Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.mft
File:                     8iz473at_fLPnv7b7BITSIY1b00.mft (raw, json)
Hash identifier:          lP294ESOcyX/v6nQFC2MHNXy76F2j1movQND7D5YA+Q=
Subject key identifier:   EE:2C:F9:DF:FD:1A:65:A0:93:F9:E6:29:5D:26:A4:7A:79:24:48:90
Authority key identifier: F2:2C:F8:EF:76:AD:FD:F2:CF:9E:FE:DB:EC:12:13:48:86:35:6F:4D
Certificate issuer:       /CN=A91E1604/serialNumber=F22CF8EF76ADFDF2CF9EFEDBEC12134886356F4D
Certificate serial:       015A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8iz473at_fLPnv7b7BITSIY1b00.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.mft
Manifest number:          0151
Signing time:             Fri 17 Apr 2026 04:49:37 +0000
Manifest this update:     Fri 17 Apr 2026 04:49:37 +0000
Manifest next update:     Fri 24 Apr 2026 04:49:37 +0000
Files and hashes:         1: 8iz473at_fLPnv7b7BITSIY1b00.crl (hash: nJs3caHBuc3OeTIcZ8O24XmgHok/HJh/7TnzNjn1idM=)
                          2: E36214403D0011EFAD623342C4F9AE02.roa (hash: NA5xm/Sk+UM1S0R7e4w/A2uHlcPucDhnuPiGtwppY30=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.crl
                          rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8iz473at_fLPnv7b7BITSIY1b00.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:49:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 346 (0x15a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1604, serialNumber=F22CF8EF76ADFDF2CF9EFEDBEC12134886356F4D
        Validity
            Not Before: Apr 17 04:49:37 2026 GMT
            Not After : Apr 24 04:49:37 2026 GMT
        Subject: CN=69e1bbe1-db51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4c:8c:eb:fc:d1:7d:be:5d:46:73:6d:4b:33:
                    4d:f2:e8:6e:09:f3:8f:dd:d8:25:6f:5d:2e:a2:70:
                    3b:ab:4d:f0:fd:12:8b:a9:24:91:93:0c:7d:d2:6e:
                    fd:64:cc:d7:f3:59:69:44:01:ab:5c:8d:5a:2a:65:
                    09:3e:59:13:9f:fb:f5:e5:73:de:df:77:48:9f:0d:
                    a7:03:d2:f2:ba:9b:4c:a0:e0:72:e6:e6:b7:db:c7:
                    55:26:5b:8c:da:f3:85:92:a8:e9:c5:db:f2:2f:79:
                    51:2d:d2:0f:4c:8d:26:b8:d3:c9:25:12:f2:b1:a4:
                    e3:86:e1:e6:58:45:70:77:ef:5b:5e:28:d0:fc:f7:
                    bf:1e:b1:69:e8:fb:e7:2f:9b:7f:40:85:c3:b6:ea:
                    f4:29:21:2e:56:83:69:77:33:77:2f:63:e2:18:a0:
                    9d:8b:33:29:1f:65:43:6b:06:64:0c:61:de:81:50:
                    21:c6:29:bf:54:bc:1b:8b:f1:28:fa:4a:c0:04:46:
                    36:58:6a:04:b5:43:a4:f5:96:8c:07:82:7e:e0:0f:
                    7c:bc:3a:c2:3d:01:d3:1b:50:ec:7b:e8:d0:40:97:
                    68:bd:86:9d:88:d3:d8:d9:2c:6e:7e:19:10:0e:60:
                    11:30:96:d5:dd:10:88:26:35:12:12:e9:9a:a9:66:
                    ea:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:2C:F9:DF:FD:1A:65:A0:93:F9:E6:29:5D:26:A4:7A:79:24:48:90
            X509v3 Authority Key Identifier:
                keyid:F2:2C:F8:EF:76:AD:FD:F2:CF:9E:FE:DB:EC:12:13:48:86:35:6F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8iz473at_fLPnv7b7BITSIY1b00.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:7a:8c:a5:b4:dd:71:d9:82:11:dc:02:8a:cc:fe:95:05:db:
         3a:00:18:cb:c0:6e:5e:98:7f:87:28:72:6a:29:b0:ec:aa:bc:
         33:5d:de:81:63:55:2d:bd:58:da:b0:b7:fd:b0:17:ca:2c:c1:
         c9:7d:2d:3e:e9:bd:9b:b2:c4:3c:e7:26:be:24:3c:78:e1:df:
         80:5c:c9:f3:03:7b:75:6f:f4:48:a9:03:85:44:84:78:82:c9:
         c0:51:21:f9:67:67:e8:18:04:46:bf:4c:3e:4c:54:6d:c7:22:
         72:dc:a4:68:0d:f7:49:83:4f:f6:94:92:b2:6d:bd:79:fb:fe:
         9d:35:e9:7e:42:8b:b3:c5:5a:d6:3f:69:1b:41:93:1b:c9:de:
         4e:b4:7f:3f:3e:72:b4:db:99:c6:f6:2e:c0:bd:cc:db:df:37:
         f0:87:e9:82:cd:cf:15:48:2b:dc:77:2f:5f:98:c2:7d:fb:24:
         0e:6e:b2:25:a4:1d:12:8e:f1:f9:4a:2d:4b:96:ce:fc:1d:e8:
         03:f9:93:55:13:60:06:27:a4:29:f9:1b:62:3a:77:0b:5d:7a:
         d5:4a:3d:8d:62:f9:af:1c:8a:a1:52:2d:6a:42:cf:51:17:2f:
         57:75:70:ef:26:fe:ec:43:ff:39:8a:13:2e:03:95:11:70:80:
         4c:af:59:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:41:31 2026 by rpki-client