Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
File:                     voUqizt-pcWsWlKqy4UqAaTN0II.mft (raw, json)
Hash identifier:          k3zuNv6Nu+zZu3VQuZH1Mdy2a2Jb7aV1ReNwQiEKLfo=
Subject key identifier:   C0:07:B5:BC:B0:BC:0B:CA:87:F6:5D:E8:38:9C:C6:9B:FD:66:E3:F2
Authority key identifier: BE:85:2A:8B:3B:7E:A5:C5:AC:5A:52:AA:CB:85:2A:01:A4:CD:D0:82
Certificate issuer:       /CN=A91FF428/serialNumber=BE852A8B3B7EA5C5AC5A52AACB852A01A4CDD082
Certificate serial:       0517
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
Manifest number:          04F8
Signing time:             Sun 26 Apr 2026 23:44:21 +0000
Manifest this update:     Sun 26 Apr 2026 23:44:21 +0000
Manifest next update:     Sun 03 May 2026 23:44:21 +0000
Files and hashes:         1: voUqizt-pcWsWlKqy4UqAaTN0II.crl (hash: c+t/v4PvK2Yop3HRXKVKT7OTQpHTl8hu6mIcVeU0t+w=)
                          2: D717B9F0B7E511EFB5F63E6DC4F9AE02.roa (hash: KrKOHKApCfIlvSNW0s+tbRggHCf468HmTluYQjo8tCk=)
                          3: D254B444679111EF8A2C9062C4F9AE02.roa (hash: GVjvFKgHSY78CpYCc98Qtcp6gxw2fNKpFQ7HCML9xSg=)
                          4: 14F55DEAB7E611EF9B9D9F6DC4F9AE02.roa (hash: WdNld5DHUPVbC8ourF5Ae6KnkYpsmFk/aie/RVL4jQw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.crl
                          rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 03 May 2026 23:44:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1303 (0x517)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF428, serialNumber=BE852A8B3B7EA5C5AC5A52AACB852A01A4CDD082
        Validity
            Not Before: Apr 26 23:44:21 2026 GMT
            Not After : May  3 23:44:21 2026 GMT
        Subject: CN=69eea355-aa91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:93:c3:bc:1f:db:cb:40:df:d4:9c:ce:b1:95:
                    c3:bf:c7:8a:c4:bc:19:e6:36:15:47:af:20:71:c6:
                    39:ec:77:d8:00:f8:5b:4a:89:bd:6b:ac:92:82:ea:
                    68:51:1c:24:90:e0:21:cc:e2:4b:68:35:3a:58:40:
                    39:12:a2:b9:fc:38:e1:e2:40:af:ef:60:f7:d3:fa:
                    90:43:86:77:09:bf:df:75:be:4f:06:f7:31:af:d4:
                    1c:a4:a5:53:8b:07:bf:b9:de:27:35:06:a0:bc:82:
                    67:0a:bf:40:96:fc:bc:21:09:00:05:3d:c8:ae:57:
                    b7:01:37:a7:61:9c:66:b8:48:61:d5:19:09:f7:f1:
                    fb:cb:31:d5:dd:83:64:31:b7:ae:f0:f1:29:79:9f:
                    27:7b:cb:98:3f:f5:a3:fc:d8:b1:05:84:74:37:c7:
                    70:78:7c:fc:6b:ec:62:ea:e1:8b:b4:9f:df:df:28:
                    fe:3e:43:b7:53:63:40:ae:6d:24:f2:9f:15:dd:50:
                    7c:6a:57:d3:b7:61:df:c6:f9:5a:5d:64:8b:2b:ab:
                    94:81:27:a6:34:4e:09:98:5b:dd:ff:a7:31:06:92:
                    b4:45:61:57:b7:af:ca:01:ef:b5:0e:3b:cb:40:37:
                    c0:e3:2d:9f:2e:2d:ac:af:53:18:00:80:95:4e:34:
                    5a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:07:B5:BC:B0:BC:0B:CA:87:F6:5D:E8:38:9C:C6:9B:FD:66:E3:F2
            X509v3 Authority Key Identifier:
                keyid:BE:85:2A:8B:3B:7E:A5:C5:AC:5A:52:AA:CB:85:2A:01:A4:CD:D0:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:08:6b:7f:e4:39:df:51:0a:86:36:d4:eb:0a:7b:ef:e7:4a:
         e8:0c:b3:fd:e2:07:61:8b:2a:c8:b9:38:e7:5f:d0:3b:ee:75:
         2a:37:21:bf:79:f1:4b:de:f4:f4:4c:38:90:fa:d7:a3:d5:c3:
         17:3c:05:9b:42:f0:0e:06:ff:47:cb:8f:f4:9a:50:46:fe:de:
         e5:e6:00:01:17:3a:5f:d9:49:81:eb:ce:2a:08:ab:8f:61:ff:
         04:84:a0:eb:16:cc:18:b1:2b:a4:09:44:4c:76:4d:f2:b5:d3:
         5f:3a:70:c4:8d:b0:35:ba:1d:6c:54:70:8f:ba:62:c7:61:8e:
         ca:30:b4:b4:25:f1:46:e1:1f:b1:3f:0d:10:a2:cd:12:81:f2:
         8e:29:1d:7f:65:56:1b:77:95:39:14:6d:74:b0:7b:8d:67:e2:
         fd:00:0e:aa:bc:f8:74:b3:2c:41:06:75:d7:12:84:d7:49:62:
         e6:b5:a8:85:e1:74:1a:a5:68:6d:df:87:f7:f3:9b:a7:44:c5:
         52:93:e1:32:e6:31:d8:3a:23:c9:96:1d:74:58:c7:c2:55:06:
         4d:c5:06:b2:a2:68:47:59:92:a5:1f:e4:3e:30:f3:fb:34:21:
         07:0d:7e:8e:71:c8:b6:4f:0a:93:03:8f:3b:6d:d9:c0:27:14:
         49:08:36:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 11:38:37 2026 by rpki-client