Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft
File:                     b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft (raw, json)
Hash identifier:          wmiHHkpORFcZnlkqoaBFGM8DIXnXMCqEwjZpXUuS29I=
Subject key identifier:   BC:02:EA:07:6E:00:26:A6:B1:AB:74:4F:CD:2F:B5:A1:2E:00:68:2C
Authority key identifier: 6F:C7:09:06:FB:A6:F4:53:94:52:09:19:32:C4:5F:FA:4D:85:72:B8
Certificate issuer:       /CN=A91A54FE/serialNumber=6FC70906FBA6F4539452091932C45FFA4D8572B8
Certificate serial:       01A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft
Manifest number:          0190
Signing time:             Mon 27 Apr 2026 04:23:00 +0000
Manifest this update:     Mon 27 Apr 2026 04:22:59 +0000
Manifest next update:     Mon 04 May 2026 04:22:59 +0000
Files and hashes:         1: b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl (hash: JZgJWsph3zo1LFPjDfjM5CJPeKcI02bgKrpmM6/DV0U=)
                          2: 4034878C531411F0B5969F4DC4F9AE02.roa (hash: HrcOu88/JBmIFobTfUt0ecLd7H5lABy3mnlURTBZl4w=)
                          3: 3F5C47A0531411F0B5969F4DC4F9AE02.roa (hash: qxIP3Llk0p2PAKZXvKAeEyqecNor+P2OlAPibwb26G8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl
                          rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 04 May 2026 04:22:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 420 (0x1a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A54FE, serialNumber=6FC70906FBA6F4539452091932C45FFA4D8572B8
        Validity
            Not Before: Apr 27 04:22:59 2026 GMT
            Not After : May  4 04:22:59 2026 GMT
        Subject: CN=69eee4a4-0ad2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c5:cf:c4:24:9a:07:3e:e3:92:d2:d0:c4:bb:
                    a8:ad:ed:76:ac:0e:21:19:8c:09:49:06:15:d2:5c:
                    93:dd:14:58:f4:3b:b0:57:e8:83:e5:88:bc:f5:4f:
                    53:f6:4d:41:f0:7b:7d:b7:2e:2f:9f:11:35:f8:23:
                    d5:74:ef:70:f7:bf:ef:4e:0b:7d:22:4c:a4:b1:27:
                    5a:5c:4d:be:01:e4:c1:20:35:8e:87:db:d5:90:ee:
                    a8:d5:8e:35:bc:33:de:98:0b:d2:8d:a8:3d:2b:6c:
                    0f:47:43:ca:a3:96:92:55:88:d6:15:3a:bc:11:c1:
                    3a:f7:aa:cb:f3:aa:65:e8:4a:f9:0c:3b:43:fc:4d:
                    c6:8a:3a:92:8c:cb:24:fe:e0:9b:8b:9c:69:de:b6:
                    23:93:17:3a:db:25:38:01:6b:6a:06:ae:ec:69:1c:
                    9c:59:7a:f2:9a:43:ba:9a:6b:2c:1c:4f:a0:c0:02:
                    b5:c3:ba:43:2f:3c:90:06:47:cc:dc:cb:36:73:ef:
                    e6:6b:81:4e:ab:24:07:0d:81:8a:52:91:a4:5f:d7:
                    25:03:8b:fa:63:a2:ed:1a:01:77:74:0a:a9:48:5d:
                    cb:ac:0c:cf:26:76:21:e2:69:bd:f6:c9:a6:db:a2:
                    a7:bc:68:39:c6:9f:63:04:33:df:fa:a9:e7:c1:d0:
                    8a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:02:EA:07:6E:00:26:A6:B1:AB:74:4F:CD:2F:B5:A1:2E:00:68:2C
            X509v3 Authority Key Identifier:
                keyid:6F:C7:09:06:FB:A6:F4:53:94:52:09:19:32:C4:5F:FA:4D:85:72:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:7d:e1:64:e5:a7:92:88:25:c6:58:fc:e7:6b:93:53:02:35:
         76:76:15:de:a6:51:11:34:c0:05:b4:b9:d1:1d:bf:9d:46:2e:
         52:2f:49:42:d4:c6:b0:3b:d7:2e:8b:c6:e5:05:a7:20:7a:d3:
         1c:55:fc:62:c8:4d:6c:03:25:c1:ee:23:67:cb:1b:2b:76:8a:
         0b:8f:96:86:b9:26:a5:a3:08:aa:d8:8d:b5:46:32:8e:c5:1f:
         c5:b5:24:10:73:db:82:b2:e3:2b:18:96:f7:de:35:f8:43:5d:
         f6:a6:01:24:e8:93:59:e0:64:f7:c6:8a:0f:19:fb:ed:19:65:
         9c:70:a3:6c:e9:c3:08:e4:2b:dd:69:2c:40:a8:3c:05:72:25:
         df:cd:66:a1:af:75:ba:ea:42:af:b9:b5:40:d6:5a:b6:dc:4d:
         df:9a:7c:76:aa:1b:b6:c7:b7:d2:11:46:84:2b:0b:7e:69:fa:
         59:56:ae:c8:9e:4d:6f:af:a7:d8:95:06:09:08:bb:d0:60:4f:
         06:af:8d:c8:98:7c:67:c7:64:73:16:0d:6b:73:04:7d:16:1d:
         9e:55:ad:fb:02:30:a4:9a:b4:bc:c0:81:15:e2:59:e3:73:55:
         ee:15:77:41:86:6b:f7:42:cd:6d:27:fa:21:bc:ae:3d:2d:e0:
         f8:59:56:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:54:45 2026 by rpki-client