Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft
File:                     8Cl9DkUxodYqla9dLyLvJAja0pw.mft (raw, json)
Hash identifier:          rUz5KoVwllIm7fY8mU+DN+Fg1ewOSVzFLYhd26j1Yo8=
Subject key identifier:   3D:22:B6:AB:20:78:47:45:12:7F:8D:BF:92:71:9A:E8:D3:1D:28:62
Authority key identifier: F0:29:7D:0E:45:31:A1:D6:2A:95:AF:5D:2F:22:EF:24:08:DA:D2:9C
Certificate issuer:       /CN=A91BF312/serialNumber=F0297D0E4531A1D62A95AF5D2F22EF2408DAD29C
Certificate serial:       0867
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft
Manifest number:          084F
Signing time:             Wed 20 May 2026 20:54:52 +0000
Manifest this update:     Wed 20 May 2026 20:54:52 +0000
Manifest next update:     Wed 27 May 2026 20:54:52 +0000
Files and hashes:         1: 8Cl9DkUxodYqla9dLyLvJAja0pw.crl (hash: MU71unWD3KzhU5zNuYpL66Xue+ko4PLJHqAnwvlXDkY=)
                          2: 23AF26C40C2B11EBAD607865C4F9AE02.roa (hash: gt1Thn5b17IX5hac63qpkPqnhAnjtdM7GC00RfgXDCA=)
                          3: DF3CAFC44D9E11F0B1307858C4F9AE02.roa (hash: Gj36dWubgKABqlkFIW8O6/4ONoiv/qzcPv5+4kWBHuk=)
                          4: 5ECF5AFE37CC11F0AE950A5FC4F9AE02.roa (hash: VGnt6v4dXILkocn8GEwn5t+Gd/2jbgIZ2L5lp88nLxY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.crl
                          rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 20:54:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2151 (0x867)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF312, serialNumber=F0297D0E4531A1D62A95AF5D2F22EF2408DAD29C
        Validity
            Not Before: May 20 20:54:52 2026 GMT
            Not After : May 27 20:54:52 2026 GMT
        Subject: CN=6a0e1f9c-7c18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:92:1e:a0:0f:8c:5a:a2:14:ed:1c:12:27:08:
                    3f:ec:cf:7d:03:ad:72:21:75:23:8b:64:0a:3d:ba:
                    19:ec:27:3f:70:18:75:2c:05:47:5b:f0:7b:26:82:
                    52:c2:0e:c3:c0:8e:d4:6d:10:12:23:b7:e3:02:b5:
                    eb:ab:c5:45:db:b4:72:14:5a:16:75:01:4c:f8:fc:
                    9c:a2:b4:04:4c:6b:a7:be:39:09:c7:8e:54:96:e1:
                    40:26:92:12:35:1a:4c:f3:68:00:ef:29:e4:a6:ed:
                    f8:4a:3d:b9:62:47:fd:9a:60:a2:16:26:be:bc:59:
                    7c:29:ae:6a:4d:99:a6:8c:9f:0b:3c:ff:bb:ca:6e:
                    57:db:4c:12:84:69:c9:90:1b:97:5b:6e:d6:a8:b1:
                    b6:c3:1e:04:d6:e4:be:2a:db:6d:85:ff:1d:3a:a5:
                    6e:df:cb:37:03:ba:8b:be:0f:fd:0e:f9:4a:0f:a3:
                    c2:b4:2b:22:9e:ba:5e:bb:80:0e:ed:c2:08:08:f7:
                    fa:07:5c:0c:4e:dd:27:63:57:d9:90:7a:2c:bb:52:
                    e7:8d:02:51:13:fa:f8:ef:c9:36:a2:c1:90:92:3f:
                    be:ce:97:c1:8e:ae:96:9c:3c:42:8d:04:a8:a3:b3:
                    4c:3d:7f:34:10:93:9a:7a:09:4c:72:0f:48:08:ba:
                    9a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:22:B6:AB:20:78:47:45:12:7F:8D:BF:92:71:9A:E8:D3:1D:28:62
            X509v3 Authority Key Identifier:
                keyid:F0:29:7D:0E:45:31:A1:D6:2A:95:AF:5D:2F:22:EF:24:08:DA:D2:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:b0:c1:68:93:bb:89:03:e4:b5:89:25:4b:05:f2:a5:0a:a7:
         95:c6:9c:6e:ca:71:94:d7:61:43:b7:b6:66:77:f4:da:3c:1f:
         fd:8e:34:88:2d:27:f8:f8:db:a1:5d:fa:b5:30:c9:89:f9:55:
         69:c0:ec:53:ac:d5:de:2b:70:32:9a:f9:1b:11:5d:2f:fe:bd:
         78:02:cb:4e:37:d2:32:6f:45:c7:4c:fc:00:56:86:eb:f4:fe:
         f8:59:9a:46:88:fd:39:ac:14:fd:d4:45:e8:cb:ad:82:b3:4a:
         0a:83:51:50:d5:ec:77:64:37:5e:31:bf:2e:ec:32:b7:da:ac:
         f5:7b:67:fd:0e:4f:3e:7c:c7:b7:eb:04:d4:01:76:4b:df:42:
         98:69:0b:e7:38:c0:08:26:7a:86:40:68:0c:49:38:99:0b:3f:
         ee:fb:b3:19:c8:76:5a:f4:fb:ea:be:0a:05:23:59:c0:5d:a2:
         f4:91:5e:06:66:6d:60:48:8b:27:ef:06:68:06:58:a2:78:a3:
         b9:24:42:09:0e:51:ba:a5:b8:07:ef:ea:93:4a:11:5d:14:18:
         1d:25:9b:1c:dd:67:0e:1f:30:96:24:e3:8b:65:7c:b8:2c:98:
         db:7b:85:e5:37:8d:17:af:04:e3:41:32:c5:cd:b6:82:7e:6e:
         1b:69:22:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 15:40:53 2026 by rpki-client