Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6369/5C9C68440C7911F1B18A0C0E1C3D8C67/8e0mdV_Ai9BZkZUyuPo6akg04_k.mft
File:                     8e0mdV_Ai9BZkZUyuPo6akg04_k.mft (raw, json)
Hash identifier:          maeaedOtQPZiBQlq3m/5EWH0i5N+8c7ZqVnr+K9t/ns=
Subject key identifier:   CF:B6:22:4A:72:FE:E7:29:AC:6B:BF:2E:ED:BF:F3:76:19:12:8C:4F
Authority key identifier: F1:ED:26:75:5F:C0:8B:D0:59:91:95:32:B8:FA:3A:6A:48:34:E3:F9
Certificate issuer:       /CN=A91E6369/serialNumber=F1ED26755FC08BD059919532B8FA3A6A4834E3F9
Certificate serial:       28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8e0mdV_Ai9BZkZUyuPo6akg04_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6369/5C9C68440C7911F1B18A0C0E1C3D8C67/8e0mdV_Ai9BZkZUyuPo6akg04_k.mft
Manifest number:          26
Signing time:             Tue 21 Apr 2026 08:37:22 +0000
Manifest this update:     Tue 21 Apr 2026 08:37:22 +0000
Manifest next update:     Tue 28 Apr 2026 08:37:22 +0000
Files and hashes:         1: 8e0mdV_Ai9BZkZUyuPo6akg04_k.crl (hash: J8IJDUD6zwzN9Jpnv079g12s8AWWWx3/B0NV2Gv56Gk=)
                          2: E0F26F840C7A11F1925E54691C3D8C67.roa (hash: I7EBb+YBXT8xgUhV3T13QqxJ9GRbIYd43OJn2AJIB9Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6369/5C9C68440C7911F1B18A0C0E1C3D8C67/8e0mdV_Ai9BZkZUyuPo6akg04_k.crl
                          rsync://rpki.apnic.net/member_repository/A91E6369/5C9C68440C7911F1B18A0C0E1C3D8C67/8e0mdV_Ai9BZkZUyuPo6akg04_k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8e0mdV_Ai9BZkZUyuPo6akg04_k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 08:37:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6369, serialNumber=F1ED26755FC08BD059919532B8FA3A6A4834E3F9
        Validity
            Not Before: Apr 21 08:37:22 2026 GMT
            Not After : Apr 28 08:37:22 2026 GMT
        Subject: CN=69e73742-5f72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a3:39:60:e5:60:54:1f:43:99:85:64:d1:6d:
                    99:4b:ed:01:21:8e:39:57:8d:30:78:2d:9e:62:ad:
                    f9:6f:de:9c:68:da:e9:67:35:3c:46:57:59:9f:b8:
                    f0:f5:66:07:db:0c:ae:47:bc:bf:76:75:dc:9a:71:
                    92:34:36:6b:18:0d:bb:cd:82:b3:b4:4a:9b:e2:0c:
                    20:42:aa:4c:a7:ed:ca:96:d1:af:33:07:7c:19:e0:
                    67:ba:4b:3c:78:a6:d1:b0:c1:90:90:af:24:e8:63:
                    2b:85:c1:b7:a2:35:65:7f:e8:b5:3d:27:a1:11:a6:
                    f7:d7:69:36:3f:71:4d:ba:3d:f0:47:81:72:68:62:
                    fa:6f:59:4c:ff:fb:eb:fc:d2:8a:80:da:c5:61:3c:
                    ae:ce:4e:08:34:a5:ac:28:e6:3a:d2:16:f6:71:b1:
                    d3:3d:e1:90:b5:84:db:31:3e:a1:46:a3:5e:34:e9:
                    ff:cd:a9:7a:ae:ce:48:40:84:cb:70:45:d1:a0:ea:
                    21:d5:58:1b:d4:3e:b5:ef:8f:bf:a8:bd:92:57:a6:
                    7a:5a:2f:26:e1:b6:1a:c8:96:a3:a0:fa:54:54:be:
                    28:82:1e:a6:04:d6:f0:3f:0e:ef:59:f4:85:06:26:
                    39:54:d6:39:a6:11:dd:f5:a4:29:be:54:2d:89:01:
                    cf:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:B6:22:4A:72:FE:E7:29:AC:6B:BF:2E:ED:BF:F3:76:19:12:8C:4F
            X509v3 Authority Key Identifier:
                keyid:F1:ED:26:75:5F:C0:8B:D0:59:91:95:32:B8:FA:3A:6A:48:34:E3:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6369/5C9C68440C7911F1B18A0C0E1C3D8C67/8e0mdV_Ai9BZkZUyuPo6akg04_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8e0mdV_Ai9BZkZUyuPo6akg04_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6369/5C9C68440C7911F1B18A0C0E1C3D8C67/8e0mdV_Ai9BZkZUyuPo6akg04_k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:30:dd:4d:09:ed:21:cd:33:fb:58:cb:5d:7c:8e:0f:a9:69:
         a9:73:c5:8f:89:b6:09:62:9f:54:b0:d2:11:16:1b:4f:e3:4f:
         04:7b:0f:b4:f9:b4:ec:b7:80:70:7e:7e:f5:22:45:dd:4b:56:
         51:0d:2a:ef:28:3a:bf:fe:df:5a:2d:28:76:6d:87:a7:47:29:
         c0:4c:5e:69:f5:93:95:87:56:f8:d8:cc:07:5a:d7:ea:c7:c5:
         7d:6c:04:78:ad:1b:11:b2:42:2d:03:2c:a3:0e:76:fa:16:2d:
         3d:49:4c:50:c5:cd:32:c6:47:c2:e4:47:8e:85:c7:8f:51:67:
         b4:0c:9f:bb:c5:1b:ea:e7:16:02:8f:05:4a:2e:ca:8f:37:12:
         76:09:43:8b:26:ac:2e:91:9d:51:52:a7:45:48:7c:dd:85:7d:
         cd:6d:cd:5e:7e:f1:25:00:e2:3b:a8:41:b2:46:2f:e5:cb:80:
         37:81:02:95:c8:b8:30:73:95:6f:fc:da:b9:70:97:05:e6:68:
         cd:7d:cc:d8:78:4c:02:b7:94:be:cf:72:cc:c2:13:db:c3:b9:
         09:8e:9d:b8:6c:02:02:4c:b6:fe:51:1b:1a:ab:7e:66:13:0f:
         9a:aa:7b:d0:23:83:80:e4:78:f8:83:08:0c:61:29:cc:39:0f:
         61:1c:0c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 05:28:43 2026 by rpki-client