Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/VmpvNEQKySle2KAC1QSfV0zxbIg.mft
File:                     VmpvNEQKySle2KAC1QSfV0zxbIg.mft (raw, json)
Hash identifier:          5/j6LsAFVtBF/ni05ACOCw/iPKMwSPRs+jnG8E4DoeU=
Subject key identifier:   CA:3D:11:F9:74:5B:00:12:C2:46:9F:E6:31:F4:FD:A8:7D:65:A6:52
Authority key identifier: 56:6A:6F:34:44:0A:C9:29:5E:D8:A0:02:D5:04:9F:57:4C:F1:6C:88
Certificate issuer:       /CN=A91FA64C/serialNumber=566A6F34440AC9295ED8A002D5049F574CF16C88
Certificate serial:       0234
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VmpvNEQKySle2KAC1QSfV0zxbIg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/VmpvNEQKySle2KAC1QSfV0zxbIg.mft
Manifest number:          0227
Signing time:             Sun 05 Apr 2026 02:21:34 +0000
Manifest this update:     Sun 05 Apr 2026 02:21:33 +0000
Manifest next update:     Sun 12 Apr 2026 02:21:33 +0000
Files and hashes:         1: VmpvNEQKySle2KAC1QSfV0zxbIg.crl (hash: ++aUPBhPznhEYm+s5VBekTrXUqL5Ula+hCrfquaO94Q=)
                          2: FFCE072E2B8111EE9BDEC079C4F9AE02.roa (hash: vlYY+5TtJ2iPuvI4KrqFuTWbHS6vrSjRQ3Wr/LyP/X8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/VmpvNEQKySle2KAC1QSfV0zxbIg.crl
                          rsync://rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/VmpvNEQKySle2KAC1QSfV0zxbIg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VmpvNEQKySle2KAC1QSfV0zxbIg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 02:21:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 564 (0x234)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA64C, serialNumber=566A6F34440AC9295ED8A002D5049F574CF16C88
        Validity
            Not Before: Apr  5 02:21:33 2026 GMT
            Not After : Apr 12 02:21:33 2026 GMT
        Subject: CN=69d1c72e-60f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e1:d0:c7:d3:2e:b5:2c:d8:df:7e:36:41:5c:
                    ee:8e:35:09:12:b1:17:6e:31:74:fb:88:14:af:00:
                    c0:f8:9b:d8:bf:16:9a:a5:e7:5c:81:1c:46:6f:5a:
                    02:61:ff:00:ed:71:ac:08:00:62:ab:a8:76:57:3a:
                    d9:1a:28:12:4e:97:a5:66:4c:54:07:fb:ab:a3:a9:
                    20:8f:76:8c:e6:11:12:86:f4:a7:7f:11:f1:ed:76:
                    04:8c:72:0a:69:02:a3:35:ff:6b:54:c2:f6:e2:23:
                    ad:a1:ba:1e:55:9d:7b:b1:35:29:73:fa:12:fd:e8:
                    a3:6d:89:ea:36:7b:d1:56:ad:1f:5d:0c:1f:53:d0:
                    1d:28:63:4a:5b:59:dd:73:75:4b:9a:31:ff:3e:c5:
                    63:1f:09:42:ed:9d:f7:bb:64:fd:ca:90:9a:f2:56:
                    4e:c3:9b:4c:34:d4:d7:64:99:9c:95:8a:3e:19:83:
                    e1:85:0a:bb:c1:d4:8f:9d:4d:30:fd:5c:db:be:4b:
                    9d:bf:6d:0c:b3:f7:65:f9:cd:79:cd:cf:3c:fa:da:
                    9c:3a:0a:57:de:f9:4b:32:b4:25:ef:cf:ff:b3:92:
                    cd:c0:b4:95:55:95:03:f1:61:19:e3:2e:fd:62:c2:
                    02:4c:bf:63:47:59:a3:d7:99:e3:32:7f:00:4a:c3:
                    af:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:3D:11:F9:74:5B:00:12:C2:46:9F:E6:31:F4:FD:A8:7D:65:A6:52
            X509v3 Authority Key Identifier:
                keyid:56:6A:6F:34:44:0A:C9:29:5E:D8:A0:02:D5:04:9F:57:4C:F1:6C:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/VmpvNEQKySle2KAC1QSfV0zxbIg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VmpvNEQKySle2KAC1QSfV0zxbIg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/VmpvNEQKySle2KAC1QSfV0zxbIg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:1e:99:5e:8d:d4:93:11:50:60:22:64:4b:d4:9e:88:42:8f:
         7e:08:40:b9:48:25:b5:0d:61:2a:04:84:39:5c:ef:15:b4:d9:
         c8:fb:1b:9f:1e:79:ff:94:e9:db:a4:2a:66:1a:72:6a:62:55:
         69:da:7a:31:48:f4:2c:b8:7f:b8:59:fc:86:ce:74:86:36:f3:
         76:14:0e:75:53:ce:73:20:8c:87:cf:8a:c3:10:06:3f:f7:2e:
         1e:b1:76:bc:99:b5:af:6b:f9:81:58:9d:fe:3c:ea:ea:08:5f:
         be:c7:67:af:b7:ea:38:82:2d:40:b0:03:84:a7:84:7d:e0:3d:
         6e:24:d8:cb:31:e9:93:81:06:2c:a2:db:c5:12:1a:b3:fa:88:
         fb:89:03:e1:f9:3c:a6:6b:b8:1a:70:43:fe:d7:2e:ce:20:75:
         27:8b:63:05:02:ae:e7:df:b3:2c:6f:72:f7:b7:d1:f5:d8:67:
         12:b3:1b:de:ee:49:fc:2e:df:f1:88:86:bc:d0:42:06:3e:ab:
         d6:b0:14:d1:68:d4:3d:78:bb:20:e9:d7:1d:50:79:fa:cf:93:
         ef:87:f2:eb:b5:8a:1c:13:59:91:28:2d:64:42:7a:52:35:a7:
         b6:2b:7c:da:3f:8a:1f:6b:b3:bf:a9:d3:72:6b:ae:fc:60:a1:
         43:0a:b9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:51:48 2026 by rpki-client