Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9CD7/ABEB876083D511EE988DB744C4F9AE02/8fFj2FT-czviVA83o0T_alpayfY.mft
File:                     8fFj2FT-czviVA83o0T_alpayfY.mft (raw, json)
Hash identifier:          i+awHKnzNsGyQvE1QdO9J1xT9q+cBKw0n4H+yexOVY4=
Subject key identifier:   5C:50:C0:9D:4F:32:E2:F8:DE:15:71:95:6B:D7:43:BD:9B:52:41:1D
Authority key identifier: F1:F1:63:D8:54:FE:73:3B:E2:54:0F:37:A3:44:FF:6A:5A:5A:C9:F6
Certificate issuer:       /CN=A91F9CD7/serialNumber=F1F163D854FE733BE2540F37A344FF6A5A5AC9F6
Certificate serial:       01CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8fFj2FT-czviVA83o0T_alpayfY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9CD7/ABEB876083D511EE988DB744C4F9AE02/8fFj2FT-czviVA83o0T_alpayfY.mft
Manifest number:          01C6
Signing time:             Sun 05 Apr 2026 03:18:38 +0000
Manifest this update:     Sun 05 Apr 2026 03:18:37 +0000
Manifest next update:     Sun 12 Apr 2026 03:18:37 +0000
Files and hashes:         1: 8fFj2FT-czviVA83o0T_alpayfY.crl (hash: 2Nnt6lF6rZ7O1LKxJlfLmGuLBNr/Ud7Fx488WUhki4I=)
                          2: E84C2B9083D711EE871C4048C4F9AE02.roa (hash: ulWmZR//Cp/5ZRhCUJXQuusn5PcfSj8MZAxi2Z3a2FQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9CD7/ABEB876083D511EE988DB744C4F9AE02/8fFj2FT-czviVA83o0T_alpayfY.crl
                          rsync://rpki.apnic.net/member_repository/A91F9CD7/ABEB876083D511EE988DB744C4F9AE02/8fFj2FT-czviVA83o0T_alpayfY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8fFj2FT-czviVA83o0T_alpayfY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 03:18:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 461 (0x1cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9CD7, serialNumber=F1F163D854FE733BE2540F37A344FF6A5A5AC9F6
        Validity
            Not Before: Apr  5 03:18:37 2026 GMT
            Not After : Apr 12 03:18:37 2026 GMT
        Subject: CN=69d1d48e-bc86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:68:84:87:45:56:68:98:89:96:da:67:98:7a:
                    60:2b:a3:fb:3f:af:0b:45:66:82:f4:b2:8e:ea:bd:
                    2f:5a:ed:04:6b:1f:fd:6f:a1:78:a9:70:4c:2e:8a:
                    3b:44:2c:83:1c:8a:34:4b:26:be:a6:1d:4c:18:bf:
                    69:34:3d:06:82:47:91:82:c3:dc:2b:05:f6:72:63:
                    66:e8:89:90:73:6d:c0:d6:52:56:0d:dc:51:1e:c5:
                    26:c2:ea:c4:a2:fb:05:bb:63:0e:7f:5e:d7:7c:8a:
                    0a:c2:13:d0:5f:45:86:10:68:54:10:c4:38:39:19:
                    dd:7a:aa:7a:85:37:1b:cc:de:5d:f2:d1:48:d8:3d:
                    92:3a:6a:fc:57:0b:79:8a:3e:96:35:62:65:d9:56:
                    bb:98:f2:0d:7d:cb:a7:f4:dc:7c:8f:93:4a:28:56:
                    bc:33:cd:32:e9:12:ed:64:68:d8:50:e3:5d:0b:20:
                    8e:d4:33:d1:04:7d:57:f0:5b:d1:b9:dc:50:ea:9b:
                    96:7b:af:b0:82:6f:8c:8e:09:81:c8:9a:b0:46:57:
                    90:b4:42:6d:f2:44:32:36:a5:97:5c:34:f9:1f:d3:
                    46:6c:1b:bc:05:d8:c7:a2:55:0e:4f:89:7f:40:5e:
                    63:26:19:38:bd:b9:c3:24:1b:05:4d:3a:2d:6f:96:
                    03:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:50:C0:9D:4F:32:E2:F8:DE:15:71:95:6B:D7:43:BD:9B:52:41:1D
            X509v3 Authority Key Identifier:
                keyid:F1:F1:63:D8:54:FE:73:3B:E2:54:0F:37:A3:44:FF:6A:5A:5A:C9:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9CD7/ABEB876083D511EE988DB744C4F9AE02/8fFj2FT-czviVA83o0T_alpayfY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8fFj2FT-czviVA83o0T_alpayfY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9CD7/ABEB876083D511EE988DB744C4F9AE02/8fFj2FT-czviVA83o0T_alpayfY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:34:8e:b1:4e:65:27:36:28:0c:8d:e9:4c:85:77:e0:96:f7:
         b0:89:b8:72:81:b8:89:b9:31:aa:1e:c0:a8:1e:aa:47:59:ed:
         9d:b5:7e:68:ca:e0:a4:17:71:dc:e2:28:67:da:6b:82:3b:9d:
         0e:fc:72:c1:16:ff:09:e0:ca:0f:44:98:c4:77:d1:06:cc:84:
         b8:f6:59:63:f2:e3:84:01:7a:7d:9d:01:11:d9:d4:d2:ba:62:
         41:4f:4f:8b:15:9b:b7:5d:6d:93:00:13:2a:49:7d:6d:5d:87:
         c0:ea:50:3b:69:1a:a5:b1:67:b4:78:cc:73:4a:47:f3:f7:1a:
         2f:15:39:90:cc:66:37:c5:d3:0c:2f:90:e1:ad:37:7d:8d:35:
         54:0b:93:ea:4a:ae:77:61:96:7b:67:28:40:e7:94:fb:c5:4f:
         de:a8:73:d8:62:dd:16:68:eb:84:cf:b0:d7:9a:50:cb:3a:16:
         cb:0d:be:8c:e2:b9:1d:95:1c:37:23:82:0b:93:9a:29:c6:93:
         ef:36:ed:94:d4:3d:97:a0:db:d0:be:07:ee:fb:bc:eb:b6:d0:
         a2:c8:5d:85:56:ef:b6:03:a6:e9:43:cd:79:1f:29:f0:0d:19:
         97:38:99:5e:25:50:06:ed:5e:b5:62:62:23:58:d9:30:62:b3:
         6b:17:be:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:45:41 2026 by rpki-client