Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
File:                     4VW4KofSjod2AvmU-P_T50Sq9IA.mft (raw, json)
Hash identifier:          0VbuPRHDcuySlO202rvVBMfV+5UWw8KjOG38LRX8hrU=
Subject key identifier:   A9:8B:B9:BA:38:AF:DE:56:9E:BB:34:0C:68:15:38:23:68:16:01:AF
Authority key identifier: E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80
Certificate issuer:       /CN=A91B625F/serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480
Certificate serial:       08D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
Manifest number:          084C
Signing time:             Sat 14 Mar 2026 20:37:07 +0000
Manifest this update:     Sat 14 Mar 2026 20:37:06 +0000
Manifest next update:     Sat 21 Mar 2026 20:37:06 +0000
Files and hashes:         1: 4VW4KofSjod2AvmU-P_T50Sq9IA.crl (hash: 6cpcVLebeDCecuqlxnKkh245POENFUrkRI64jb+HhRU=)
                          2: BBBC061A122711EB952CAB3FC4F9AE02.roa (hash: C0xBTRlD8HLET0RP6eUIhENntX7keWJnMKK0uyPRa78=)
                          3: 0989F3EE120911EB83107638C4F9AE02.roa (hash: 4Y9nNKAigvhYjcu279sIrumnfKE8nPHZdarr6Cb3oLQ=)
                          4: C13E824AC49F11EBAC936D7AC4F9AE02.roa (hash: yHJ8vOtxRGFU0cYTCITAbcI8dCzSp/DJjmxjwuQbPrM=)
                          5: 1BDAA63E12B211EBA631032CC4F9AE02.roa (hash: sYhhaYoxdAzhClysEfyco8DOZT06ACPXGgRoT8fF4sA=)
                          6: 190D1EDC32C411EB98F62F5FC4F9AE02.roa (hash: rjElA2OWEyqb1O0JSaEyfj+lEFs3L7mpqepJIx3ebGA=)
                          7: F255E05612DB11EBBE14D853C4F9AE02.roa (hash: vLQDmUgwBRf1LfHES4fcrNN9SFNnqF9R/jcKitT1EiY=)
                          8: AD0EFB005DFD11EBAD26AA4BC4F9AE02.roa (hash: C//L8dqksd8wIiYlgl9aF5lle1XW+/2dgZ+Mvuzm+b0=)
                          9: 86CD7C2E72B011EB9FC4FE4EC4F9AE02.roa (hash: OMXUb6Lx3/4kaa1T15ov60ZpldaZCJFTzLaLw/ElCUo=)
                          10: F5D6628C205011EB9EC2AA46C4F9AE02.roa (hash: GF1Q9WC2AFPyPxrIdnDx0DujlM4kUztE9+LDlhci/E4=)
                          11: 82CA92C4703A11EBB9A2D47AC4F9AE02.roa (hash: nyqS5eXZEzcdM+pwx4cIcrVn+dhu/AnRzLZWpHkKUok=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl
                          rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Mar 2026 20:37:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2263 (0x8d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B625F, serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480
        Validity
            Not Before: Mar 14 20:37:06 2026 GMT
            Not After : Mar 21 20:37:06 2026 GMT
        Subject: CN=69b5c6f3-5d22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8e:9b:b9:fc:1a:80:60:ef:ad:99:30:6a:98:
                    e1:2d:38:55:63:ae:52:0d:ff:09:52:72:e7:9c:2a:
                    90:0c:6f:7d:c3:56:ad:87:f8:b2:d3:bf:df:e6:e0:
                    2a:e2:85:c4:3c:f5:9d:0c:74:d6:61:02:b3:f8:36:
                    31:03:78:55:58:86:35:3a:8a:a7:73:3b:57:19:e5:
                    b1:7c:04:cd:1d:ef:ca:50:8c:c4:d6:3e:69:2e:f3:
                    3e:ef:4e:cb:e4:5c:6b:f1:85:4e:db:7a:a3:e7:74:
                    29:a5:44:02:f6:c9:e7:ba:3c:c3:81:07:0f:12:ce:
                    91:55:be:f2:82:44:e0:02:7f:df:10:24:e3:f3:d9:
                    11:7d:8a:f7:e4:04:d4:e2:9e:5d:f1:5f:ad:58:43:
                    6e:bc:27:83:5a:5c:99:9d:95:d1:f2:c3:4e:a8:4b:
                    9b:d4:a2:f6:5c:08:98:98:23:ff:1b:52:43:a0:29:
                    b1:62:45:1e:94:a2:f4:b2:da:cb:b9:81:81:2d:96:
                    6d:51:30:e6:b5:ca:bf:a9:4c:37:a7:f9:67:fe:4f:
                    ef:b6:50:c2:35:3e:9c:97:43:bb:7f:37:fa:0e:df:
                    7a:c8:5b:c2:0e:fc:c5:98:0b:35:f1:40:c0:ad:1a:
                    88:4b:bd:18:bc:00:40:65:be:01:30:59:25:b6:e3:
                    c5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:8B:B9:BA:38:AF:DE:56:9E:BB:34:0C:68:15:38:23:68:16:01:AF
            X509v3 Authority Key Identifier:
                keyid:E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:c1:5a:a0:ad:fe:d0:ed:8e:39:12:33:fb:dd:97:01:bb:94:
         c3:8d:ce:cc:c8:c7:f4:8d:ac:59:cc:3f:07:31:d8:70:49:d6:
         b5:61:81:96:be:b3:d0:3d:92:29:fd:d8:ea:5a:46:0a:55:35:
         31:07:f9:14:74:69:42:3e:18:27:72:50:54:00:cd:ba:c4:31:
         68:f9:9a:51:0b:07:a2:c5:66:b2:45:ec:59:30:29:12:42:bb:
         9d:dd:c2:ed:be:b1:bf:f8:37:d9:8a:6b:ef:c2:24:37:64:4a:
         de:6a:bc:f5:9e:dc:49:25:b3:34:f8:f8:63:bc:c2:44:82:ac:
         33:b6:c0:d7:1b:45:5b:5c:d2:f9:e0:98:ad:89:a6:9c:97:d4:
         06:af:83:c9:bf:f9:74:05:cd:08:c1:a9:2d:fb:1a:1c:bc:86:
         b3:31:6b:86:67:f3:17:dd:c4:7c:be:fa:81:c9:fb:6d:4a:69:
         35:2f:f1:24:af:3e:8f:04:83:69:f1:70:9a:b2:e7:ae:e3:80:
         88:26:60:b5:b6:b2:24:04:a4:8b:c8:2b:c4:8a:85:e8:cc:5c:
         32:19:bd:53:f5:46:47:d5:94:d1:9e:6d:85:f5:b8:c5:45:a1:
         e0:dd:16:10:2e:1f:b1:3c:df:1b:32:99:74:0f:22:e6:c7:c2:
         96:4e:4f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 13:44:36 2026 by rpki-client