Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft
File:                     a4KWpYFUMCeOwxG16cvrf_CpDcY.mft (raw, json)
Hash identifier:          5vaZjhMElJq4BZpWRHCJ0Z2SgzwB3ipQa0y8/HinsIw=
Subject key identifier:   43:95:D6:DD:01:06:D9:AB:8E:6B:4A:90:32:47:A3:BF:0A:E5:94:F6
Authority key identifier: 6B:82:96:A5:81:54:30:27:8E:C3:11:B5:E9:CB:EB:7F:F0:A9:0D:C6
Certificate issuer:       /CN=A91951DE/serialNumber=6B8296A5815430278EC311B5E9CBEB7FF0A90DC6
Certificate serial:       8E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft
Manifest number:          8B
Signing time:             Sun 05 Apr 2026 06:56:46 +0000
Manifest this update:     Sun 05 Apr 2026 06:56:46 +0000
Manifest next update:     Sun 12 Apr 2026 06:56:46 +0000
Files and hashes:         1: a4KWpYFUMCeOwxG16cvrf_CpDcY.crl (hash: 0jBVflYwIBjRk/u2/Go7ghzgC1PPwd5apBMa6BTLvrU=)
                          2: 61FC1B6A60B511F0A2C58668C4F9AE02.roa (hash: oCr3aQd1HSJF91DdiESRPlphTmJf2c8Lshvn2EKkib4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.crl
                          rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 06:56:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142 (0x8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91951DE, serialNumber=6B8296A5815430278EC311B5E9CBEB7FF0A90DC6
        Validity
            Not Before: Apr  5 06:56:46 2026 GMT
            Not After : Apr 12 06:56:46 2026 GMT
        Subject: CN=69d207ae-e0b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e9:e5:07:72:d1:aa:59:a4:1f:76:86:9f:2e:
                    c2:8f:2d:57:72:71:80:65:e2:80:19:e0:f0:c1:55:
                    9f:d8:88:f9:c4:d9:cd:ea:22:77:fc:87:c3:e3:58:
                    35:d7:1c:9d:d0:3d:c9:e0:fe:88:4b:93:5c:e7:d2:
                    02:e1:20:d1:54:e3:7b:e7:e4:3e:17:9a:21:09:f2:
                    f2:5c:30:ab:6c:8e:0c:29:4a:22:f6:01:83:4e:e4:
                    b1:ad:32:78:74:d5:44:4a:d3:2f:5e:93:7e:94:e8:
                    bf:53:20:b1:4f:6b:b1:b6:59:5e:01:cb:57:25:a6:
                    f1:eb:79:60:9f:dc:c9:3d:46:c1:74:06:97:e6:52:
                    f4:49:02:8d:94:b2:c5:e7:83:38:90:b9:e3:83:04:
                    bb:43:d1:e4:00:1d:33:a1:53:4b:70:65:f6:97:49:
                    5c:62:ce:62:ce:70:14:91:d4:bc:e0:92:5e:fd:61:
                    8c:c2:f5:65:65:8e:93:a0:d1:d5:48:a2:c1:82:73:
                    57:99:fa:14:49:27:c2:ca:20:c1:bc:6f:95:d1:62:
                    97:6f:c1:a0:b1:80:7a:1d:8b:2e:8e:20:76:60:d7:
                    dd:1c:84:94:74:21:90:cd:8d:38:c4:3f:c2:82:d5:
                    53:fc:34:8d:ef:f7:ed:3e:ab:62:48:84:df:c0:e1:
                    9e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:95:D6:DD:01:06:D9:AB:8E:6B:4A:90:32:47:A3:BF:0A:E5:94:F6
            X509v3 Authority Key Identifier:
                keyid:6B:82:96:A5:81:54:30:27:8E:C3:11:B5:E9:CB:EB:7F:F0:A9:0D:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:5e:8e:de:b6:3d:bf:6d:5d:ab:3a:20:a8:c5:29:51:12:5d:
         98:16:23:e3:e2:a8:ee:69:ee:c9:7b:8a:57:b9:60:80:f8:7a:
         81:3f:ef:77:12:b3:7b:fd:9d:8b:d4:ee:65:9c:be:83:80:3d:
         75:b5:c0:9b:f3:f8:47:0b:66:39:2d:c5:b2:0c:98:79:8a:51:
         97:fd:34:3f:65:0a:02:31:39:4d:17:ce:78:20:c9:d3:97:84:
         67:f5:c4:1d:12:85:a8:5f:f1:60:fe:b7:2e:22:58:d2:fe:15:
         1f:c6:17:ed:cc:56:39:7d:1f:05:c2:34:1a:50:b6:57:2b:24:
         58:12:34:56:81:6c:79:7e:b0:ca:1b:b6:42:34:f7:68:62:0a:
         0d:72:a2:a7:d7:97:a8:10:bb:7f:73:3e:3e:ed:0a:60:bd:f7:
         37:ce:25:ad:4c:00:4f:65:5a:68:29:d5:7c:42:47:ef:13:c3:
         32:45:aa:05:4d:99:cb:e8:18:9d:d6:12:6d:54:46:64:f0:00:
         cc:5d:bb:e3:2d:45:27:5a:ff:ab:4e:5e:cf:fe:d1:b0:02:5c:
         35:b9:02:9a:02:a3:5e:b3:b0:99:ce:e6:f4:7a:91:bb:60:18:
         6e:93:4f:5a:b8:f5:fc:0f:f1:48:a6:7a:55:d9:7f:6f:e6:85:
         d0:78:ed:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 02:23:38 2026 by rpki-client