Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.mft
File:                     ak27o21Mdn1b1ytu6XCoAA_FSV4.mft (raw, json)
Hash identifier:          Wv7PbdzjeHz5DA2Z5zhf5My6NROV4CGzXui/pVedZ2I=
Subject key identifier:   D2:58:96:F8:74:55:55:C1:CA:11:0C:C6:7C:2B:93:BF:88:77:57:79
Authority key identifier: 6A:4D:BB:A3:6D:4C:76:7D:5B:D7:2B:6E:E9:70:A8:00:0F:C5:49:5E
Certificate issuer:       /CN=A91BF8C3/serialNumber=6A4DBBA36D4C767D5BD72B6EE970A8000FC5495E
Certificate serial:       0889
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak27o21Mdn1b1ytu6XCoAA_FSV4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.mft
Manifest number:          0869
Signing time:             Sat 04 Apr 2026 20:36:58 +0000
Manifest this update:     Sat 04 Apr 2026 20:36:58 +0000
Manifest next update:     Sat 11 Apr 2026 20:36:58 +0000
Files and hashes:         1: ak27o21Mdn1b1ytu6XCoAA_FSV4.crl (hash: kcLjHMhGpxFUJZ80q8JjvL5i7NwOHQBz3NQOMPPVlPA=)
                          2: 0BE76940057F11F1BBFA6CD7ADEE528E.roa (hash: 6ZHlxBuUbn16eSux/ogpwO6CFNWl05TS7wn4VyI0hlQ=)
                          3: E51AC37C169D11F18D04F8B992EE528E.roa (hash: mYlJdFIW8EjyX8ajfhqX1Cs+hajlapMlYM5UC79/gBw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.crl
                          rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak27o21Mdn1b1ytu6XCoAA_FSV4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 20:36:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2185 (0x889)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF8C3, serialNumber=6A4DBBA36D4C767D5BD72B6EE970A8000FC5495E
        Validity
            Not Before: Apr  4 20:36:58 2026 GMT
            Not After : Apr 11 20:36:58 2026 GMT
        Subject: CN=69d1766a-6868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:af:73:f5:e4:62:a8:0a:79:04:48:2c:01:be:
                    85:04:f8:ca:ed:f8:c1:07:a3:e0:f6:7e:7e:8d:bb:
                    a7:32:79:95:21:87:4c:34:a2:64:b5:d0:52:69:45:
                    f9:6b:47:df:78:8d:39:15:e4:3d:31:60:ff:70:61:
                    ed:ee:13:03:b7:04:44:c8:8d:71:a7:4a:4c:df:24:
                    00:d4:c4:b7:a6:66:5b:e6:ca:82:05:68:9d:20:8d:
                    9f:67:de:06:75:55:37:30:81:aa:93:67:d0:db:66:
                    3a:d1:5e:49:07:b2:72:bd:d1:64:13:03:10:7b:9f:
                    09:14:52:98:66:10:92:39:9e:79:d6:3b:e7:0b:31:
                    02:3b:28:fe:f4:4b:60:4c:47:59:7c:9b:2b:61:75:
                    d6:e4:8c:1a:72:1d:15:24:68:c8:56:da:d6:73:0b:
                    eb:75:89:ab:95:51:74:8b:a5:10:13:08:61:d9:54:
                    54:bb:a7:1c:e5:cb:ef:fd:7f:b6:ec:6b:56:01:8a:
                    26:cd:9a:1f:cd:5b:4f:d9:8a:e8:5f:a9:be:2c:48:
                    a3:cf:4e:2c:e2:49:9d:47:a1:7b:ab:10:9e:b9:05:
                    f3:48:6c:e8:3e:36:b7:50:b8:ee:18:15:ce:a7:a7:
                    62:ed:6d:38:4d:94:d5:d4:4d:3e:55:a4:ca:98:b6:
                    86:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:58:96:F8:74:55:55:C1:CA:11:0C:C6:7C:2B:93:BF:88:77:57:79
            X509v3 Authority Key Identifier:
                keyid:6A:4D:BB:A3:6D:4C:76:7D:5B:D7:2B:6E:E9:70:A8:00:0F:C5:49:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak27o21Mdn1b1ytu6XCoAA_FSV4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:2e:44:64:6c:9e:63:8a:ea:00:79:f5:ec:b1:90:cd:bb:74:
         b1:d0:b3:c6:cb:68:7b:72:76:c3:f9:6a:e1:93:c3:ce:cf:ad:
         0c:10:80:02:c7:2e:01:b2:51:c6:ce:f4:2f:d2:0b:f7:54:78:
         da:f3:9a:eb:25:21:b0:58:0f:7f:ad:5f:99:d4:68:7f:1f:04:
         47:9f:70:63:e4:2b:30:1c:93:ce:3e:cc:39:fd:c9:b5:36:95:
         bc:3a:d0:2f:1b:1d:fb:b5:96:1c:78:c4:86:24:8d:83:54:22:
         ae:6b:54:55:fe:ce:80:97:98:a6:5e:32:90:02:c0:dc:ee:07:
         72:81:5d:80:65:4b:44:05:e7:c2:2d:ff:9b:92:2c:04:5c:1c:
         d5:6a:a1:d5:e0:0b:fc:e6:c4:9f:13:09:77:a4:d6:99:6b:68:
         86:96:14:71:29:49:16:1f:e2:ac:75:c6:cb:09:7e:81:8c:c5:
         97:51:6e:f6:12:78:6e:4c:54:b6:5d:4c:99:c9:c4:75:99:93:
         66:c1:62:2c:78:8d:d3:6c:0a:66:8f:35:64:49:db:ae:d8:08:
         34:ea:37:fd:4c:7c:0d:48:59:cd:fc:e4:b8:7a:3c:ac:78:e1:
         79:5a:46:c6:25:38:a8:6c:f7:6c:01:90:7f:ba:ca:5e:59:13:
         8b:55:01:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:30:53 2026 by rpki-client