Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft
File:                     vxobyMAsIDYtD9n5K8AGoolejIA.mft (raw, json)
Hash identifier:          x+zs2AirVNnOGyuf9R5Ke+JfgEBQhjivZObjvsvF+yg=
Subject key identifier:   8A:82:F7:CF:0D:4E:DF:6F:41:3D:76:E5:A8:0B:31:1E:67:9F:B8:07
Authority key identifier: BF:1A:1B:C8:C0:2C:20:36:2D:0F:D9:F9:2B:C0:06:A2:89:5E:8C:80
Certificate issuer:       /CN=A91A423B/serialNumber=BF1A1BC8C02C20362D0FD9F92BC006A2895E8C80
Certificate serial:       0859
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft
Manifest number:          0851
Signing time:             Wed 20 May 2026 20:52:21 +0000
Manifest this update:     Wed 20 May 2026 20:52:20 +0000
Manifest next update:     Wed 27 May 2026 20:52:20 +0000
Files and hashes:         1: vxobyMAsIDYtD9n5K8AGoolejIA.crl (hash: Lv1g9bgMouhW0wxakNNYljZsWpYeWWzJWafKyKGx168=)
                          2: ABD5003E079C11EBA7C04832C4F9AE02.roa (hash: 778EGlGgVJG4KhFCrh96xdUIIB8BVjBB6yGmPip2Cyc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.crl
                          rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 20:52:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2137 (0x859)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A423B, serialNumber=BF1A1BC8C02C20362D0FD9F92BC006A2895E8C80
        Validity
            Not Before: May 20 20:52:20 2026 GMT
            Not After : May 27 20:52:20 2026 GMT
        Subject: CN=6a0e1f04-32de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:db:6f:75:71:30:e8:f9:01:4e:ad:a0:66:9f:
                    8a:a2:2e:71:b7:21:c5:91:b5:b5:bd:93:3c:ea:12:
                    df:4d:fc:e2:d2:66:b9:6f:40:dd:a9:6f:d6:10:6f:
                    07:ee:cf:70:44:e0:91:e8:0d:40:e7:1f:14:85:2d:
                    56:f1:dd:51:d3:fc:54:f7:7c:af:40:1f:ee:59:94:
                    7e:c7:06:dc:71:53:fd:3f:e0:e0:e7:ac:a5:ff:70:
                    be:f8:42:53:e4:25:ad:d5:94:a2:87:14:10:5b:3c:
                    70:e8:84:f4:92:c4:4d:5e:68:bc:b3:f9:a9:26:be:
                    57:95:9f:e1:0b:b7:c3:a3:95:4d:31:ee:90:0c:09:
                    8c:0a:ca:01:59:3c:b5:3e:b2:a0:b5:ed:b0:45:6c:
                    a6:d8:c3:8f:9e:d6:b5:f8:f9:ae:11:44:df:e8:9b:
                    4c:f3:8a:81:5d:23:ce:63:c5:e4:c6:56:36:93:1f:
                    54:0c:b3:d3:1e:ab:d3:5f:79:3d:68:48:7a:15:74:
                    81:63:1f:80:50:3a:f8:8c:c1:9b:88:85:f8:10:f3:
                    fc:b4:97:7e:2e:0a:be:3e:aa:06:73:e2:f0:0a:44:
                    42:81:9b:6a:16:83:0f:f4:04:92:31:9b:12:98:d7:
                    c1:77:a6:bc:6c:83:9c:46:20:bb:01:81:2b:ab:cb:
                    53:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:82:F7:CF:0D:4E:DF:6F:41:3D:76:E5:A8:0B:31:1E:67:9F:B8:07
            X509v3 Authority Key Identifier:
                keyid:BF:1A:1B:C8:C0:2C:20:36:2D:0F:D9:F9:2B:C0:06:A2:89:5E:8C:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:54:e7:6e:6b:97:37:ec:c0:b2:ee:f8:b8:1e:b2:45:7e:2a:
         b8:56:66:f7:f6:fa:3f:f0:dd:e8:ac:db:9d:00:05:53:19:1d:
         ec:3c:db:6a:9c:04:75:59:6d:a9:ba:af:14:38:41:7c:68:96:
         f1:8b:19:75:94:0f:1a:ab:e7:2b:39:fb:15:66:c7:9a:2e:fe:
         b2:f1:1b:0e:d6:f8:14:09:df:0a:11:26:37:41:c2:65:23:2f:
         af:f1:b6:ad:9a:98:43:ae:8b:2e:33:6c:6f:54:96:cf:50:7f:
         43:51:52:8a:df:7a:82:2f:de:a6:59:89:29:6b:65:b4:1a:3f:
         b4:b8:d8:af:7a:60:d8:53:9e:0a:c1:42:0f:cc:2f:80:ab:36:
         04:c9:5a:bb:d1:17:fd:5b:99:15:eb:fc:7e:dc:81:0c:4b:f6:
         16:51:1d:8a:82:0e:11:da:00:9f:36:ed:23:1b:30:9e:02:22:
         bb:dd:99:41:ee:e1:86:ec:4d:aa:ec:a1:9a:fa:3f:b0:ec:f5:
         ef:63:08:22:b9:3c:12:72:1b:e8:4f:b0:e4:9e:1b:50:bd:c3:
         48:b2:ef:e8:a8:e1:62:03:02:55:95:5e:46:88:9b:92:24:7a:
         97:12:e2:3d:e5:37:76:aa:5b:23:ce:cd:68:cf:2c:2b:cb:72:
         a7:93:fd:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:15:41 2026 by rpki-client