Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.mft
File:                     0VLfcuXWwcb-QrZCN3w7CIEobec.mft (raw, json)
Hash identifier:          tvDp498QHpU/gZXlg5mVQ1BH3rF9RZaqt3TCrZ7Y+DU=
Subject key identifier:   C8:21:49:04:80:46:7C:75:53:A1:01:1B:C7:CE:3F:25:A6:AB:CE:3D
Authority key identifier: D1:52:DF:72:E5:D6:C1:C6:FE:42:B6:42:37:7C:3B:08:81:28:6D:E7
Certificate issuer:       /CN=A91C0FAC/serialNumber=D152DF72E5D6C1C6FE42B642377C3B0881286DE7
Certificate serial:       05BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0VLfcuXWwcb-QrZCN3w7CIEobec.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.mft
Manifest number:          05B8
Signing time:             Sat 04 Apr 2026 22:54:14 +0000
Manifest this update:     Sat 04 Apr 2026 22:54:13 +0000
Manifest next update:     Sat 11 Apr 2026 22:54:13 +0000
Files and hashes:         1: 0VLfcuXWwcb-QrZCN3w7CIEobec.crl (hash: u/tJsVUJwR13C4rFyuiAnDh1fBi18zuRkd1AboaL0AA=)
                          2: 4C2E7A3C049B11ECAC7E5D0DC4F9AE02.roa (hash: n3COBaPKKrvr/uYmveuWkBO4Ag5aH+qxiVkH2APkXhA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.crl
                          rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0VLfcuXWwcb-QrZCN3w7CIEobec.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 22:54:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1471 (0x5bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0FAC, serialNumber=D152DF72E5D6C1C6FE42B642377C3B0881286DE7
        Validity
            Not Before: Apr  4 22:54:13 2026 GMT
            Not After : Apr 11 22:54:13 2026 GMT
        Subject: CN=69d19696-86d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b8:8f:32:48:94:c8:87:9a:cd:c9:b6:af:da:
                    fc:7f:f5:22:46:d8:ec:1f:2b:f1:cc:ad:f4:e2:b0:
                    1a:7b:88:f3:25:da:c5:ce:4a:84:03:d0:9c:3f:0d:
                    13:bd:15:ba:5d:ab:2b:a1:87:2f:df:ae:bb:1c:e3:
                    0a:51:d3:d1:45:66:fa:c5:5e:a0:a8:5e:67:d5:e0:
                    1e:7b:3f:b3:1e:92:ca:92:f9:f4:05:35:c8:44:e7:
                    82:ea:ca:d5:92:75:97:74:34:ec:c0:97:f5:4a:b4:
                    59:d5:99:bc:e9:d8:56:ec:2f:e1:db:c4:34:02:fb:
                    6b:68:21:64:cc:71:0e:95:c0:49:78:ff:76:70:ff:
                    96:60:f3:ef:c2:7e:95:3d:6c:33:09:86:8f:f2:0e:
                    29:5e:32:c4:2d:70:87:a3:1f:f5:5b:be:64:f0:d0:
                    b5:86:dd:ed:f1:48:ac:25:c1:1e:6b:15:c9:80:2a:
                    ea:de:4e:a5:4c:37:97:64:f3:01:f1:95:70:d2:f3:
                    6c:55:6f:bd:4b:c6:f3:e8:be:26:19:13:0d:fe:db:
                    59:3b:0e:c6:89:f5:95:c0:aa:78:b3:80:88:11:26:
                    59:a2:18:19:89:79:20:f5:df:e6:e3:3a:41:4d:5f:
                    17:53:90:91:85:de:b6:2f:62:b8:36:18:f9:69:71:
                    00:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:21:49:04:80:46:7C:75:53:A1:01:1B:C7:CE:3F:25:A6:AB:CE:3D
            X509v3 Authority Key Identifier:
                keyid:D1:52:DF:72:E5:D6:C1:C6:FE:42:B6:42:37:7C:3B:08:81:28:6D:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0VLfcuXWwcb-QrZCN3w7CIEobec.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:95:b2:24:94:02:c3:1a:d3:8e:c2:83:09:45:a3:9a:a9:5b:
         a3:9f:ed:5d:4c:02:13:92:1a:67:7e:a9:ae:11:09:22:16:51:
         53:2a:36:ef:dc:3b:b7:b7:a4:e9:60:fb:6f:30:d0:ea:3b:24:
         b5:73:d9:ae:08:58:50:8f:9d:08:e8:4c:f3:6f:92:4c:b8:2a:
         3d:f3:af:5f:35:d0:cf:2c:4b:a1:4d:86:a3:7e:a1:34:5a:85:
         45:e6:7c:87:79:45:41:d7:75:ae:d0:46:3a:0d:83:4a:28:5c:
         9f:17:21:cb:78:5d:10:15:ea:b1:c1:eb:36:1f:46:ea:b8:ce:
         8e:bc:21:c9:5a:75:7e:b7:e2:db:7c:db:9a:6b:d3:bc:a3:2e:
         89:47:b7:81:9d:f4:1b:86:8d:a7:fd:40:3f:3b:92:73:45:d1:
         b8:c7:60:77:19:14:dd:5b:65:7a:54:a2:78:56:61:5f:ab:4d:
         57:5f:35:66:b2:91:a1:45:02:71:3b:b9:01:47:fd:2a:4d:bc:
         f2:a6:c8:5d:a0:17:d1:10:40:73:06:64:06:a4:14:85:50:e3:
         4d:3d:66:07:16:70:87:fa:02:cc:fd:b3:c5:1f:38:3f:1f:eb:
         63:d8:00:f7:e4:85:99:36:8c:e4:d5:d6:33:8e:27:71:c6:7f:
         32:d8:32:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:28:59 2026 by rpki-client