Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft
File:                     VktpF48mnvuWt2kW94FwdU6PDIc.mft (raw, json)
Hash identifier:          R9KHRWZ+jkBdKIhS5/Dc7h53yCD5Hi8Ji57HrOvFDcw=
Subject key identifier:   E4:C0:A1:35:F4:70:8F:A6:FD:6D:4C:A3:34:7D:DA:05:78:31:10:16
Authority key identifier: 56:4B:69:17:8F:26:9E:FB:96:B7:69:16:F7:81:70:75:4E:8F:0C:87
Certificate issuer:       /CN=A91A99C5/serialNumber=564B69178F269EFB96B76916F78170754E8F0C87
Certificate serial:       9E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VktpF48mnvuWt2kW94FwdU6PDIc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft
Manifest number:          95
Signing time:             Fri 17 Apr 2026 07:11:17 +0000
Manifest this update:     Fri 17 Apr 2026 07:11:16 +0000
Manifest next update:     Fri 24 Apr 2026 07:11:16 +0000
Files and hashes:         1: VktpF48mnvuWt2kW94FwdU6PDIc.crl (hash: LcqlyKsKa6cFVh3TGTL/sFU2cSn3HZH11XNsq5Dpxns=)
                          2: AE31872C5DBD11F083DD7F61C4F9AE02.roa (hash: PtmJapetaAUxJ5KEUkr9vfhR8x3TFcjZY4x2L67+TqA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.crl
                          rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VktpF48mnvuWt2kW94FwdU6PDIc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:11:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 158 (0x9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A99C5, serialNumber=564B69178F269EFB96B76916F78170754E8F0C87
        Validity
            Not Before: Apr 17 07:11:16 2026 GMT
            Not After : Apr 24 07:11:16 2026 GMT
        Subject: CN=69e1dd15-8643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:fe:3b:7c:6f:cc:d2:dd:93:ce:22:03:3f:fa:
                    b7:e3:dc:6e:21:7b:44:6b:2f:3b:c8:d5:bc:79:09:
                    df:0f:90:69:79:22:12:b7:9e:27:fa:60:57:69:60:
                    cb:cf:e9:1b:ce:67:53:d5:cb:a4:78:ef:53:c5:5c:
                    02:c9:01:3e:22:bc:5f:a8:f4:25:af:b4:0c:b5:2b:
                    d4:42:fd:be:a4:81:1e:ea:08:48:21:c2:39:35:59:
                    74:38:b1:7f:71:e9:11:9b:2a:e7:30:a8:ba:5e:d2:
                    22:63:18:84:c8:1d:74:bd:f2:a4:e1:a5:bd:c9:f9:
                    fd:dc:bc:2d:6e:ab:4a:a3:02:28:c5:0e:2e:41:d3:
                    c8:c4:3e:7f:b1:31:3b:8a:8c:0a:ca:47:f1:4a:df:
                    8f:96:67:92:6a:eb:6c:1d:0b:9d:f2:33:ee:d4:59:
                    a0:7a:2b:25:8f:f4:60:ff:4f:e8:90:6b:af:ca:fd:
                    aa:dc:dc:06:27:5c:4e:10:19:70:7f:13:40:85:0f:
                    a0:c2:0e:f2:1d:7a:91:39:fd:8b:dc:d9:6e:d6:ee:
                    e6:ab:14:9e:19:b2:b7:7c:cf:8f:f5:43:25:45:5b:
                    96:ef:18:22:05:ef:e6:40:41:d9:8c:cb:94:3d:40:
                    2a:9b:00:78:a1:04:b2:1d:4a:dd:33:e7:70:23:2a:
                    27:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:C0:A1:35:F4:70:8F:A6:FD:6D:4C:A3:34:7D:DA:05:78:31:10:16
            X509v3 Authority Key Identifier:
                keyid:56:4B:69:17:8F:26:9E:FB:96:B7:69:16:F7:81:70:75:4E:8F:0C:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VktpF48mnvuWt2kW94FwdU6PDIc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:92:1a:40:f9:dc:91:a8:6b:66:c8:e2:91:76:4f:e0:ce:fd:
         ff:9a:4d:37:79:17:4a:08:c9:6b:17:ec:da:17:4f:7b:8a:44:
         07:76:99:a5:40:92:94:46:b3:46:3b:07:04:9f:0b:dd:8c:a5:
         dc:04:f6:b9:14:b3:bb:9e:29:4a:e6:f2:49:da:e7:95:2a:fd:
         65:ef:6b:11:24:1f:57:67:26:20:ba:a5:a9:f9:04:47:f9:96:
         76:0a:44:ba:5f:8f:48:08:c8:ef:e5:29:b1:8c:4f:3b:5e:ac:
         a4:6d:3f:93:e9:85:89:5f:b2:89:7e:58:ef:06:a6:0e:e8:a7:
         55:19:c1:7b:67:3b:ae:e8:d4:4a:68:63:6b:d2:43:07:5f:74:
         b5:bb:a3:e6:d8:01:c7:b0:bb:97:7b:f4:f8:39:bb:81:f9:6b:
         17:68:95:ca:70:7f:b9:fb:58:8b:da:b3:c8:97:af:b0:49:05:
         5e:c5:42:17:41:49:bb:14:80:d2:8f:a5:5b:70:52:cf:71:c8:
         a7:21:61:a3:b3:96:08:3a:a4:23:21:44:31:66:12:4a:cb:65:
         f6:f2:96:b7:1f:1d:be:b5:44:09:7d:fe:28:53:59:e6:8f:40:
         25:a7:73:8f:57:4a:d5:30:95:2d:41:33:b6:86:3d:a4:7a:b7:
         25:f2:dd:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:04:43 2026 by rpki-client