Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft
File:                     vkY_wZGbQUKyOCgTgn-3FtbukoM.mft (raw, json)
Hash identifier:          r8O1mgDCnXc3uBbXAMJ34/UZzFkZs9V74AkBwxULv2M=
Subject key identifier:   C0:FC:AF:C0:B5:B9:86:5C:9C:C1:05:94:EC:A3:68:C5:F5:B9:5A:DC
Authority key identifier: BE:46:3F:C1:91:9B:41:42:B2:38:28:13:82:7F:B7:16:D6:EE:92:83
Certificate issuer:       /CN=A91D40BF/serialNumber=BE463FC1919B4142B2382813827FB716D6EE9283
Certificate serial:       0816
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkY_wZGbQUKyOCgTgn-3FtbukoM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft
Manifest number:          07FE
Signing time:             Sun 26 Apr 2026 21:06:49 +0000
Manifest this update:     Sun 26 Apr 2026 21:06:48 +0000
Manifest next update:     Sun 03 May 2026 21:06:48 +0000
Files and hashes:         1: vkY_wZGbQUKyOCgTgn-3FtbukoM.crl (hash: aFhgx9OG/ECrm2XEIPqtLW8VhA//ILnMiTkO1cCiw6o=)
                          2: 2798B9A6BABA11EB8A51C234C4F9AE02.roa (hash: na85BHLSVJrfFZCA8hXSu9PL6apmvY8kB85ybE30XtQ=)
                          3: 58E4A6E8B60811F0AF40B71EC4F9AE02.roa (hash: NWtw2IjiZwHzr7Ei9IeYyzwE1/5bXF8AdCPLNALzVv4=)
                          4: 28543AA0BABA11EB8A51C234C4F9AE02.roa (hash: MXT5jcze9muAxIxhhOptgI/97lbgIlxVB1859ZI8SAI=)
                          5: ACEBC29CC5B911EBB41FAF2DC4F9AE02.roa (hash: hEvbM2TDCEqoCuZAHKQXjeGPqQdN31EzYyfXKDjCAtg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.crl
                          rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkY_wZGbQUKyOCgTgn-3FtbukoM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 03 May 2026 21:06:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2070 (0x816)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D40BF, serialNumber=BE463FC1919B4142B2382813827FB716D6EE9283
        Validity
            Not Before: Apr 26 21:06:48 2026 GMT
            Not After : May  3 21:06:48 2026 GMT
        Subject: CN=69ee7e69-9cdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a6:84:99:f3:f4:1f:60:05:85:be:bf:82:e9:
                    f7:74:dc:f6:31:db:47:bd:fc:5c:cf:80:27:e9:7c:
                    88:c8:a4:ea:01:b2:81:e7:ff:ea:78:b3:d7:77:88:
                    cc:44:c7:5d:2a:4c:06:90:8c:38:05:d7:94:d1:8e:
                    da:50:9b:0f:0e:f8:79:34:17:65:99:a3:74:54:38:
                    b0:e2:33:31:e2:b8:e5:8f:82:c5:c1:f7:7a:0e:a2:
                    72:ac:ea:3e:a1:a9:df:ec:d0:db:0b:70:35:f0:7a:
                    33:de:fa:16:49:cc:21:c8:be:37:c2:52:bc:46:d3:
                    f6:92:f3:8b:7d:39:40:95:b9:aa:e8:df:ea:14:b0:
                    b6:fc:3f:d4:e3:81:7d:26:fc:06:32:91:a7:84:3d:
                    37:e0:3f:67:4e:f9:75:e6:f4:ca:db:d6:10:43:4f:
                    15:88:bc:53:14:4c:71:97:d1:b7:bf:1d:a7:c8:ff:
                    69:f2:64:55:aa:cd:cb:65:80:8f:63:ac:f1:14:5d:
                    44:59:16:7f:13:d0:10:ba:b8:cc:5f:ed:e6:fd:c4:
                    13:ab:1b:f2:e1:9a:96:38:c4:fe:a7:33:d2:c4:0f:
                    12:f8:cc:53:55:6a:64:db:bc:8b:f2:8e:6e:b1:1b:
                    d8:cd:0e:5e:65:e1:88:56:86:b7:96:20:29:8d:47:
                    77:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:FC:AF:C0:B5:B9:86:5C:9C:C1:05:94:EC:A3:68:C5:F5:B9:5A:DC
            X509v3 Authority Key Identifier:
                keyid:BE:46:3F:C1:91:9B:41:42:B2:38:28:13:82:7F:B7:16:D6:EE:92:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkY_wZGbQUKyOCgTgn-3FtbukoM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:ca:d6:f8:c4:e8:54:44:11:66:7e:68:45:ff:22:0d:90:74:
         f4:ba:c6:e6:b4:28:66:b9:22:78:c7:08:7f:ef:d1:2e:a1:5f:
         73:9f:4c:ae:82:f6:97:90:9d:71:19:50:a1:1c:47:cc:b8:f6:
         18:3a:71:f2:17:62:da:aa:56:00:6e:03:47:1b:af:e9:30:08:
         6f:04:0b:f7:07:73:32:ba:a9:b4:b4:2f:59:62:de:2a:dd:bc:
         c0:34:61:01:87:76:28:bf:63:2d:b3:e8:de:5a:d2:62:71:dc:
         9d:ab:2b:c9:f0:e1:a2:eb:62:72:1f:8d:f8:ff:f2:87:fa:04:
         b2:3b:1d:d4:4d:72:fd:1e:d5:2b:7b:47:08:47:0a:4e:89:32:
         0f:52:42:73:be:14:ef:99:c4:78:cc:14:d6:78:28:41:af:ad:
         31:5f:a9:13:d4:0d:af:d7:04:c9:53:90:19:31:bb:5d:ee:a9:
         71:8d:69:2e:3f:84:ce:ec:15:05:67:f4:b4:88:26:9e:77:01:
         af:2b:6e:57:c7:0a:95:2f:63:fe:da:bc:f0:dd:1d:b0:7c:07:
         cb:da:ec:31:0f:1a:37:ae:32:fc:bb:be:7e:a0:b1:72:c6:d2:
         aa:b4:1f:c7:38:6c:65:f1:ed:78:5d:23:c2:3e:3d:dc:2f:43:
         eb:84:78:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:13:33 2026 by rpki-client