Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.mft
File:                     yL8GWnSCLvjMYvSlTlnVhxILb0c.mft (raw, json)
Hash identifier:          i8OLz0FAUuiVvsgEqQA5WHn8U7+o2CNpqZyOC0sYOTU=
Subject key identifier:   07:D7:AB:D5:47:10:48:13:30:88:23:BA:36:AA:D4:B2:65:31:4A:18
Authority key identifier: C8:BF:06:5A:74:82:2E:F8:CC:62:F4:A5:4E:59:D5:87:12:0B:6F:47
Certificate issuer:       /CN=A91E85F1/serialNumber=C8BF065A74822EF8CC62F4A54E59D587120B6F47
Certificate serial:       D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yL8GWnSCLvjMYvSlTlnVhxILb0c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.mft
Manifest number:          C8
Signing time:             Sun 19 Apr 2026 06:29:50 +0000
Manifest this update:     Sun 19 Apr 2026 06:29:49 +0000
Manifest next update:     Sun 26 Apr 2026 06:29:49 +0000
Files and hashes:         1: yL8GWnSCLvjMYvSlTlnVhxILb0c.crl (hash: acUF8mUCzZJoooEvCP0TL7RZ1BeF9xbWN4uzQ80UpEI=)
                          2: 4D144B780DFE11F09C46E054C4F9AE02.roa (hash: ZgPtES9Kb7/bZDuku74P3oPXELpqML+BgkqSggVYIcY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.crl
                          rsync://rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yL8GWnSCLvjMYvSlTlnVhxILb0c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 208 (0xd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E85F1, serialNumber=C8BF065A74822EF8CC62F4A54E59D587120B6F47
        Validity
            Not Before: Apr 19 06:29:49 2026 GMT
            Not After : Apr 26 06:29:49 2026 GMT
        Subject: CN=69e4765d-a0b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:30:3d:f6:95:37:f7:46:20:6a:47:49:a2:c6:
                    e3:ce:4c:8a:e1:ce:27:7a:c8:6b:22:b6:42:63:e3:
                    9c:48:e1:85:b5:47:23:08:77:8f:5d:15:97:66:60:
                    a8:64:99:44:6c:be:e4:f1:84:60:93:3e:62:b6:dc:
                    e0:99:a3:84:d4:53:b3:2e:95:8c:9c:fe:78:74:54:
                    f3:b5:20:3d:87:35:e6:4e:cc:29:c6:d8:0a:88:dc:
                    5f:e2:27:0e:3d:54:d7:f9:2b:2f:ac:b5:9a:88:af:
                    04:14:ba:ea:47:55:64:fb:70:34:d7:f3:b5:94:8e:
                    82:96:63:1a:27:c3:7a:b9:c6:b6:f5:69:a2:c3:2e:
                    59:30:bd:0a:34:87:b7:93:8b:50:fc:6f:f4:7e:48:
                    73:e3:5c:50:7b:00:7d:66:cd:62:a8:47:5d:2b:7e:
                    e2:34:45:4f:ba:91:9e:d0:ab:5c:0e:31:88:64:01:
                    5a:3f:d4:33:40:84:0d:08:c0:41:8a:c8:ea:2d:84:
                    0c:dd:aa:bd:c8:c9:c3:72:67:06:9f:ff:64:41:55:
                    e0:c1:bd:11:fd:19:5c:bc:be:32:8d:86:64:4c:1b:
                    9b:c7:c6:59:5c:ee:56:a9:72:db:0a:96:8e:70:b8:
                    7a:64:28:14:c2:7e:00:2b:fa:3d:4e:a5:25:b5:4c:
                    16:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:D7:AB:D5:47:10:48:13:30:88:23:BA:36:AA:D4:B2:65:31:4A:18
            X509v3 Authority Key Identifier:
                keyid:C8:BF:06:5A:74:82:2E:F8:CC:62:F4:A5:4E:59:D5:87:12:0B:6F:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yL8GWnSCLvjMYvSlTlnVhxILb0c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:c5:20:94:95:96:55:bf:0e:c0:a5:79:3c:80:4c:4f:33:bc:
         e4:e9:f6:7e:a6:83:5a:11:1f:af:88:a0:bc:78:2b:cc:cb:24:
         ba:71:58:89:a5:1c:dd:58:04:6f:47:f7:01:eb:b8:ed:96:d7:
         98:3b:e7:82:d3:82:9b:21:14:4c:97:cb:53:ed:30:01:56:c7:
         e0:76:4a:e7:50:47:ad:16:bc:60:dc:18:d4:f5:46:56:7c:c7:
         c0:e6:48:33:6d:2c:fd:5c:42:db:0f:20:69:20:79:0c:82:10:
         ee:78:12:6b:66:3c:6c:73:18:04:16:f8:06:a6:a8:87:b3:68:
         0f:57:d2:0b:9f:1a:15:18:ca:4b:54:9e:07:10:e4:ac:60:0f:
         dd:fa:d3:8a:88:f2:24:66:8e:ed:6a:70:66:cf:28:8b:25:3e:
         65:88:c3:c9:b3:bd:15:41:08:be:51:6f:0a:e5:e8:8c:05:6f:
         ca:af:66:31:cd:fd:9e:a4:05:30:6a:0b:8c:61:69:49:d0:19:
         99:80:4e:d4:e5:58:13:86:9b:9e:ed:18:62:d2:1a:40:4a:58:
         92:a2:0c:7c:c8:44:20:d1:52:a4:77:31:b7:8f:1e:0b:58:9d:
         8a:bf:ec:fe:4c:44:28:f4:2e:c6:92:17:4a:c0:da:07:82:32:
         e8:93:d6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:58:17 2026 by rpki-client