Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft
File:                     Vj8ylI68GzkPMqCqPzYUeFr858I.mft (raw, json)
Hash identifier:          XjCaMvjRZEGussRVXaVJtVKkNB6CG7aeXMyYwCkDs7k=
Subject key identifier:   50:BC:76:2B:5E:31:B1:C9:80:80:56:0F:F6:26:7D:86:37:25:6D:D9
Authority key identifier: 56:3F:32:94:8E:BC:1B:39:0F:32:A0:AA:3F:36:14:78:5A:FC:E7:C2
Certificate issuer:       /CN=A917AC8C/serialNumber=563F32948EBC1B390F32A0AA3F3614785AFCE7C2
Certificate serial:       037A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vj8ylI68GzkPMqCqPzYUeFr858I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft
Manifest number:          036E
Signing time:             Sun 05 Apr 2026 00:37:28 +0000
Manifest this update:     Sun 05 Apr 2026 00:37:27 +0000
Manifest next update:     Sun 12 Apr 2026 00:37:27 +0000
Files and hashes:         1: Vj8ylI68GzkPMqCqPzYUeFr858I.crl (hash: w90CbnbF9I0nQkn4rrJ1TP7qub5We9a/Z9YQHivMfqU=)
                          2: EA5EB99CEBBD11ECB3DAFE39C4F9AE02.roa (hash: H3rXNLGQKH+kqsDl65goID5SSl1RqTvP0hsRSPAvHF0=)
                          3: EB756434EBBD11ECB3DAFE39C4F9AE02.roa (hash: FK5fCuILvyoIFzPe0XnaqrZMxWMUwXNRaQN+QFBeZ2c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.crl
                          rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vj8ylI68GzkPMqCqPzYUeFr858I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 00:37:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 890 (0x37a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917AC8C, serialNumber=563F32948EBC1B390F32A0AA3F3614785AFCE7C2
        Validity
            Not Before: Apr  5 00:37:27 2026 GMT
            Not After : Apr 12 00:37:27 2026 GMT
        Subject: CN=69d1aec8-ab62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5c:a0:71:64:25:0b:03:0a:7a:ce:ab:f9:f8:
                    ad:7a:ee:43:9e:9c:db:e0:88:5f:4b:eb:cb:25:1d:
                    52:50:d2:97:ad:38:21:fb:56:50:e7:36:e1:f2:b5:
                    59:42:f6:af:d6:15:1c:52:ba:8a:51:80:63:c3:64:
                    14:a0:12:c4:53:8c:fd:2b:5e:01:04:f6:97:d9:7f:
                    fa:03:27:62:8b:aa:41:42:cd:a7:e3:75:54:16:a0:
                    8e:87:58:ef:81:42:25:10:ae:7f:e6:c1:38:c3:f9:
                    84:0f:d5:e9:c2:58:aa:25:ea:58:6c:8f:f8:c4:97:
                    9e:ad:25:59:11:47:cd:c1:af:8a:67:97:87:aa:32:
                    fc:24:91:fa:f7:17:69:bf:48:07:ca:6c:f4:9c:fe:
                    8e:eb:18:ef:0a:ac:b0:d9:1b:24:b9:c5:e5:42:49:
                    63:75:e2:71:16:4d:2b:30:f3:73:f8:c0:48:63:c0:
                    08:ae:65:24:fc:5b:a7:bc:94:e2:6d:cc:0a:6b:dd:
                    6f:f7:b0:be:a6:fe:80:fa:fb:a0:c9:c5:49:6b:85:
                    9e:ef:de:aa:b7:64:9d:a2:82:3f:86:fa:c2:65:44:
                    e9:9b:4b:30:d3:42:f8:63:dc:30:a1:9a:36:33:89:
                    ba:4b:c4:bb:8c:bc:c1:33:c5:43:21:d9:6f:f0:2f:
                    74:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:BC:76:2B:5E:31:B1:C9:80:80:56:0F:F6:26:7D:86:37:25:6D:D9
            X509v3 Authority Key Identifier:
                keyid:56:3F:32:94:8E:BC:1B:39:0F:32:A0:AA:3F:36:14:78:5A:FC:E7:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vj8ylI68GzkPMqCqPzYUeFr858I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:bd:2e:ca:9f:cd:7a:96:01:cc:c0:3b:a1:d7:aa:ea:79:a1:
         0a:92:49:e1:f5:38:9f:4e:91:d3:7f:40:43:56:80:63:97:6b:
         b1:7d:cc:09:f5:b8:42:ea:42:47:10:ae:14:e7:0f:eb:79:c6:
         b4:7d:6d:77:01:23:a6:ce:84:f1:fa:cd:97:fb:75:e1:5b:a8:
         20:c7:ea:2c:85:7f:df:e5:ad:cf:34:8d:f7:b3:b9:d0:37:40:
         ce:19:e1:58:56:25:c9:04:c3:b1:5a:dc:86:87:83:69:b5:6f:
         42:a0:0c:11:fd:62:e3:99:45:d0:08:ae:12:ca:04:c4:1c:92:
         9a:96:66:82:d5:a4:05:15:a0:db:22:4f:f2:2c:b3:0a:18:4a:
         e8:30:aa:2c:de:94:47:ef:3f:a4:45:03:5c:66:34:72:14:c6:
         83:0c:a1:47:73:78:b7:fe:1d:ad:dd:92:76:4d:2e:88:99:ab:
         20:60:c4:74:7b:21:79:7b:87:9b:ce:c2:a3:40:2d:e1:64:0d:
         8c:b0:ca:04:e3:da:0a:e0:12:64:0b:d3:d1:c2:4c:b7:13:93:
         45:b3:52:ed:7e:db:d7:24:6e:7e:2f:99:7d:5d:48:85:aa:be:
         34:2e:75:45:4b:c8:21:24:14:ed:ff:2a:34:fe:11:c7:9c:1f:
         35:cc:d2:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:33:04 2026 by rpki-client