Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B539C/63C8E552688611F1A9DD30CE6C47A888/T8X9jSdo5Al3QhkY-xOcM12_g4A.mft
File:                     T8X9jSdo5Al3QhkY-xOcM12_g4A.mft (raw, json)
Hash identifier:          ALhncOfz3FyYet8Z97rXA30QDD3Ppx0QaYw0uPJJaXo=
Subject key identifier:   FF:82:04:05:3C:25:8D:48:37:6C:3D:2F:76:FE:D1:96:96:38:74:8B
Authority key identifier: 4F:C5:FD:8D:27:68:E4:09:77:42:19:18:FB:13:9C:33:5D:BF:83:80
Certificate issuer:       /CN=A91B539C/serialNumber=4FC5FD8D2768E40977421918FB139C335DBF8380
Certificate serial:       0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T8X9jSdo5Al3QhkY-xOcM12_g4A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B539C/63C8E552688611F1A9DD30CE6C47A888/T8X9jSdo5Al3QhkY-xOcM12_g4A.mft
Manifest number:          0B
Signing time:             Fri 03 Jul 2026 10:03:57 +0000
Manifest this update:     Fri 03 Jul 2026 10:03:57 +0000
Manifest next update:     Fri 10 Jul 2026 10:03:57 +0000
Files and hashes:         1: T8X9jSdo5Al3QhkY-xOcM12_g4A.crl (hash: J2uU/AueezzK93715Hlw93GEokhRRrZ9X2jtJZgcEoA=)
                          2: DB14F0D8688611F19B84FAD56C47A888.roa (hash: 74bk58//l9arlYq1z7u+T+hfveHOzEv+5Ygge/tEw9M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B539C/63C8E552688611F1A9DD30CE6C47A888/T8X9jSdo5Al3QhkY-xOcM12_g4A.crl
                          rsync://rpki.apnic.net/member_repository/A91B539C/63C8E552688611F1A9DD30CE6C47A888/T8X9jSdo5Al3QhkY-xOcM12_g4A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T8X9jSdo5Al3QhkY-xOcM12_g4A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 10 Jul 2026 10:03:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B539C, serialNumber=4FC5FD8D2768E40977421918FB139C335DBF8380
        Validity
            Not Before: Jul  3 10:03:57 2026 GMT
            Not After : Jul 10 10:03:57 2026 GMT
        Subject: CN=6a47890d-681d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9e:5f:73:96:5e:7a:fd:d4:5a:be:bb:5e:2d:
                    4f:57:2b:0d:f4:6e:4c:38:a2:cd:0f:14:1a:a0:70:
                    43:b3:ff:18:f4:0e:a1:04:d7:15:49:ec:f9:50:bd:
                    78:ce:73:18:a7:c2:67:3a:db:37:a7:84:dc:f1:38:
                    f5:21:af:99:a7:11:43:27:8b:3b:dc:18:af:d5:80:
                    df:b5:00:36:94:08:bf:c4:77:88:01:ca:c1:12:3e:
                    b1:5e:f3:48:0a:d6:30:a4:cc:5b:3e:91:0e:44:fb:
                    2c:2c:14:88:72:aa:39:77:cf:ff:17:d5:52:62:f1:
                    12:f7:ec:ad:fe:0f:e8:24:69:59:0c:e7:12:15:1d:
                    49:1f:71:aa:bf:27:38:f3:81:5b:82:55:c6:da:53:
                    14:41:ed:0f:70:fb:3d:92:72:5a:1b:33:64:b9:b7:
                    8d:89:bb:d4:fb:9b:0f:65:dc:33:92:a8:fd:38:0d:
                    cd:ca:6c:95:f4:c2:8d:ce:7d:b5:14:89:34:68:f4:
                    02:4b:95:8c:38:7e:58:40:cd:64:ad:aa:99:ca:b4:
                    3a:39:42:c4:8c:2d:7c:ef:04:72:de:46:a4:ec:e0:
                    17:56:81:75:f5:a5:29:c1:b8:43:03:a8:a9:5f:88:
                    4e:3d:48:f0:8e:e7:5f:2a:7f:57:dc:15:ce:07:32:
                    7f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:82:04:05:3C:25:8D:48:37:6C:3D:2F:76:FE:D1:96:96:38:74:8B
            X509v3 Authority Key Identifier:
                keyid:4F:C5:FD:8D:27:68:E4:09:77:42:19:18:FB:13:9C:33:5D:BF:83:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B539C/63C8E552688611F1A9DD30CE6C47A888/T8X9jSdo5Al3QhkY-xOcM12_g4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T8X9jSdo5Al3QhkY-xOcM12_g4A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B539C/63C8E552688611F1A9DD30CE6C47A888/T8X9jSdo5Al3QhkY-xOcM12_g4A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:74:fe:21:bb:bd:11:cd:77:94:7b:3d:ed:40:4a:90:83:54:
         ec:f2:7b:7e:9d:a4:e3:8e:c1:8d:69:ca:0c:53:cb:8c:b6:71:
         c8:c5:1e:28:cf:17:08:41:ea:66:3f:97:ac:74:45:be:55:c0:
         80:3c:4d:4b:6b:35:54:16:7e:da:d3:92:a0:9a:c0:4c:c4:53:
         96:a4:14:77:c9:bd:6a:18:c5:53:73:61:b7:b3:06:e6:46:3e:
         d4:b0:a8:55:28:be:1f:ca:bb:3b:63:83:0f:8e:05:c4:54:19:
         6c:c7:b4:d0:17:20:96:aa:50:f0:73:5f:13:31:72:2c:1f:b4:
         6f:bd:8d:e0:b1:0d:fc:2c:51:1f:56:b4:22:e3:85:cc:59:cb:
         3f:5f:bf:2a:79:1e:6b:bc:13:83:c2:17:cb:37:ed:00:bb:42:
         a5:d5:c0:05:1a:a8:3f:45:cb:3d:ab:50:02:5b:7c:80:7b:33:
         24:32:7e:c9:e1:df:8a:f3:91:11:53:70:cd:37:a1:93:e2:7a:
         d7:26:10:91:5d:eb:fc:59:c7:23:76:5d:4a:6d:bb:54:bb:4b:
         3b:30:1a:7b:b6:02:42:32:8c:14:e2:e5:11:42:83:9b:87:38:
         5d:c3:97:28:3d:8a:6e:ec:56:35:13:3e:46:ea:7c:b9:5a:51:
         a7:8c:d4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 07:50:29 2026 by rpki-client