Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft
File:                     Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft (raw, json)
Hash identifier:          GywRUdKYF9hCwnMmBDlIunZsvWxH70+Fku5fhXmVaho=
Subject key identifier:   4C:FE:F6:74:F3:65:A9:0A:99:9C:14:14:65:88:4E:90:6D:92:86:5A
Authority key identifier: 56:7F:9A:B2:B2:C7:96:92:68:5C:03:05:5A:F9:69:E6:0B:66:B8:00
Certificate issuer:       /CN=A91ADB98/serialNumber=567F9AB2B2C79692685C03055AF969E60B66B800
Certificate serial:       02B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vn-asrLHlpJoXAMFWvlp5gtmuAA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft
Manifest number:          02A1
Signing time:             Sun 05 Apr 2026 01:17:33 +0000
Manifest this update:     Sun 05 Apr 2026 01:17:33 +0000
Manifest next update:     Sun 12 Apr 2026 01:17:33 +0000
Files and hashes:         1: Vn-asrLHlpJoXAMFWvlp5gtmuAA.crl (hash: TFxpKOqprXR46ZVhUO2XNgoCpc9wOn2wvnHcaB/4I8E=)
                          2: 310AEC7A5B7C11EDAAFAB831C4F9AE02.roa (hash: s6hQH/XUcOEn8mr++TJ3GkI04opViNwePvL4KgonitQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.crl
                          rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vn-asrLHlpJoXAMFWvlp5gtmuAA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 01:17:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 691 (0x2b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADB98, serialNumber=567F9AB2B2C79692685C03055AF969E60B66B800
        Validity
            Not Before: Apr  5 01:17:33 2026 GMT
            Not After : Apr 12 01:17:33 2026 GMT
        Subject: CN=69d1b82d-fcc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:aa:5d:b1:0e:83:19:c4:8f:b2:8b:8c:2e:c5:
                    43:4f:bc:09:7d:82:6b:5b:f1:ef:b4:f6:c9:7b:0d:
                    39:53:e4:69:c9:2a:5e:c1:d3:3d:e9:fb:f0:d6:57:
                    5a:b2:e6:f1:15:d9:42:b7:d1:33:1b:6a:20:34:03:
                    b5:92:56:47:e6:28:19:e5:e2:c0:4e:a8:14:2e:22:
                    f7:da:9d:78:3a:62:43:35:3e:24:ac:d6:e1:6a:92:
                    72:b1:d6:57:fe:96:fe:db:c3:7b:12:e1:7e:10:6d:
                    ef:db:61:86:a5:d4:05:ed:31:20:69:2d:b0:09:5b:
                    c9:c5:2b:b7:91:e7:90:76:f4:86:62:f8:b6:50:1b:
                    bd:32:73:c0:2b:83:2d:b5:70:48:58:d2:45:a6:43:
                    99:0f:64:4c:b8:40:a1:19:d2:9f:c3:00:e2:d2:f0:
                    15:92:b0:c2:cb:fc:0f:1c:4d:19:db:a5:25:c0:71:
                    c0:d1:bf:6b:2d:cd:ed:32:06:31:b9:b1:dd:aa:b6:
                    99:0d:92:5d:1f:56:fb:7e:39:c5:9d:00:86:81:f4:
                    80:54:3a:cc:f5:bd:7e:21:d5:63:59:2e:e4:e6:07:
                    97:12:b3:6e:97:1b:2a:44:d6:95:88:1f:73:49:45:
                    dc:f2:c7:8c:14:9b:fa:c4:7b:10:39:2a:84:3b:c1:
                    fe:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:FE:F6:74:F3:65:A9:0A:99:9C:14:14:65:88:4E:90:6D:92:86:5A
            X509v3 Authority Key Identifier:
                keyid:56:7F:9A:B2:B2:C7:96:92:68:5C:03:05:5A:F9:69:E6:0B:66:B8:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vn-asrLHlpJoXAMFWvlp5gtmuAA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:d1:0f:b8:d0:69:07:b3:fb:3d:6a:42:8f:14:b5:6f:2c:a4:
         a1:63:14:84:5b:d5:45:56:07:52:fa:9e:d8:29:ed:1c:65:bf:
         84:92:0d:53:fb:e0:11:18:0c:e9:f9:b7:92:00:d5:fa:f6:8e:
         c2:57:8d:3c:f8:85:5b:ea:ac:c5:77:c5:fb:33:43:83:2b:9f:
         8f:20:3c:a2:3c:18:30:bb:48:61:eb:df:1a:af:c5:88:35:d0:
         58:da:21:7d:84:b1:24:33:08:72:b4:52:37:7e:c0:89:5b:94:
         1c:10:18:13:d8:33:aa:d5:53:30:96:52:35:b4:7b:15:d3:23:
         96:b3:29:1b:92:f6:6b:2b:7c:e8:40:50:1c:8e:91:a4:17:c7:
         f4:5f:25:5f:c5:d0:f3:5b:45:37:dc:2a:8a:96:33:d3:a4:52:
         c2:18:d7:a6:71:cd:c5:ff:74:77:3b:70:2b:b5:99:69:98:61:
         5f:dc:0b:ac:51:7d:6b:bf:21:ae:b6:0a:24:c6:0c:a8:35:f0:
         1d:a3:fa:fe:63:62:92:fc:72:a2:eb:29:4c:23:77:06:c3:5f:
         ea:9a:f5:28:1c:16:6a:4b:8d:bb:07:72:c4:c0:7a:eb:be:7a:
         ae:3d:e9:cb:70:e2:d9:f3:a2:8e:18:44:af:39:98:5f:f9:08:
         a8:fc:b1:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:50:31 2026 by rpki-client