Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6369/5C9C68440C7911F1B18A0C0E1C3D8C67/8e0mdV_Ai9BZkZUyuPo6akg04_k.mft
File:                     8e0mdV_Ai9BZkZUyuPo6akg04_k.mft (raw, json)
Hash identifier:          oYxS8u0aHrFOJ66MtY2wAw6C4Uui84Ra6bNzWtTgiJw=
Subject key identifier:   D2:81:38:5A:E2:F4:38:FF:73:71:31:8C:8E:72:9B:83:3B:15:E1:61
Authority key identifier: F1:ED:26:75:5F:C0:8B:D0:59:91:95:32:B8:FA:3A:6A:48:34:E3:F9
Certificate issuer:       /CN=A91E6369/serialNumber=F1ED26755FC08BD059919532B8FA3A6A4834E3F9
Certificate serial:       26
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8e0mdV_Ai9BZkZUyuPo6akg04_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6369/5C9C68440C7911F1B18A0C0E1C3D8C67/8e0mdV_Ai9BZkZUyuPo6akg04_k.mft
Manifest number:          24
Signing time:             Fri 17 Apr 2026 08:34:13 +0000
Manifest this update:     Fri 17 Apr 2026 08:34:12 +0000
Manifest next update:     Fri 24 Apr 2026 08:34:12 +0000
Files and hashes:         1: 8e0mdV_Ai9BZkZUyuPo6akg04_k.crl (hash: ywu+YqwOz0hAL3BjQuoqMtA+vORlBPkLwGgL507lWFw=)
                          2: E0F26F840C7A11F1925E54691C3D8C67.roa (hash: I7EBb+YBXT8xgUhV3T13QqxJ9GRbIYd43OJn2AJIB9Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6369/5C9C68440C7911F1B18A0C0E1C3D8C67/8e0mdV_Ai9BZkZUyuPo6akg04_k.crl
                          rsync://rpki.apnic.net/member_repository/A91E6369/5C9C68440C7911F1B18A0C0E1C3D8C67/8e0mdV_Ai9BZkZUyuPo6akg04_k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8e0mdV_Ai9BZkZUyuPo6akg04_k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:34:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6369, serialNumber=F1ED26755FC08BD059919532B8FA3A6A4834E3F9
        Validity
            Not Before: Apr 17 08:34:12 2026 GMT
            Not After : Apr 24 08:34:12 2026 GMT
        Subject: CN=69e1f085-1130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:81:db:da:2b:da:51:f5:cb:e9:b0:b3:30:92:
                    77:14:a5:bf:5d:65:76:6a:d8:5c:1c:88:9e:e4:b6:
                    f0:42:ac:e2:53:7e:38:2b:90:09:98:82:48:57:1a:
                    2a:95:76:a8:d0:b0:83:2c:45:19:8f:25:a2:30:f0:
                    3c:81:bc:f8:5f:c1:34:ea:ba:11:f7:79:2c:26:cd:
                    e0:86:c4:10:f4:df:fc:fc:04:b2:d1:fd:8a:5a:4b:
                    3f:49:21:cd:a4:0d:31:ec:fa:2e:d5:6e:7f:a9:f3:
                    40:20:17:9a:6b:79:58:39:39:66:59:f4:b1:26:3f:
                    a0:c2:7c:05:fb:84:83:f7:7a:6c:42:55:8d:89:ba:
                    f5:54:43:7f:78:e9:12:ae:40:9f:b1:1f:6d:ce:c6:
                    c1:d9:d2:1f:ef:f7:b7:d5:e0:34:08:b2:2f:d7:27:
                    74:fc:c5:d9:bc:a4:4b:9d:53:5d:b9:3f:bb:6e:57:
                    52:4d:e4:3f:19:7d:31:09:b8:ca:21:9f:c7:42:3e:
                    92:4e:24:a5:a3:30:4a:82:f4:3b:af:42:23:b2:d9:
                    99:4b:b9:16:64:a1:9b:c8:92:c3:d5:e7:fb:b9:d5:
                    a6:01:c0:7a:5d:a3:1e:6e:14:2f:0a:df:4c:9c:a1:
                    45:b8:ee:7d:49:fb:af:42:b2:3f:cc:10:2b:37:25:
                    e7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:81:38:5A:E2:F4:38:FF:73:71:31:8C:8E:72:9B:83:3B:15:E1:61
            X509v3 Authority Key Identifier:
                keyid:F1:ED:26:75:5F:C0:8B:D0:59:91:95:32:B8:FA:3A:6A:48:34:E3:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6369/5C9C68440C7911F1B18A0C0E1C3D8C67/8e0mdV_Ai9BZkZUyuPo6akg04_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8e0mdV_Ai9BZkZUyuPo6akg04_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6369/5C9C68440C7911F1B18A0C0E1C3D8C67/8e0mdV_Ai9BZkZUyuPo6akg04_k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:ba:56:68:af:29:5d:34:29:e6:76:3d:f5:be:8e:86:5c:54:
         d2:bd:aa:5e:ac:9e:49:6b:2c:9b:94:49:12:aa:79:24:06:31:
         40:8a:ae:ee:1b:68:7c:da:20:fb:e0:4b:3a:76:60:c6:24:fd:
         0f:59:2f:ea:f6:97:12:14:c5:b2:5c:a7:4e:d1:f8:6f:f4:b7:
         ca:18:82:f0:f2:9c:11:38:23:21:8e:25:ec:e4:cf:9e:2f:38:
         cd:6a:03:f4:30:08:99:2c:e9:85:9d:43:37:4f:d2:f8:61:d3:
         ad:7a:f5:dd:a1:f7:b6:9a:11:19:6e:a5:26:28:6d:50:c7:ff:
         d8:03:e6:d1:4e:17:d8:76:cb:c4:c3:9f:e4:cd:ce:0a:6d:e4:
         5e:99:af:b9:a8:53:0a:c2:6c:bc:3d:39:11:8e:63:b9:7e:1b:
         32:57:88:da:25:37:0d:ad:b2:42:71:1a:a1:5d:f3:f1:54:35:
         41:cd:43:4d:ab:02:ce:3a:06:e7:0c:25:df:86:e5:86:9c:8f:
         2b:33:89:7d:7f:c8:60:71:c1:1b:e9:d7:04:79:67:92:bc:f2:
         d4:13:65:7a:0c:c1:b0:2e:55:c3:5d:3d:3f:7e:79:21:17:98:
         5b:73:09:d9:97:b5:3b:4d:e9:2a:be:f1:38:d3:78:87:ce:53:
         5e:9a:b7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:42:56 2026 by rpki-client