Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
File:                     voUqizt-pcWsWlKqy4UqAaTN0II.mft (raw, json)
Hash identifier:          sHOinD9e5MhIPgcNMfkbYTB8GjzavE9NtC+CqxQzomE=
Subject key identifier:   0E:EC:65:37:DF:48:00:B7:3F:4B:F8:2A:94:72:9F:0F:F6:97:A7:A2
Authority key identifier: BE:85:2A:8B:3B:7E:A5:C5:AC:5A:52:AA:CB:85:2A:01:A4:CD:D0:82
Certificate issuer:       /CN=A91FF428/serialNumber=BE852A8B3B7EA5C5AC5A52AACB852A01A4CDD082
Certificate serial:       0500
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
Manifest number:          04E1
Signing time:             Thu 12 Mar 2026 23:25:47 +0000
Manifest this update:     Thu 12 Mar 2026 23:25:46 +0000
Manifest next update:     Thu 19 Mar 2026 23:25:46 +0000
Files and hashes:         1: voUqizt-pcWsWlKqy4UqAaTN0II.crl (hash: a33MEEHdT6uerJGbkOrylRqmdJVAzX+9Ob5pYuxmGyU=)
                          2: 14F55DEAB7E611EF9B9D9F6DC4F9AE02.roa (hash: WdNld5DHUPVbC8ourF5Ae6KnkYpsmFk/aie/RVL4jQw=)
                          3: D717B9F0B7E511EFB5F63E6DC4F9AE02.roa (hash: KrKOHKApCfIlvSNW0s+tbRggHCf468HmTluYQjo8tCk=)
                          4: D254B444679111EF8A2C9062C4F9AE02.roa (hash: GVjvFKgHSY78CpYCc98Qtcp6gxw2fNKpFQ7HCML9xSg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.crl
                          rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 23:25:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1280 (0x500)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF428, serialNumber=BE852A8B3B7EA5C5AC5A52AACB852A01A4CDD082
        Validity
            Not Before: Mar 12 23:25:46 2026 GMT
            Not After : Mar 19 23:25:46 2026 GMT
        Subject: CN=69b34b7b-7dc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:09:fb:3e:a5:6c:10:a9:67:13:74:75:7c:82:
                    44:9c:8d:a0:d1:ba:1f:1d:66:07:2a:e9:62:40:65:
                    7a:b8:1d:8a:73:6a:f5:62:0c:48:5d:5f:a8:57:f5:
                    49:a9:ac:68:b1:80:6b:1b:4c:47:5d:25:27:58:23:
                    64:23:02:8f:f8:af:a6:31:34:76:c0:b4:c3:ea:5f:
                    c4:6b:7d:42:83:dd:8b:6d:08:15:9a:18:b7:69:ad:
                    87:6b:88:2d:2b:0e:22:4a:32:0e:ed:29:63:94:1e:
                    24:e7:98:52:b5:96:ed:e4:02:42:8d:85:d2:e3:83:
                    9e:ab:7c:1d:38:a5:17:7b:8f:ba:0e:e9:c1:7b:5f:
                    32:e2:cd:cb:7f:ac:7b:d1:d5:02:7a:9c:e3:9d:0c:
                    2c:ed:fe:ec:fe:9e:e1:0a:5b:e1:ab:0e:20:19:13:
                    fe:f9:03:27:f9:b8:30:62:6e:4f:9c:46:e0:0d:88:
                    6d:36:4d:13:1c:8a:cf:43:2f:fe:13:e9:d7:6c:88:
                    83:6b:ba:76:3d:bb:e8:08:c9:bb:e2:c7:f9:b4:47:
                    77:2e:6e:36:d9:f5:04:83:3d:4f:6f:ff:4c:ad:b4:
                    95:fb:a8:8b:4b:5c:23:76:e2:09:61:20:51:a5:13:
                    33:5a:aa:80:0f:40:b2:ff:71:8a:29:21:1a:be:63:
                    42:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:EC:65:37:DF:48:00:B7:3F:4B:F8:2A:94:72:9F:0F:F6:97:A7:A2
            X509v3 Authority Key Identifier:
                keyid:BE:85:2A:8B:3B:7E:A5:C5:AC:5A:52:AA:CB:85:2A:01:A4:CD:D0:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:3e:42:cd:e3:8f:c3:b3:5d:57:60:07:30:94:75:4f:ea:4a:
         aa:ed:99:a4:38:80:4d:48:9a:9e:1e:6c:a3:1b:1b:b4:ad:90:
         4f:c8:88:ab:8a:ec:a3:0c:ad:cc:c5:a7:c6:14:8d:c3:c2:4b:
         75:69:e0:13:f1:c5:69:ff:a4:b0:b2:ed:7f:ca:64:55:e1:d0:
         a9:9b:c2:97:01:05:73:43:5a:a8:6e:b8:27:0e:29:f3:30:3a:
         3b:24:4d:2b:98:8f:28:b1:e5:7b:1e:a5:0d:11:fc:e1:08:f2:
         18:95:26:8c:35:04:9a:d1:4c:75:e0:46:0c:cf:a7:82:a1:69:
         7b:2b:24:90:81:10:5b:21:a5:ac:67:81:ab:60:54:c6:fd:62:
         54:3b:ee:29:b6:aa:27:a6:91:0c:27:e7:0c:29:2d:7f:4a:0d:
         73:03:0e:00:df:21:c8:b6:41:2b:08:8d:db:23:5f:d1:44:ef:
         38:44:de:84:37:94:bb:16:ba:27:f2:f8:6e:67:64:ce:50:65:
         43:d5:4e:8f:42:10:68:1c:5f:03:d0:d5:90:40:f5:0e:d6:3d:
         f0:a0:e4:19:1c:f2:06:ae:4e:45:c7:91:ba:e5:14:bb:7e:68:
         cc:61:a5:6b:16:26:ef:be:b9:c4:69:7b:fe:69:59:ad:68:e0:
         1d:d5:ac:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 05:42:49 2026 by rpki-client