Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.mft
File:                     81Jo-XbornH--mbKRRY2HFiuHZE.mft (raw, json)
Hash identifier:          IYzfJbjMTmRrv7uj8sAL58ooZ0jUEYsY2DEEraVifMc=
Subject key identifier:   27:D3:AD:A9:7C:31:70:8F:58:75:7E:65:0F:2A:F3:44:9A:49:48:75
Authority key identifier: F3:52:68:F9:76:E8:AE:71:FE:FA:66:CA:45:16:36:1C:58:AE:1D:91
Certificate issuer:       /CN=A912A3E1/serialNumber=F35268F976E8AE71FEFA66CA4516361C58AE1D91
Certificate serial:       0D0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81Jo-XbornH--mbKRRY2HFiuHZE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.mft
Manifest number:          0CF8
Signing time:             Sat 04 Apr 2026 18:07:04 +0000
Manifest this update:     Sat 04 Apr 2026 18:07:03 +0000
Manifest next update:     Sat 11 Apr 2026 18:07:03 +0000
Files and hashes:         1: 81Jo-XbornH--mbKRRY2HFiuHZE.crl (hash: azEJnUprtTaVppcgWb5FKhvdEBRz8nZ8oFmEqzMKD1Y=)
                          2: 9D4131DE13D511EF883BC527C4F9AE02.roa (hash: oAi8+6tT0gDEU/KDzVHW25eJUv7lPHmrdBhdNKi7zNc=)
                          3: 68979DAE337B11EA9A024941C4F9AE02.roa (hash: 8bLZJXketyHNyOZYvif++95hPWy/xgg/vw5wwL+M8d4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.crl
                          rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81Jo-XbornH--mbKRRY2HFiuHZE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 18:07:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3340 (0xd0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A3E1, serialNumber=F35268F976E8AE71FEFA66CA4516361C58AE1D91
        Validity
            Not Before: Apr  4 18:07:03 2026 GMT
            Not After : Apr 11 18:07:03 2026 GMT
        Subject: CN=69d15348-c4db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a3:12:f0:71:2f:b5:06:5e:78:14:47:99:45:
                    0a:b0:6e:17:a6:b0:7e:b9:e5:54:bf:d5:10:cc:b6:
                    28:9e:28:a5:1a:79:af:0f:7c:07:8b:d8:44:e2:d8:
                    bf:c9:4a:32:ec:a3:a7:10:84:91:1f:18:d0:5f:e5:
                    15:a9:1a:25:c3:c5:5b:41:ea:d0:52:c0:43:f3:96:
                    c2:8e:f0:55:67:63:db:c1:74:f4:87:fb:a7:5c:99:
                    df:d6:43:fb:ad:3d:15:c2:17:80:04:04:1d:c7:4d:
                    af:dd:2e:28:6b:2b:9f:de:42:65:db:f2:f8:3e:58:
                    04:aa:ad:6c:26:2f:c7:51:04:26:57:97:4c:b0:33:
                    aa:e0:85:90:88:d3:25:e7:15:d3:f0:9a:62:7f:94:
                    e8:e9:49:74:5e:55:b8:69:58:6f:6c:12:ac:9c:67:
                    2c:db:fc:71:26:de:79:23:aa:e2:a1:cf:65:51:05:
                    8f:48:31:1d:f5:d4:bd:76:9f:a4:26:30:15:7d:1b:
                    2a:c8:2b:13:67:5a:9f:7f:56:16:31:44:4a:e1:9a:
                    24:2f:aa:5d:42:61:d1:69:d7:91:89:5d:d9:bb:76:
                    ee:9f:7c:62:b7:fe:0e:7e:56:80:34:1c:a7:e9:c6:
                    58:bf:5f:a2:03:4d:49:cc:ba:81:30:2e:83:df:af:
                    2a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D3:AD:A9:7C:31:70:8F:58:75:7E:65:0F:2A:F3:44:9A:49:48:75
            X509v3 Authority Key Identifier:
                keyid:F3:52:68:F9:76:E8:AE:71:FE:FA:66:CA:45:16:36:1C:58:AE:1D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81Jo-XbornH--mbKRRY2HFiuHZE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:b4:91:72:69:99:f8:a8:1a:e4:3d:80:1e:c8:7f:5e:fa:f7:
         80:1b:98:1c:6b:a7:a5:d2:24:a1:5b:a8:b3:e3:a9:d9:36:0d:
         9e:cd:fe:b6:2e:73:c3:38:56:4d:8e:5f:5d:f3:a3:f4:79:dc:
         71:76:5b:5d:fe:7e:c7:02:58:97:72:63:ce:09:f2:fb:b9:23:
         41:89:05:5c:7a:51:70:27:fa:7a:e3:6d:fd:a2:68:ce:fe:7c:
         70:75:32:59:28:79:0d:db:a1:2e:64:ac:b4:a3:33:32:f6:09:
         8e:da:48:6a:18:6d:05:6d:c0:9c:a1:5f:93:12:07:c2:1f:ba:
         68:0f:19:1b:57:5e:86:86:4d:ee:df:38:12:da:c7:e3:88:aa:
         7a:06:6e:d8:0f:85:2f:93:e1:68:ec:9f:10:fb:63:b3:73:01:
         53:4d:7a:07:80:23:09:08:7e:ba:3d:8a:ea:09:f6:ae:ba:cc:
         07:77:8d:75:2a:3b:b3:06:07:1c:3e:ba:2b:a7:2d:41:d9:3e:
         94:69:74:9b:1f:2b:dc:69:8c:87:f7:cd:01:6c:7d:98:a1:82:
         a4:1f:c6:3e:47:15:ee:60:3c:73:8d:30:f5:e3:fe:27:c6:32:
         6e:f1:9b:d1:39:94:0d:49:e8:36:66:3e:6a:a1:bd:29:da:12:
         29:49:97:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:33:03 2026 by rpki-client