Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.mft
File:                     8mF6VUFXzpkgnjn9-1PVFt3eePg.mft (raw, json)
Hash identifier:          Pavbh34p5EH0oKv7uUKFbmP1YlYxEPub0kgf3p2bIe0=
Subject key identifier:   A6:03:F3:DA:51:19:A9:04:8E:A4:09:E9:2E:61:4E:D4:63:90:DD:AA
Authority key identifier: F2:61:7A:55:41:57:CE:99:20:9E:39:FD:FB:53:D5:16:DD:DE:78:F8
Certificate issuer:       /CN=A91DD25E/serialNumber=F2617A554157CE99209E39FDFB53D516DDDE78F8
Certificate serial:       69
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mF6VUFXzpkgnjn9-1PVFt3eePg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.mft
Manifest number:          67
Signing time:             Sun 19 Apr 2026 07:31:54 +0000
Manifest this update:     Sun 19 Apr 2026 07:31:54 +0000
Manifest next update:     Sun 26 Apr 2026 07:31:54 +0000
Files and hashes:         1: 8mF6VUFXzpkgnjn9-1PVFt3eePg.crl (hash: PwMG4Plxsy5oQmHQlWTsTJ1J5sukSbStLmfPRowJjg4=)
                          2: 43E43270A27D11F0862ABC17C4F9AE02.roa (hash: NZ2PR9JzupHRbIAvvTjexUgRAGHGGYmk/Ol3V3TWapU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.crl
                          rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mF6VUFXzpkgnjn9-1PVFt3eePg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD25E, serialNumber=F2617A554157CE99209E39FDFB53D516DDDE78F8
        Validity
            Not Before: Apr 19 07:31:54 2026 GMT
            Not After : Apr 26 07:31:54 2026 GMT
        Subject: CN=69e484ea-9877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:4f:65:20:d2:c7:37:7b:cd:33:27:94:45:59:
                    3d:e8:4a:72:8f:91:b4:e7:79:33:48:fb:44:c9:b3:
                    66:21:03:12:73:f6:d7:6d:0f:06:0d:5e:16:aa:69:
                    a7:08:d2:cc:77:ac:c5:40:31:32:65:3a:f6:c2:6c:
                    1f:ad:37:b2:56:8e:5c:14:f6:fa:2f:db:1b:43:26:
                    f2:25:33:96:60:34:2e:74:df:ab:d6:68:d4:8e:e5:
                    91:d5:df:d1:0b:ab:02:54:8c:31:09:6e:15:29:c0:
                    e3:49:67:11:49:52:e4:69:1f:4c:43:ab:78:51:0f:
                    d3:b4:29:f0:13:cc:09:e3:e9:0c:33:24:7e:44:e3:
                    d1:9a:5b:35:9c:d6:60:d6:2f:55:2b:bb:31:4e:ec:
                    bb:8f:f5:68:e4:38:54:1f:18:a0:85:81:7b:9e:a8:
                    05:31:48:51:15:3a:4c:82:b1:91:11:23:3e:a1:41:
                    ad:f9:e1:0d:e5:68:e9:11:12:e9:03:9f:38:13:6d:
                    da:0a:81:5b:20:93:f1:28:d2:20:78:42:41:a2:45:
                    65:86:6c:d7:85:8e:82:b1:be:b3:fe:01:75:55:d0:
                    09:1c:1e:fc:91:01:d0:9f:16:b4:d7:26:7e:74:37:
                    a7:50:79:fc:ed:0d:a7:f1:28:a4:9d:7f:e1:b7:b2:
                    de:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:03:F3:DA:51:19:A9:04:8E:A4:09:E9:2E:61:4E:D4:63:90:DD:AA
            X509v3 Authority Key Identifier:
                keyid:F2:61:7A:55:41:57:CE:99:20:9E:39:FD:FB:53:D5:16:DD:DE:78:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mF6VUFXzpkgnjn9-1PVFt3eePg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:7c:41:ae:ac:18:3c:b3:af:ce:bf:34:6b:5a:ec:2b:31:69:
         fc:e9:52:c1:d8:e2:a4:13:39:44:70:85:97:e1:de:05:e6:81:
         22:36:a6:68:42:cd:3a:ff:2c:e8:80:39:78:ef:f6:b3:40:63:
         da:30:03:bc:fb:20:91:c4:9b:b4:fe:ba:89:c7:bd:65:cd:05:
         6c:4d:0f:8c:0f:e4:12:67:6b:05:bc:cb:67:7e:4b:57:33:ac:
         45:75:16:b6:2c:3b:b5:a0:ad:2c:34:f5:8f:1f:b2:59:94:3a:
         20:3c:99:b3:0f:a1:94:c2:f6:da:a4:05:54:da:86:c7:48:42:
         b8:7e:7a:5c:f5:1f:fd:cd:73:14:ed:e7:db:97:08:84:c5:25:
         44:99:42:a7:68:79:68:ac:98:c8:6f:50:b4:ed:0f:d9:24:d1:
         58:58:de:77:96:c4:71:6b:d8:14:67:01:67:0b:47:06:69:8e:
         3f:9a:5a:74:75:3a:2b:99:7a:61:a4:52:08:71:ac:e6:62:42:
         73:df:3b:69:04:26:37:ca:f9:6c:bb:ef:04:cd:12:4b:32:c6:
         32:f2:07:cc:f0:6c:a1:12:d2:76:d6:20:22:e7:58:86:b6:d5:
         8b:bf:28:e9:37:48:a5:b0:d0:c3:42:6e:11:6e:70:6e:5b:20:
         2e:3a:e8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:37:36 2026 by rpki-client