Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft
File:                     83YJDdec9qJZrioXAgNy6eYWC7Y.mft (raw, json)
Hash identifier:          3iAkbAhN8/9TU3+8Y4culYoT/XVPP1cljsnztxo/PG4=
Subject key identifier:   29:41:03:02:AF:2F:C4:30:26:6F:4E:13:92:6F:85:FB:DD:28:04:4B
Authority key identifier: F3:76:09:0D:D7:9C:F6:A2:59:AE:2A:17:02:03:72:E9:E6:16:0B:B6
Certificate issuer:       /CN=A91E8EAD/serialNumber=F376090DD79CF6A259AE2A17020372E9E6160BB6
Certificate serial:       0A34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83YJDdec9qJZrioXAgNy6eYWC7Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft
Manifest number:          0A29
Signing time:             Sun 26 Apr 2026 19:40:22 +0000
Manifest this update:     Sun 26 Apr 2026 19:40:22 +0000
Manifest next update:     Sun 03 May 2026 19:40:22 +0000
Files and hashes:         1: 83YJDdec9qJZrioXAgNy6eYWC7Y.crl (hash: XBoQ1yeajq523bhOsnhmC2v0MB3DWt5U0/98iYS9nUY=)
                          2: 16F7FB3E8FAF11EA96738C46C4F9AE02.roa (hash: ouYBwpfCXuAbXe6I0vrvzKSbU872/FUx3W+kR5PDwWQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.crl
                          rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83YJDdec9qJZrioXAgNy6eYWC7Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 03 May 2026 19:40:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2612 (0xa34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8EAD, serialNumber=F376090DD79CF6A259AE2A17020372E9E6160BB6
        Validity
            Not Before: Apr 26 19:40:22 2026 GMT
            Not After : May  3 19:40:22 2026 GMT
        Subject: CN=69ee6a26-8bc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:af:88:2b:63:90:69:dc:de:e8:a6:36:df:21:
                    56:f6:d2:06:9d:f3:b2:01:34:72:59:02:fa:4b:0b:
                    92:8d:fb:42:12:39:9d:31:40:1d:d7:fe:4a:1f:3d:
                    d4:03:8c:e8:23:e8:89:9b:bb:bd:43:30:ec:f0:1f:
                    bf:a3:b4:03:3b:68:a4:08:99:ed:1a:66:33:0c:ca:
                    69:95:e1:fd:84:d2:4e:36:a1:e4:8a:35:72:0d:d5:
                    b9:f9:a1:8b:55:c5:ff:6b:3b:5a:a8:06:a1:cd:74:
                    4c:7d:6f:34:89:03:ef:88:33:63:87:c6:ee:a8:b4:
                    2c:90:4e:ff:ae:ca:0c:5d:83:25:25:b6:51:29:b3:
                    26:c7:6d:47:cb:d8:c2:cd:08:59:21:a4:d5:16:10:
                    fc:70:9d:7b:85:4f:81:2a:96:af:44:4f:77:38:cc:
                    74:5b:b5:4e:5d:fd:81:14:a9:52:04:33:ff:73:ab:
                    cb:0b:ed:e8:58:a3:0c:31:74:ac:c9:b0:b6:c6:8c:
                    22:d9:d1:a5:e9:87:da:f7:61:e3:4d:8f:db:f5:5b:
                    cf:89:5f:a3:2d:ef:94:9b:70:6c:0a:9c:6f:10:9f:
                    8a:63:ea:6e:1e:5b:38:38:33:e2:b5:7d:78:dd:a1:
                    eb:e4:d9:d7:64:90:9c:e6:8f:4a:95:ef:86:89:4d:
                    d2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:41:03:02:AF:2F:C4:30:26:6F:4E:13:92:6F:85:FB:DD:28:04:4B
            X509v3 Authority Key Identifier:
                keyid:F3:76:09:0D:D7:9C:F6:A2:59:AE:2A:17:02:03:72:E9:E6:16:0B:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83YJDdec9qJZrioXAgNy6eYWC7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:2b:5d:dc:c1:61:f6:a2:09:f4:c5:8e:c1:dd:40:58:38:08:
         54:af:5c:1b:1e:38:74:92:c0:8c:b8:17:17:c3:b9:2b:ef:fd:
         83:e3:87:c7:47:c0:90:62:e9:81:44:99:16:bc:83:63:2c:c0:
         bd:dc:fd:2f:04:69:bf:42:14:80:ab:ff:e4:23:8a:ee:49:6d:
         d2:72:25:26:85:65:24:c5:0b:9a:35:27:98:d7:c9:fb:d2:6d:
         d6:bd:6a:fc:96:8a:ae:39:39:45:f3:b7:73:1c:32:9e:5f:c6:
         ed:5d:38:7b:62:bf:2e:52:a2:09:f1:bf:a0:c9:ec:27:9a:4a:
         47:a4:3f:59:4b:4a:b8:1e:28:b5:33:b7:f0:88:29:3a:b2:d5:
         8c:c5:de:9e:5e:3c:59:dd:51:bb:9d:73:8d:c7:de:00:e5:7f:
         42:79:ca:58:f2:ec:47:a4:0b:29:2e:e8:17:95:6a:a9:97:1f:
         a5:bf:37:c8:4e:e1:d2:d0:a9:44:d7:ef:d7:23:23:d9:bc:57:
         20:97:89:22:b9:05:e3:a1:6d:84:9b:ab:cb:4d:58:0c:a0:19:
         89:ac:bd:98:8c:e4:3e:67:cb:dc:a7:a2:4f:37:b0:33:a6:6d:
         be:a8:62:52:43:d5:33:9e:a1:78:fe:4d:ff:72:0e:f9:39:e6:
         f6:da:75:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:08:52 2026 by rpki-client