchYGBCI4bnFd13KDEuum5_1d7M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.mft
Manifest number:          84
Signing time:             Sun 19 Apr 2026 07:18:10 +0000
Manifest this update:     Sun 19 Apr 2026 07:18:10 +0000
Manifest next update:     Sun 26 Apr 2026 07:18:10 +0000
Files and hashes:         1: AchYGBCI4bnFd13KDEuum5_1d7M.crl (hash: c7FbmVqwMB7xeRRXvVDzKaRV9XwyrA0yifzzajhkHXI=)
                          2: A80352FA7F2711F0AC85D327C4F9AE02.roa (hash: soDV/PEqeB7K5BGg9JE4t87sCM0x5IJxHwVBfeX+piI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.crl
                          rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AchYGBCI4bnFd13KDEuum5_1d7M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135 (0x87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5979, serialNumber=01C858181088E1B9C5775DCA0C4BAE9B9FF577B3
        Validity
            Not Before: Apr 19 07:18:10 2026 GMT
            Not After : Apr 26 07:18:10 2026 GMT
        Subject: CN=69e481b2-9c84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:02:0b:03:68:fc:6f:6d:0e:78:59:ef:54:d0:
                    be:72:fd:f2:a2:42:c5:b1:c2:db:2a:0f:1c:09:62:
                    31:53:cc:d8:7b:7c:fb:83:71:e9:f9:8a:c6:f5:3b:
                    ba:ef:12:45:ee:95:9f:93:bc:ac:17:ed:6e:78:3b:
                    b4:f4:bc:8e:ec:bb:62:62:a2:b8:bf:96:22:e4:22:
                    5d:bd:05:3b:b2:ea:8d:21:15:7e:45:ba:ee:43:46:
                    23:d3:4f:0f:a1:00:8f:be:70:24:eb:36:d9:16:f1:
                    78:4f:f4:fb:3c:3b:68:a5:4e:cc:f3:06:aa:f4:2d:
                    9a:a7:fd:4b:0d:bb:4e:58:5f:7a:f1:17:65:e1:f4:
                    ca:9c:f4:6b:1a:e4:dc:f8:c4:dc:d0:21:0d:80:d3:
                    30:9e:04:e2:c5:f3:d9:33:43:c8:53:7d:26:28:a9:
                    37:2d:12:1b:9f:1e:f7:a7:ed:86:f3:cc:ff:38:e7:
                    dd:a1:29:57:71:e2:ac:34:cb:6f:84:29:f1:75:a6:
                    23:87:a4:26:13:50:b0:49:b2:6e:c7:74:f5:fc:54:
                    5c:6e:f5:c7:fd:e8:b3:b4:5b:ee:7a:a4:2a:82:f6:
                    8f:3e:11:56:d8:f7:40:e3:10:d0:10:9a:44:45:8c:
                    10:77:8a:96:b2:3e:68:36:0a:08:ac:e1:47:2b:e1:
                    84:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:14:DA:0B:98:A0:DF:C5:42:C6:10:A6:BA:ED:01:3E:7E:5F:E6:F5
            X509v3 Authority Key Identifier:
                keyid:01:C8:58:18:10:88:E1:B9:C5:77:5D:CA:0C:4B:AE:9B:9F:F5:77:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AchYGBCI4bnFd13KDEuum5_1d7M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:14:70:14:b6:2e:b4:31:58:d1:f3:b1:bd:5f:ab:d8:5d:dc:
         f1:cd:e0:ea:5c:30:24:11:6d:10:2a:36:e7:20:2a:66:ad:a2:
         9c:c4:85:84:ed:a9:ea:31:06:0e:6d:91:e3:8c:26:d5:ec:ba:
         0c:70:3f:28:56:be:f6:85:a9:3b:fe:8d:7d:38:e7:e9:c8:91:
         48:26:f7:cf:23:1c:83:3a:cf:14:69:f6:10:04:a1:9a:3a:d1:
         d6:7b:d1:88:82:18:28:0b:4a:65:9e:d6:27:36:59:18:3c:e6:
         ab:ef:63:ae:8a:28:f7:8a:8a:dd:87:10:a4:f1:fe:33:3c:6c:
         9b:67:98:95:76:95:6e:7b:0b:da:f4:3a:b7:e8:61:e6:24:b3:
         29:7a:93:be:4f:9b:8b:fd:3e:f7:8a:ae:a2:2a:b7:51:d6:84:
         2d:e0:04:09:ad:7b:d0:8f:00:f6:b5:2d:d7:1e:81:06:86:a1:
         e9:55:d2:b9:88:b1:99:05:52:1f:73:5d:ef:02:dc:1d:13:17:
         e2:a0:75:53:a4:7e:65:ac:f2:67:d3:e1:51:15:e5:0b:d5:a9:
         0f:f7:6a:cd:a2:64:9d:d1:31:e8:75:a0:91:18:fe:84:3b:53:
         4d:40:e8:cd:9e:2c:c9:bf:e9:fc:2b:78:92:83:ee:10:37:c7:
         8e:1d:12:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:16:57 2026 by rpki-client