Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.mft
File:                     K99csyKL7Ic-zuddZ1g1RlOCNJI.mft (raw, json)
Hash identifier:          +NP3HFHPiifiF/vyX0Vv1LgdFpCu/rexRQBwIzI091c=
Subject key identifier:   3C:7D:B0:87:4D:F7:BB:B2:DE:78:35:1D:73:A9:80:6C:19:32:DB:82
Authority key identifier: 2B:DF:5C:B3:22:8B:EC:87:3E:CE:E7:5D:67:58:35:46:53:82:34:92
Certificate issuer:       /CN=A91D8100/serialNumber=2BDF5CB3228BEC873ECEE75D6758354653823492
Certificate serial:       086E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K99csyKL7Ic-zuddZ1g1RlOCNJI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.mft
Manifest number:          0860
Signing time:             Sat 04 Apr 2026 20:33:21 +0000
Manifest this update:     Sat 04 Apr 2026 20:33:20 +0000
Manifest next update:     Sat 11 Apr 2026 20:33:20 +0000
Files and hashes:         1: K99csyKL7Ic-zuddZ1g1RlOCNJI.crl (hash: Yxh9O1cpiwwnhDSJI5PO6XcPDEE7iUBVpNV5RVoOfq8=)
                          2: DFB4AB2C9FD911F0B75B1848C4F9AE02.roa (hash: NDPwNan09Ssdmc1pybvK6GRLd224X2AqBtS0fXc6jf4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.crl
                          rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K99csyKL7Ic-zuddZ1g1RlOCNJI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 20:33:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2158 (0x86e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D8100, serialNumber=2BDF5CB3228BEC873ECEE75D6758354653823492
        Validity
            Not Before: Apr  4 20:33:20 2026 GMT
            Not After : Apr 11 20:33:20 2026 GMT
        Subject: CN=69d17591-eb19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:8f:41:1f:2e:d2:d2:cb:c0:fa:ac:73:3c:e4:
                    b6:9c:c2:58:b8:fc:c0:7b:21:75:0f:48:76:a9:f8:
                    36:31:57:fa:3b:04:e7:ea:58:d1:a8:09:fd:ee:55:
                    68:c6:79:95:5b:3d:63:51:56:ab:b0:63:6a:99:22:
                    1c:d2:63:38:16:f1:03:4b:58:2b:c5:71:dd:3f:fe:
                    d2:9d:ac:79:b7:5a:ee:3e:21:3b:3e:26:cc:13:1c:
                    e4:f9:b1:b5:96:62:40:67:3c:bb:bc:92:e1:f1:d6:
                    a8:0b:26:b7:2f:35:3a:59:02:d7:f2:35:82:5d:b9:
                    37:86:48:81:ca:13:44:79:20:6c:a1:ff:e8:56:44:
                    47:d5:2c:c0:1d:32:b8:ec:90:0a:76:12:8e:85:5b:
                    d4:47:dd:72:34:c6:d3:46:d6:3a:75:d2:2a:28:1c:
                    93:ad:10:1b:56:8a:f7:b2:a2:28:9f:c1:e7:94:1f:
                    0a:12:60:68:40:a3:02:f8:e3:a9:63:f8:7b:89:03:
                    31:29:12:11:79:a2:09:df:a6:4e:6f:6e:bb:91:b1:
                    20:db:1a:38:46:f4:2f:e4:60:07:33:c1:61:13:49:
                    93:5a:a2:a4:52:29:3d:88:9d:f2:ae:ba:c9:c1:13:
                    df:d5:57:e7:95:51:55:62:b3:72:67:fb:a9:54:2f:
                    e7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:7D:B0:87:4D:F7:BB:B2:DE:78:35:1D:73:A9:80:6C:19:32:DB:82
            X509v3 Authority Key Identifier:
                keyid:2B:DF:5C:B3:22:8B:EC:87:3E:CE:E7:5D:67:58:35:46:53:82:34:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K99csyKL7Ic-zuddZ1g1RlOCNJI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:e2:d0:41:e7:b6:b4:78:b7:09:63:90:4a:fb:da:1d:ac:ed:
         22:a2:8c:20:db:fb:b8:4d:2d:a9:13:20:47:7c:2a:e7:ad:78:
         60:a7:56:bd:f8:b4:40:e0:e9:cf:96:40:8c:fd:29:73:05:5d:
         1d:72:88:fe:d0:2c:dd:b2:e3:ce:d4:3e:ac:b3:54:15:81:49:
         76:58:93:58:26:d6:db:84:a9:25:9e:68:03:4e:65:87:d6:e3:
         0c:b7:89:a2:4d:b0:6e:84:33:c3:a5:53:c0:ee:4c:75:19:a5:
         91:22:57:01:51:fd:a8:d7:81:d3:0b:c1:8b:51:a7:a4:25:d8:
         10:96:8f:59:24:6f:3b:35:52:35:24:94:6e:75:2b:60:3d:83:
         1e:b5:2d:3f:d5:43:13:20:9b:61:09:17:f4:42:f9:22:f5:7e:
         c2:ba:4c:5a:18:66:43:9b:51:67:6f:e6:53:8d:81:cb:b1:d7:
         a7:35:0b:2d:f3:cb:71:98:66:29:13:7f:4d:85:71:a2:d9:aa:
         82:79:a9:08:bc:f8:4e:71:09:90:4f:a4:2b:fe:c8:05:f8:85:
         9a:b3:b4:70:fc:8c:b0:79:d2:aa:33:e2:a7:9f:f4:d4:51:55:
         3c:63:a3:5b:11:0b:58:86:36:5b:99:f3:2a:63:93:04:d9:13:
         27:30:73:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:32:15 2026 by rpki-client