Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6369/5C9C68440C7911F1B18A0C0E1C3D8C67/8e0mdV_Ai9BZkZUyuPo6akg04_k.mft
File:                     8e0mdV_Ai9BZkZUyuPo6akg04_k.mft (raw, json)
Hash identifier:          AUSmwiZmLtO7GA6/QXOHeLe6b7t508aIvcDTS33QNIo=
Subject key identifier:   EA:78:7D:4E:6C:88:E3:06:A6:88:5E:D9:12:FD:63:C1:B0:BA:D8:B1
Authority key identifier: F1:ED:26:75:5F:C0:8B:D0:59:91:95:32:B8:FA:3A:6A:48:34:E3:F9
Certificate issuer:       /CN=A91E6369/serialNumber=F1ED26755FC08BD059919532B8FA3A6A4834E3F9
Certificate serial:       11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8e0mdV_Ai9BZkZUyuPo6akg04_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6369/5C9C68440C7911F1B18A0C0E1C3D8C67/8e0mdV_Ai9BZkZUyuPo6akg04_k.mft
Manifest number:          0F
Signing time:             Sat 07 Mar 2026 08:20:57 +0000
Manifest this update:     Sat 07 Mar 2026 08:20:57 +0000
Manifest next update:     Sat 14 Mar 2026 08:20:57 +0000
Files and hashes:         1: 8e0mdV_Ai9BZkZUyuPo6akg04_k.crl (hash: 91+cYppBxhA0SVHPE/0SqWdIryjlou/tBUnUbQitGFQ=)
                          2: E0F26F840C7A11F1925E54691C3D8C67.roa (hash: I7EBb+YBXT8xgUhV3T13QqxJ9GRbIYd43OJn2AJIB9Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6369/5C9C68440C7911F1B18A0C0E1C3D8C67/8e0mdV_Ai9BZkZUyuPo6akg04_k.crl
                          rsync://rpki.apnic.net/member_repository/A91E6369/5C9C68440C7911F1B18A0C0E1C3D8C67/8e0mdV_Ai9BZkZUyuPo6akg04_k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8e0mdV_Ai9BZkZUyuPo6akg04_k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 08:20:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6369, serialNumber=F1ED26755FC08BD059919532B8FA3A6A4834E3F9
        Validity
            Not Before: Mar  7 08:20:57 2026 GMT
            Not After : Mar 14 08:20:57 2026 GMT
        Subject: CN=69abdfe9-4146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:38:73:f6:74:cd:5b:7f:2c:13:63:c1:76:85:
                    85:af:e4:fb:9b:10:4e:d4:f0:e3:e0:78:f6:51:e8:
                    64:48:79:71:ee:88:ba:a0:d3:62:dd:88:13:d8:a0:
                    53:22:f8:4b:62:7c:c2:6d:e0:45:01:b3:fe:a6:03:
                    93:ce:08:5d:d1:dc:0d:a4:cb:b9:4a:66:40:56:92:
                    64:48:84:1f:aa:68:f9:f5:7e:8e:0c:58:f3:cc:70:
                    a1:ff:7d:82:9f:2c:d0:9f:a0:88:98:96:98:c1:01:
                    04:92:b0:99:2e:57:51:52:d6:d3:f0:79:07:44:67:
                    2e:cb:c7:24:23:35:c9:46:7f:56:96:37:4a:c8:4c:
                    a7:5d:e8:11:7b:ae:a3:63:40:8e:73:24:05:6e:bf:
                    a1:ce:9b:eb:b6:10:ec:97:c2:d0:f1:5f:7a:ab:57:
                    cc:f0:3f:ab:89:b5:8a:d2:7c:17:f1:7a:8b:5b:26:
                    97:bf:95:85:a0:46:ce:d1:5b:63:cd:0c:ff:c3:5a:
                    b0:50:89:be:fc:a6:25:c7:6b:b7:36:6e:fe:dd:ec:
                    4e:bd:f6:4c:5a:a6:fc:f1:f0:20:9b:93:48:56:2f:
                    53:8c:02:b5:97:92:30:a6:cd:0c:4e:c8:31:69:ec:
                    fc:3c:d6:c7:49:5c:4d:9b:57:05:14:65:2c:04:65:
                    7d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:78:7D:4E:6C:88:E3:06:A6:88:5E:D9:12:FD:63:C1:B0:BA:D8:B1
            X509v3 Authority Key Identifier:
                keyid:F1:ED:26:75:5F:C0:8B:D0:59:91:95:32:B8:FA:3A:6A:48:34:E3:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6369/5C9C68440C7911F1B18A0C0E1C3D8C67/8e0mdV_Ai9BZkZUyuPo6akg04_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8e0mdV_Ai9BZkZUyuPo6akg04_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6369/5C9C68440C7911F1B18A0C0E1C3D8C67/8e0mdV_Ai9BZkZUyuPo6akg04_k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:d4:65:5f:22:eb:c1:f8:e9:3f:55:ba:36:23:88:49:1d:20:
         d3:51:9a:a3:0d:44:67:a9:ad:6b:01:a2:84:3d:b8:7c:8e:99:
         58:f9:a5:bd:65:27:74:7a:36:68:c0:ed:17:89:c8:c2:ee:b9:
         aa:05:76:d6:41:c7:ac:52:b7:ed:2e:b2:72:06:ec:8d:f9:0a:
         4a:9c:24:6a:84:c7:35:ed:9e:bf:40:d1:3c:04:98:35:a9:0e:
         84:24:85:5f:a7:ab:23:e4:86:20:0b:39:7b:55:e3:3e:74:77:
         02:5c:61:7d:f0:14:3a:df:5e:e1:e1:82:32:a0:5b:69:15:49:
         ba:92:02:82:15:68:c0:e7:1f:3a:06:6a:0c:0c:2e:5a:14:27:
         c3:b1:d1:e5:e5:f4:93:3d:aa:0a:5f:94:6d:4b:06:00:6e:77:
         1d:a2:e7:fd:e4:29:23:2f:24:63:8b:6b:26:8d:54:3e:1d:c6:
         55:4b:4e:c7:2b:b5:bc:ce:a0:5d:c9:3f:db:81:a7:bc:62:c6:
         4d:98:11:c8:1d:e0:ad:33:2f:0e:5a:2f:5d:8f:84:66:85:c8:
         ee:de:af:01:c4:2e:71:8f:50:ec:47:7f:42:96:d0:39:b6:19:
         75:5e:62:05:a6:aa:ea:e5:37:36:33:e1:58:72:09:8d:19:27:
         ae:e6:fa:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 21:13:55 2026 by rpki-client