Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1DA2/B8BA899A229411F1BD86858EAE833773/VVf9XdSgiVmupCqY3iBy7QUB204.mft
File:                     VVf9XdSgiVmupCqY3iBy7QUB204.mft (raw, json)
Hash identifier:          +iFGnBAcWjwWzCGXzxoTtnREJdgSd561i+XkaMwCHr8=
Subject key identifier:   42:33:C7:FD:A3:8C:37:E9:39:32:8E:6C:D2:82:B9:92:D0:16:25:97
Authority key identifier: 55:57:FD:5D:D4:A0:89:59:AE:A4:2A:98:DE:20:72:ED:05:01:DB:4E
Certificate issuer:       /CN=A91F1DA2/serialNumber=5557FD5DD4A08959AEA42A98DE2072ED0501DB4E
Certificate serial:       0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVf9XdSgiVmupCqY3iBy7QUB204.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1DA2/B8BA899A229411F1BD86858EAE833773/VVf9XdSgiVmupCqY3iBy7QUB204.mft
Manifest number:          0C
Signing time:             Sun 05 Apr 2026 08:26:17 +0000
Manifest this update:     Sun 05 Apr 2026 08:26:17 +0000
Manifest next update:     Sun 12 Apr 2026 08:26:17 +0000
Files and hashes:         1: VVf9XdSgiVmupCqY3iBy7QUB204.crl (hash: C0FzKyL5YFB+5WTyvhr97eWAq0k+/NGdDZnKur1gJfM=)
                          2: 1CEBECEC229511F1916F29FEAE833773.roa (hash: m1cTe0sjbHKB5Ksm5p5JN7pFm5DtOLvmL4Q6d+C3sDY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1DA2/B8BA899A229411F1BD86858EAE833773/VVf9XdSgiVmupCqY3iBy7QUB204.crl
                          rsync://rpki.apnic.net/member_repository/A91F1DA2/B8BA899A229411F1BD86858EAE833773/VVf9XdSgiVmupCqY3iBy7QUB204.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVf9XdSgiVmupCqY3iBy7QUB204.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 08:26:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1DA2, serialNumber=5557FD5DD4A08959AEA42A98DE2072ED0501DB4E
        Validity
            Not Before: Apr  5 08:26:17 2026 GMT
            Not After : Apr 12 08:26:17 2026 GMT
        Subject: CN=69d21ca9-6d8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:76:0e:1c:b2:34:b2:90:9d:52:d3:91:ba:22:
                    a4:d6:50:20:fd:03:f3:ff:c0:84:a7:a6:30:0e:cb:
                    7d:70:2f:4b:5c:03:73:b4:e5:f0:c0:05:6e:7b:b7:
                    1c:d3:c1:da:fa:b4:ea:de:db:97:0e:e2:08:20:09:
                    e5:d7:5b:a1:9c:a9:29:c9:83:27:de:7b:d6:44:64:
                    9d:5c:eb:70:f9:2d:f9:f7:67:0c:1b:9b:56:30:00:
                    bf:b9:50:08:a8:ba:83:76:cf:71:d7:93:14:65:a4:
                    1c:63:b9:fa:21:ba:1e:c1:0f:23:d6:76:97:bf:37:
                    5f:9e:0d:80:e0:5f:b2:ba:4f:0c:b0:2f:74:0a:5c:
                    23:5d:d5:1f:f1:3e:97:ff:30:67:1f:f4:fc:1c:10:
                    4a:f1:b4:47:44:16:8b:4b:55:7c:73:c7:fe:3e:49:
                    e3:14:08:09:34:97:a1:32:94:1c:ce:ad:0e:cd:40:
                    c6:16:83:56:c9:1b:db:02:b8:45:b1:a8:13:4b:d2:
                    66:d8:6e:21:38:2b:e1:b7:eb:dc:13:ba:b5:8e:82:
                    8f:9c:07:c5:f3:12:d1:1f:b7:e3:fe:c2:d2:dd:87:
                    c2:cc:df:0c:d2:57:5b:80:08:3a:0b:93:50:19:db:
                    ec:04:5f:d7:f1:08:60:a7:a5:fe:cd:4e:a7:ab:3b:
                    db:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:33:C7:FD:A3:8C:37:E9:39:32:8E:6C:D2:82:B9:92:D0:16:25:97
            X509v3 Authority Key Identifier:
                keyid:55:57:FD:5D:D4:A0:89:59:AE:A4:2A:98:DE:20:72:ED:05:01:DB:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1DA2/B8BA899A229411F1BD86858EAE833773/VVf9XdSgiVmupCqY3iBy7QUB204.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVf9XdSgiVmupCqY3iBy7QUB204.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1DA2/B8BA899A229411F1BD86858EAE833773/VVf9XdSgiVmupCqY3iBy7QUB204.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:39:c5:b8:78:99:4c:73:2b:57:91:40:8e:78:f5:26:23:e2:
         2b:b2:6b:ea:ba:43:1b:c9:e4:d9:02:8c:cb:58:8b:9b:ac:a3:
         45:ad:a7:40:ba:42:d8:8f:eb:95:c4:ef:5e:0f:4e:9a:68:ca:
         64:7f:f3:57:79:ff:c1:53:84:61:52:15:4a:c3:19:52:65:43:
         6d:61:b0:2a:6e:ae:c7:15:bc:c3:54:2b:60:6f:eb:7f:21:18:
         dd:52:de:b6:87:7b:ee:48:59:c6:a2:db:6a:a2:a9:2a:3d:19:
         0a:60:48:8c:5c:e1:00:b1:6a:e6:b1:c9:d7:c5:2d:89:d0:7c:
         8f:37:93:dd:4d:70:2e:38:43:38:c3:dd:a1:12:56:52:9e:2a:
         e5:2d:59:fb:0c:22:94:f2:34:af:2e:30:c9:3a:ce:31:5a:da:
         4d:cf:92:56:4a:a2:43:5e:d8:70:e4:d5:dd:d9:96:5f:91:15:
         08:24:a6:36:45:f6:f8:7f:61:c3:5e:b5:1f:ff:4a:ed:7a:fa:
         ff:21:64:12:86:dc:6d:6c:10:f8:d3:d5:6f:cb:35:1f:37:93:
         9a:cd:da:e2:2d:19:70:eb:6e:83:49:95:ac:9f:e6:e5:e2:74:
         93:31:89:ed:43:8d:7e:17:5f:4f:ef:4e:f1:d6:93:c8:af:c2:
         49:81:03:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:38:19 2026 by rpki-client