Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft
File:                     vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft (raw, json)
Hash identifier:          yqsnVjDa0od7UMe3bNVvGLo6H1ahaNFgghh9beaXNK8=
Subject key identifier:   BA:0E:D3:73:DB:F3:46:DD:A9:BA:7D:3E:5F:E0:A2:5A:B2:C6:18:FC
Authority key identifier: BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03
Certificate issuer:       /CN=A91AA48F/serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503
Certificate serial:       359E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft
Manifest number:          3567
Signing time:             Mon 20 Apr 2026 14:37:58 +0000
Manifest this update:     Mon 20 Apr 2026 14:37:57 +0000
Manifest next update:     Mon 27 Apr 2026 14:37:57 +0000
Files and hashes:         1: vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl (hash: 2GBEta6nnWJiKCkuXPHpLwoopO4L0Z+YcpkJpwh0hRk=)
                          2: 08347C420BFB11EDA31A0961C4F9AE02.roa (hash: bKCsW0HOObswpaBTmtOg5un1FXNgtKQBykPxtUBttFM=)
                          3: 8E0F37D4AD9911EF8F5AF92EC4F9AE02.roa (hash: jSyladWwIPcLDhRoJV9EkcXRD2yn45YjwYV1xLB7tkA=)
                          4: 21C0B7E23BD311F0B1BF6C56C4F9AE02.roa (hash: ei/pNFfYuuTuQw4Uvc9PFgEYvRb+k6YfbWf/kyJWsGU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl
                          rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Apr 2026 14:37:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13726 (0x359e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AA48F, serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503
        Validity
            Not Before: Apr 20 14:37:57 2026 GMT
            Not After : Apr 27 14:37:57 2026 GMT
        Subject: CN=69e63a46-4981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:96:ff:02:15:ec:39:ad:c4:1a:bc:1f:a4:c4:
                    ff:f5:86:44:13:31:17:ac:f8:33:a3:dc:ee:2d:4e:
                    44:1e:df:02:4b:39:54:e1:3a:50:cc:7e:94:0d:75:
                    d1:75:93:d5:2c:02:d5:8b:70:1a:10:37:7d:ec:0d:
                    c0:c1:fd:9d:96:7d:15:3e:1a:ba:ef:a2:35:bb:e3:
                    1f:10:92:68:da:76:b4:ad:38:a0:13:d5:9f:9d:d6:
                    0d:9c:dc:bf:67:21:9a:42:9c:74:d1:3e:83:f0:a4:
                    b5:ca:5b:ee:3b:71:c4:b4:4b:f3:5d:b2:b7:8b:18:
                    e5:2b:1a:28:28:2e:d8:3f:a3:b7:8a:bb:a2:38:9e:
                    7b:ea:03:c7:24:db:88:92:7d:d1:05:ec:dd:2a:84:
                    fe:44:55:d1:26:d7:24:4d:9e:ba:0d:96:3f:8c:db:
                    37:1e:82:9e:93:ab:63:36:26:b4:07:17:39:69:05:
                    2a:bb:52:a3:ef:63:9f:47:d3:71:e6:14:da:d8:49:
                    38:5f:3c:2f:2d:5f:6d:4b:90:6a:c8:ba:65:ef:5c:
                    b9:4e:fc:72:55:0f:f2:a2:a7:bc:5f:18:52:26:5e:
                    94:82:73:a7:bc:ee:ea:8d:4a:97:47:23:09:fc:03:
                    3a:c4:84:52:54:6c:fc:82:0f:80:76:79:e2:d0:3b:
                    fb:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:0E:D3:73:DB:F3:46:DD:A9:BA:7D:3E:5F:E0:A2:5A:B2:C6:18:FC
            X509v3 Authority Key Identifier:
                keyid:BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:94:87:22:26:7d:47:ab:46:a8:bf:56:36:44:50:c8:02:a1:
         35:43:67:9e:9c:7f:95:00:08:14:58:49:8e:0b:f7:5e:5f:7b:
         3e:a0:2f:2c:3f:d6:2a:33:8c:a5:07:9a:d0:ff:5d:ef:82:01:
         d9:56:fc:50:e0:f1:9f:02:ee:4d:61:33:13:f0:07:a6:88:ba:
         11:8e:c9:36:0a:7f:c6:c0:5c:60:6a:79:97:22:9c:7c:f0:17:
         cb:1a:d0:34:13:85:10:9f:68:e2:6d:30:32:c7:55:4d:fc:4e:
         90:b7:28:15:44:a5:f8:82:e6:0c:2e:70:fd:98:bc:ee:54:b2:
         ae:13:0e:f9:f2:cf:fc:04:bf:0e:27:a2:44:1a:d5:41:d9:bd:
         ec:e2:14:92:e8:f0:8a:53:fc:91:d0:9f:39:3c:57:18:d7:e5:
         3c:02:b2:4c:9e:f8:17:c6:19:20:8e:df:b4:c4:1a:c8:44:9c:
         78:27:61:9d:7d:1b:c4:76:91:1f:7f:1c:55:8d:68:31:39:d2:
         c9:68:a9:67:1e:54:23:05:70:a2:4c:7c:c7:9f:7c:ae:ab:38:
         6d:3e:82:d2:33:39:a0:69:25:52:d6:c1:d9:dc:90:47:d2:71:
         ee:c8:3e:73:8a:5c:2b:c9:ba:b4:c3:87:d0:66:7d:d1:7c:19:
         5b:f0:05:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 04:09:36 2026 by rpki-client