Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.mft
File:                     vUxEHwLHrdQvpiQugzHZP1nlGDo.mft (raw, json)
Hash identifier:          9WEE5xWoehb6d4J128dI69A2Dvrn4G+IsEOX34aLO98=
Subject key identifier:   37:ED:B8:30:A7:BD:0F:CB:07:DA:7F:38:0E:6F:69:34:90:D8:3A:38
Authority key identifier: BD:4C:44:1F:02:C7:AD:D4:2F:A6:24:2E:83:31:D9:3F:59:E5:18:3A
Certificate issuer:       /CN=A91C67F9/serialNumber=BD4C441F02C7ADD42FA6242E8331D93F59E5183A
Certificate serial:       0294
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUxEHwLHrdQvpiQugzHZP1nlGDo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.mft
Manifest number:          0286
Signing time:             Thu 21 May 2026 02:00:28 +0000
Manifest this update:     Thu 21 May 2026 02:00:27 +0000
Manifest next update:     Thu 28 May 2026 02:00:27 +0000
Files and hashes:         1: vUxEHwLHrdQvpiQugzHZP1nlGDo.crl (hash: a2WkveR2VDWzMpzSsCX9mGvS/uFb7NxLdUrDU2iZ8Qc=)
                          2: 7A5433D6A37811F083057A2CC4F9AE02.roa (hash: FANmQvsw9bCwAwyqdXDJrppPXNeZUQEnf9l9y1Ou+Zc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.crl
                          rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUxEHwLHrdQvpiQugzHZP1nlGDo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 02:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 660 (0x294)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C67F9, serialNumber=BD4C441F02C7ADD42FA6242E8331D93F59E5183A
        Validity
            Not Before: May 21 02:00:27 2026 GMT
            Not After : May 28 02:00:27 2026 GMT
        Subject: CN=6a0e673c-fe88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e2:62:3b:83:ff:4d:74:50:cf:66:73:a3:c3:
                    c0:e3:5c:34:ac:4b:64:db:c8:70:4a:3a:b0:51:fb:
                    b1:d1:2c:ef:b7:e7:50:65:50:06:28:93:14:5e:c6:
                    d4:62:61:4a:4c:49:21:b6:da:da:5a:10:a0:aa:a6:
                    8b:44:74:90:85:fe:08:6e:4f:30:87:49:03:cf:04:
                    57:5a:ee:31:c1:bb:34:f1:43:06:0a:e0:88:dc:47:
                    dd:99:35:f2:2a:53:e2:d1:a1:4b:24:c4:d0:e7:e2:
                    6f:c0:76:87:aa:d9:96:52:71:ed:0c:91:e7:2f:23:
                    f0:2a:18:c4:d5:13:d0:bc:3f:e1:c8:36:86:9a:72:
                    67:38:d4:b9:5e:32:7e:67:a7:c0:10:f0:b2:35:0d:
                    66:c0:fd:92:ef:6d:5b:4a:93:81:29:55:78:2c:bd:
                    53:c2:bd:fd:1a:17:a8:b6:a6:fa:74:f8:d6:de:ef:
                    b2:d2:16:80:85:7f:de:1c:2d:d7:7f:ed:58:14:c6:
                    df:6b:88:b8:35:cb:14:e6:9f:70:75:6a:f7:11:42:
                    b3:d7:a4:95:d9:3f:63:d5:88:c2:a4:8b:da:7d:19:
                    c7:74:4b:49:2c:24:9b:c0:a3:c6:f8:3a:fd:56:ef:
                    05:6e:63:10:0a:a7:6a:ff:61:3d:d1:c4:8f:f0:52:
                    68:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:ED:B8:30:A7:BD:0F:CB:07:DA:7F:38:0E:6F:69:34:90:D8:3A:38
            X509v3 Authority Key Identifier:
                keyid:BD:4C:44:1F:02:C7:AD:D4:2F:A6:24:2E:83:31:D9:3F:59:E5:18:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUxEHwLHrdQvpiQugzHZP1nlGDo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:0f:0e:14:89:ce:fe:23:7b:00:b3:fa:24:86:c4:4c:ce:85:
         b8:82:02:a1:50:3d:04:33:85:e4:33:4d:75:95:ec:db:ab:ce:
         ee:86:7d:71:da:ba:22:15:35:e8:bf:65:5e:67:72:64:e2:3c:
         e9:87:96:a1:15:b9:9d:55:82:fb:79:11:f7:c6:a5:64:33:45:
         ce:99:39:b5:3f:63:79:a8:40:d9:99:d9:dc:fc:b8:61:f1:a3:
         16:fb:77:08:47:c9:db:27:8c:3d:6c:f7:a2:db:11:b3:d3:8d:
         9b:1c:7c:52:cb:49:ca:c4:cd:26:39:6a:ca:aa:ca:8e:cf:c8:
         f9:a2:38:33:cb:20:c0:10:f2:98:d1:c9:30:6d:5b:d5:b0:6f:
         85:a3:26:45:7d:b1:0f:3d:4a:38:68:52:7b:61:b7:21:57:a4:
         67:14:53:93:7d:6d:86:d2:3d:fb:3d:b4:81:d1:29:a8:d9:15:
         6e:6e:ed:92:83:cd:47:dd:0b:b2:ea:15:e6:38:f0:85:41:24:
         7e:94:63:e1:e0:29:df:66:9d:3f:05:d3:f5:db:50:ae:14:24:
         94:3e:60:29:ae:e9:27:c2:ab:1a:92:df:b5:61:5b:30:11:a3:
         c4:16:d4:91:5f:28:3d:fc:52:90:cc:bc:35:7a:56:7e:70:5d:
         cf:c8:2e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:14:37 2026 by rpki-client