Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.mft
File:                     8eUBY6xQamLM-1qK9WURw48VBBQ.mft (raw, json)
Hash identifier:          N8Dy4BRc9+wqgKdpmWhVROoTP1xW+97V6qoPXZOBSmM=
Subject key identifier:   0C:D1:8D:A8:3B:3C:96:D8:44:9C:DF:1A:E4:D0:62:60:3F:01:2F:06
Authority key identifier: F1:E5:01:63:AC:50:6A:62:CC:FB:5A:8A:F5:65:11:C3:8F:15:04:14
Certificate issuer:       /CN=A9184684/serialNumber=F1E50163AC506A62CCFB5A8AF56511C38F150414
Certificate serial:       B0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8eUBY6xQamLM-1qK9WURw48VBBQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.mft
Manifest number:          A8
Signing time:             Sun 05 Apr 2026 06:39:29 +0000
Manifest this update:     Sun 05 Apr 2026 06:39:29 +0000
Manifest next update:     Sun 12 Apr 2026 06:39:29 +0000
Files and hashes:         1: 8eUBY6xQamLM-1qK9WURw48VBBQ.crl (hash: iiU511a+PWmXyE37wozR5FxfqCWJFVvCslcsZXsnnc8=)
                          2: 2EA48F06569A11F0A878F309C4F9AE02.roa (hash: TgVrDlat2+ByZMpKIQ8pI5WNmuoF/FmyVp9TGWTtSyI=)
                          3: CE88C72C569911F08E21CF87C4F9AE02.roa (hash: q/nsqh9kiH+bznpNaj8r4apm6/Ae9GpQkbbiW39Shpg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.crl
                          rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8eUBY6xQamLM-1qK9WURw48VBBQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 06:39:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 176 (0xb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184684, serialNumber=F1E50163AC506A62CCFB5A8AF56511C38F150414
        Validity
            Not Before: Apr  5 06:39:29 2026 GMT
            Not After : Apr 12 06:39:29 2026 GMT
        Subject: CN=69d203a1-30a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a1:a9:8f:5b:82:c8:b7:a8:67:bb:00:d9:77:
                    e0:c3:6e:a6:79:64:d0:37:b8:da:12:89:86:99:94:
                    80:73:02:ce:b9:35:aa:e4:6d:ff:c4:ce:91:5d:69:
                    e9:f6:8a:b5:57:45:81:72:8c:3a:51:9a:3b:db:33:
                    ac:09:4a:57:58:3c:94:2a:43:97:1d:43:d7:13:d8:
                    04:78:20:55:f0:06:2a:9d:a0:46:95:a5:ab:7e:66:
                    d8:b6:e9:82:88:c8:14:e0:ed:a2:6f:3d:5b:c6:d7:
                    49:9e:0b:45:5e:03:b7:72:e7:82:67:b8:93:2b:c2:
                    e7:37:2c:9e:8a:8c:63:a4:f9:5f:06:9e:40:db:6a:
                    e7:71:e7:da:8b:4c:64:67:a6:3d:70:1e:a6:e3:fb:
                    c1:d5:77:4b:b6:b8:51:16:ec:93:8c:80:14:54:65:
                    6e:f8:16:d3:6e:5a:20:b5:f1:94:40:25:13:b6:8e:
                    f8:c4:da:8a:7d:39:b5:64:b8:90:fa:b1:0b:69:9e:
                    89:75:84:15:d8:29:da:3e:74:3b:60:ff:c2:af:5f:
                    6f:4b:34:c7:03:b0:86:3d:97:ab:29:48:c7:77:bd:
                    8e:8e:e9:a9:76:b7:d4:8a:91:0f:28:07:4f:4d:0d:
                    cc:b5:5f:75:5a:bd:46:e8:d4:d4:b6:7e:ee:20:99:
                    34:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D1:8D:A8:3B:3C:96:D8:44:9C:DF:1A:E4:D0:62:60:3F:01:2F:06
            X509v3 Authority Key Identifier:
                keyid:F1:E5:01:63:AC:50:6A:62:CC:FB:5A:8A:F5:65:11:C3:8F:15:04:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8eUBY6xQamLM-1qK9WURw48VBBQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:d0:98:a4:41:92:f4:91:87:e4:26:da:e2:92:8f:cb:c3:36:
         56:b2:a9:92:3b:66:7d:bc:96:c9:2c:e6:c3:a4:97:17:38:b8:
         ac:f6:09:59:4b:bc:5f:c6:a9:cc:19:07:95:03:8d:68:c8:be:
         d3:be:87:f4:5f:25:69:2d:0f:ba:c5:fa:71:71:d8:95:86:66:
         e4:b8:1b:10:8b:cc:04:b0:fe:0f:e8:88:86:02:3f:c4:29:ae:
         14:6f:23:10:b6:00:7b:ba:58:76:e9:22:98:f6:81:9f:f5:be:
         02:c7:16:cf:96:eb:26:14:f3:e3:42:35:c7:37:d0:88:8e:99:
         8d:b0:ac:1f:17:07:ec:86:52:25:86:34:9e:46:59:10:76:35:
         1c:08:2c:b3:8f:f5:71:02:71:42:6d:8d:47:f9:06:25:36:8e:
         8e:e6:c7:7d:f2:bd:bf:1a:a3:7d:58:da:95:cf:67:5b:9b:86:
         80:fd:19:68:9a:78:c5:d6:f6:e4:5f:aa:b2:e9:1c:0d:b3:13:
         10:b2:38:8d:79:53:51:b2:76:bd:bb:6c:02:c6:42:8f:e8:b3:
         38:50:fa:c5:a1:d7:40:2d:f9:c8:e7:83:4c:c2:5a:f4:98:7a:
         bc:ad:cc:eb:57:03:b5:af:b5:9e:59:06:86:c9:99:83:f7:2c:
         01:92:21:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 14:56:14 2026 by rpki-client