Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
File:                     voUqizt-pcWsWlKqy4UqAaTN0II.mft (raw, json)
Hash identifier:          W8Ws5y8/xmn7BlDNqmTEoy2oLQNxX5v5lNw+JyN0t4A=
Subject key identifier:   46:8D:21:9C:27:AB:E4:0A:D2:A8:FF:F6:A1:EB:2F:98:1C:36:5F:65
Authority key identifier: BE:85:2A:8B:3B:7E:A5:C5:AC:5A:52:AA:CB:85:2A:01:A4:CD:D0:82
Certificate issuer:       /CN=A91FF428/serialNumber=BE852A8B3B7EA5C5AC5A52AACB852A01A4CDD082
Certificate serial:       0563
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
Manifest number:          0542
Signing time:             Thu 10 Sep 2026 23:25:36 +0000
Manifest this update:     Thu 10 Sep 2026 23:25:35 +0000
Manifest next update:     Thu 17 Sep 2026 23:25:35 +0000
Files and hashes:         1: voUqizt-pcWsWlKqy4UqAaTN0II.crl (hash: qU0Rq8JRHQzPrUE18AiXF8vtgtZtSkR2/hpHy9f00ak=)
                          2: 14F55DEAB7E611EF9B9D9F6DC4F9AE02.roa (hash: WdNld5DHUPVbC8ourF5Ae6KnkYpsmFk/aie/RVL4jQw=)
                          3: 0D72C80EA21411F1A2E882014B11F970.roa (hash: QNtTKXUSfAEEjadKdZQUMOPyB19rXz5qCjaKrhfNMYY=)
                          4: D717B9F0B7E511EFB5F63E6DC4F9AE02.roa (hash: KrKOHKApCfIlvSNW0s+tbRggHCf468HmTluYQjo8tCk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.crl
                          rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 23:25:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1379 (0x563)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF428, serialNumber=BE852A8B3B7EA5C5AC5A52AACB852A01A4CDD082
        Validity
            Not Before: Sep 10 23:25:35 2026 GMT
            Not After : Sep 17 23:25:35 2026 GMT
        Subject: CN=6aa33c6f-eff7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:49:81:7c:4c:56:b0:aa:10:b6:d0:8f:6e:6a:
                    50:cb:a2:ca:e3:a4:4e:c9:6d:c3:b5:88:10:da:2b:
                    da:8b:33:14:ba:b7:86:88:63:64:a6:db:4e:8c:ad:
                    3f:58:3e:63:b9:78:3b:63:7d:a3:ca:80:60:6e:45:
                    e7:7b:13:19:72:8b:c6:c9:8d:6d:c0:90:f3:0a:de:
                    52:4f:f8:3a:7b:83:a7:24:fc:98:a0:16:30:67:63:
                    79:5a:88:ea:75:05:6f:25:b0:b8:ee:89:e0:20:04:
                    51:92:dc:9f:87:bd:3b:b6:f9:bd:6c:7e:e1:cc:98:
                    69:91:2d:08:75:e7:3a:36:0b:09:9a:83:8f:8c:9a:
                    37:c6:15:03:d8:2b:60:09:7a:8d:c4:ea:56:4c:14:
                    e4:71:14:55:c9:42:9d:a1:0b:1c:92:de:19:f4:0e:
                    ea:c7:3d:1d:09:2a:dd:20:ab:18:53:62:3c:b8:f8:
                    bc:7e:fc:b6:40:9c:76:0a:fa:ad:d6:2b:d3:63:a0:
                    8d:e9:de:65:15:5e:bf:04:09:77:f2:ec:16:ee:71:
                    e1:61:a7:fd:93:37:ec:3e:55:68:c9:11:b7:5c:22:
                    c6:92:18:d9:c5:d2:81:96:6f:3d:0e:2b:bc:fb:65:
                    ca:9d:21:f5:ef:92:1e:4e:06:aa:fd:ec:82:7e:f5:
                    1f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:8D:21:9C:27:AB:E4:0A:D2:A8:FF:F6:A1:EB:2F:98:1C:36:5F:65
            X509v3 Authority Key Identifier:
                keyid:BE:85:2A:8B:3B:7E:A5:C5:AC:5A:52:AA:CB:85:2A:01:A4:CD:D0:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:6e:00:d2:16:1b:3c:12:c9:a7:43:bd:a8:e3:a8:2a:46:d1:
         43:36:94:e8:30:a4:f5:d4:6f:3f:29:af:98:8d:0e:3a:84:45:
         bf:79:f3:a2:e3:71:c7:d6:ec:d9:a4:2d:ba:0a:2d:7b:d8:58:
         19:b7:22:7d:e3:56:17:86:b6:3e:57:df:45:12:c8:db:39:8e:
         02:11:5a:c3:d8:9a:02:2a:28:f0:1c:d2:a2:b5:a0:62:86:15:
         98:30:2b:9e:58:c7:d3:8e:e6:d2:19:ac:cd:af:44:60:2d:a3:
         9d:da:41:7b:c9:1a:0c:55:6d:eb:c3:7a:5a:18:46:32:e1:2d:
         0f:8c:6f:3e:3f:0a:47:46:6e:75:57:93:7b:da:86:89:d3:bd:
         88:01:3b:a2:9e:7f:cc:59:c3:a5:17:02:e9:70:61:f7:f9:2a:
         7b:4e:43:cf:ff:54:b8:84:cc:bd:d7:8e:99:7f:02:a0:81:80:
         d6:a8:f8:fc:85:da:f2:99:c8:16:a4:c8:a5:bf:23:13:21:f9:
         f3:16:04:ac:8f:b0:4c:7a:67:03:fe:e9:be:c1:16:09:81:98:
         6c:fc:56:61:30:d7:c3:59:bf:8b:43:ba:69:33:95:fb:0e:0e:
         7b:01:45:a0:42:88:58:07:a2:2c:7f:cd:06:9b:3b:a4:08:f4:
         e4:26:d6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:55:35 2026 by rpki-client