Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft
File:                     vm13JvnXOebsmvk0fs7LQhevej8.mft (raw, json)
Hash identifier:          KMth57TXp1122wOotmkiS5fDTj3H84/XeZySwwju3uc=
Subject key identifier:   E3:60:0A:62:7D:A9:97:15:8D:D3:6D:33:C7:C0:EE:F1:4C:87:8D:B5
Authority key identifier: BE:6D:77:26:F9:D7:39:E6:EC:9A:F9:34:7E:CE:CB:42:17:AF:7A:3F
Certificate issuer:       /CN=A91ED35E/serialNumber=BE6D7726F9D739E6EC9AF9347ECECB4217AF7A3F
Certificate serial:       01B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vm13JvnXOebsmvk0fs7LQhevej8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft
Manifest number:          01AB
Signing time:             Sun 05 Apr 2026 03:34:22 +0000
Manifest this update:     Sun 05 Apr 2026 03:34:21 +0000
Manifest next update:     Sun 12 Apr 2026 03:34:21 +0000
Files and hashes:         1: vm13JvnXOebsmvk0fs7LQhevej8.crl (hash: rNTF6+n0YEaaaMxDrC9NNAPYHYu14YNSnJX8kj4xTGM=)
                          2: 3AE10060B0F111EE9727201AC4F9AE02.roa (hash: C6Cummg9Sl6RCDS2LtUiMc8wWWKvQYCjdXXfFdueSWs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.crl
                          rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vm13JvnXOebsmvk0fs7LQhevej8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 03:34:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 433 (0x1b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED35E, serialNumber=BE6D7726F9D739E6EC9AF9347ECECB4217AF7A3F
        Validity
            Not Before: Apr  5 03:34:21 2026 GMT
            Not After : Apr 12 03:34:21 2026 GMT
        Subject: CN=69d1d83e-d8f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b5:1d:b3:72:d3:9d:29:54:a2:46:10:6e:90:
                    19:f6:0a:da:cb:ef:37:81:0e:4e:bb:0c:bc:f8:6c:
                    66:99:a7:03:15:79:a2:aa:4a:4b:b0:18:cd:31:8a:
                    19:f2:af:d5:37:ab:01:b4:08:d4:ed:9e:78:86:ca:
                    fc:c3:09:9f:bf:b7:19:60:6b:88:11:fe:5e:13:e4:
                    70:80:32:fd:5c:44:65:08:06:a2:17:3f:e9:a9:cd:
                    d9:1f:65:68:ab:e6:ff:42:1e:e9:a5:19:db:83:bf:
                    33:54:0a:0f:ed:99:8a:1f:8d:27:c4:7b:6a:1a:36:
                    1d:38:c5:20:ba:f1:0c:43:34:04:08:3a:cc:7b:ac:
                    bc:0a:6b:59:12:7e:44:64:f9:8f:e1:f2:c0:2c:8b:
                    70:72:c9:49:25:a9:ce:59:56:0c:0d:3c:be:fb:3c:
                    6c:a8:0d:4b:ef:d7:f1:37:08:f7:b2:58:11:d2:49:
                    4a:f0:8b:33:c8:6d:7a:e3:95:25:45:36:87:1b:cf:
                    6f:30:ce:cb:b8:77:e9:92:f6:84:08:f9:75:a4:ce:
                    a5:6c:7f:b0:a4:53:3f:bd:3d:17:65:e5:09:91:1c:
                    03:80:a0:b0:ee:c1:65:61:d3:d0:11:74:c4:37:58:
                    1d:b5:34:c8:14:74:5b:60:49:0e:ff:93:7b:31:bc:
                    b9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:60:0A:62:7D:A9:97:15:8D:D3:6D:33:C7:C0:EE:F1:4C:87:8D:B5
            X509v3 Authority Key Identifier:
                keyid:BE:6D:77:26:F9:D7:39:E6:EC:9A:F9:34:7E:CE:CB:42:17:AF:7A:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vm13JvnXOebsmvk0fs7LQhevej8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:c1:8b:9c:a7:b5:87:2b:31:2d:c5:e6:c3:9a:c5:15:6f:a0:
         2e:60:2b:4c:b0:77:3b:16:24:4a:03:aa:8a:a7:38:22:a1:55:
         45:b5:62:7b:92:7d:e0:0c:e5:63:e8:e4:c2:8a:e5:70:1e:b6:
         83:8e:88:c5:c6:b3:2f:fd:30:fe:2d:cd:e2:f9:2e:b9:4b:00:
         d4:a7:47:3f:03:7c:3f:a9:71:96:56:27:ad:52:40:d6:aa:f8:
         1d:b1:b9:eb:a4:3b:58:fc:6a:c8:9e:c1:78:0e:ad:07:dd:ba:
         83:5b:37:29:7f:66:4e:b1:c3:18:ba:3a:27:58:83:02:b3:aa:
         9c:61:70:1f:0c:90:bc:f9:36:55:25:ea:09:85:8a:b6:69:c2:
         a5:7c:a3:91:c6:cd:11:3e:a8:bc:93:1d:6c:99:b8:26:15:af:
         88:7a:c6:56:7d:fe:20:13:d6:b6:40:65:0e:7c:a7:c6:4a:03:
         7d:99:c1:d5:6a:cf:de:4a:7e:a7:75:e0:8f:46:81:ed:44:6d:
         b9:ed:8d:0c:c0:7c:1b:47:30:8f:20:44:a9:87:2c:e8:14:d9:
         8d:fb:c4:15:fb:60:ea:31:d8:4e:f2:dc:5a:c3:e4:19:75:47:
         df:36:15:04:1f:00:6d:04:83:59:a7:65:44:ea:b6:56:97:68:
         72:5d:6f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:50:25 2026 by rpki-client