Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft
File:                     vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft (raw, json)
Hash identifier:          jyupX0+r4Lvw71wLIth+ZHsb5YcuP/TOVPJMjaRy/Qg=
Subject key identifier:   55:0E:8E:C8:88:C2:70:EA:D8:0D:CE:E0:13:31:03:4D:7A:50:3C:98
Authority key identifier: BD:63:E0:DD:CB:5C:D4:1B:34:50:1D:F2:E8:1A:2A:72:CE:E3:6E:F2
Certificate issuer:       /CN=A917B503/serialNumber=BD63E0DDCB5CD41B34501DF2E81A2A72CEE36EF2
Certificate serial:       015C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft
Manifest number:          0155
Signing time:             Sat 25 Apr 2026 04:48:16 +0000
Manifest this update:     Sat 25 Apr 2026 04:48:15 +0000
Manifest next update:     Sat 02 May 2026 04:48:15 +0000
Files and hashes:         1: vWPg3ctc1Bs0UB3y6Boqcs7jbvI.crl (hash: +alxa7zbZ7j9hX010mR4p8Yq/A8CGk4S3Wr0N/6NGPU=)
                          2: FF7048A08BB111EF8981B871C4F9AE02.roa (hash: Pf4vtsycRl7uQ7TRSuhW3ZPGeuFhV8pttTvvgiVqOIo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.crl
                          rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 02 May 2026 04:48:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 348 (0x15c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B503, serialNumber=BD63E0DDCB5CD41B34501DF2E81A2A72CEE36EF2
        Validity
            Not Before: Apr 25 04:48:15 2026 GMT
            Not After : May  2 04:48:15 2026 GMT
        Subject: CN=69ec4790-52dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ed:33:df:27:05:5d:d4:61:b1:92:56:7c:19:
                    74:5a:bc:a2:38:87:01:b6:98:38:13:a8:a5:ed:45:
                    1c:04:d8:d2:ce:50:29:5a:01:1e:39:0d:7c:c5:01:
                    4b:40:2b:7c:fe:e8:69:f0:35:88:36:1d:17:88:4f:
                    82:5e:f3:8f:fb:10:7f:68:2d:dd:c6:40:a7:02:7e:
                    55:f5:04:11:86:5a:4a:32:f8:37:92:e7:ba:8c:67:
                    e5:8e:ce:59:22:14:a5:3b:ef:c1:49:25:a5:b6:3d:
                    90:ee:74:46:f7:59:12:4b:ce:bd:61:51:e9:89:a8:
                    96:e6:e7:f3:e9:80:1d:8d:2b:53:25:15:c3:4c:68:
                    3b:fa:42:45:70:f2:4e:66:10:22:2f:b3:47:35:a4:
                    c1:46:d3:aa:3c:d4:aa:83:08:d0:5b:ac:7c:50:09:
                    a7:48:59:49:8f:96:97:08:fb:a5:8e:87:8f:51:2c:
                    fa:e1:41:2b:79:0e:f9:9b:09:c9:2c:c7:df:03:cd:
                    1b:a7:38:39:51:dc:bd:f9:a9:6d:ec:63:24:4a:63:
                    75:c4:8b:3e:60:18:26:23:8c:a8:18:fa:1a:35:a3:
                    49:4b:12:68:12:e6:7f:3d:b2:85:aa:cd:11:7a:46:
                    3b:ce:40:d4:92:54:7c:cd:19:bb:29:ca:1a:89:6c:
                    96:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:0E:8E:C8:88:C2:70:EA:D8:0D:CE:E0:13:31:03:4D:7A:50:3C:98
            X509v3 Authority Key Identifier:
                keyid:BD:63:E0:DD:CB:5C:D4:1B:34:50:1D:F2:E8:1A:2A:72:CE:E3:6E:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:d0:f3:ec:d2:16:59:53:1c:58:e8:8d:23:e5:6a:e2:09:1c:
         db:da:28:0c:67:92:20:15:da:62:5b:0d:d7:d3:20:7d:14:b5:
         a1:8e:cb:7b:95:ea:cc:df:03:c4:3f:af:7a:13:55:da:9a:73:
         0e:73:9d:f1:c1:b6:f7:cc:2b:ab:20:24:9b:b2:19:50:14:a4:
         33:27:8a:16:1b:98:29:d7:2c:88:4a:1a:05:c4:26:aa:7e:53:
         d2:da:fb:c6:8a:97:6e:7d:db:f1:ca:f2:0a:fa:d0:cd:ee:57:
         69:d9:20:7f:85:91:ef:91:a6:c9:9f:f1:8e:79:7e:1a:95:6c:
         ab:7c:0d:4a:a4:d8:b6:ba:bd:35:8e:d7:59:69:3a:42:98:3d:
         09:1f:7a:81:64:9d:76:16:38:2e:51:11:7c:7d:2e:d8:1f:3d:
         45:0a:79:7e:19:2b:04:2c:08:3f:29:45:c6:2c:c9:1f:a3:cd:
         65:0a:e5:50:ae:c8:78:61:97:17:3a:49:c7:4f:cd:3e:7d:e2:
         c7:87:4f:77:f1:3b:cf:8a:43:39:81:6d:f6:e0:7a:8b:37:57:
         3f:5e:6d:64:7c:99:d9:98:aa:bb:81:ef:47:c6:10:68:21:88:
         2f:77:60:86:63:50:3b:c3:61:fa:ae:9a:36:3e:ec:f0:ba:d8:
         f1:96:02:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 04:35:03 2026 by rpki-client