Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft
File:                     _vkUOxYWzaEVm1ns1eOZPpgmVP4.mft (raw, json)
Hash identifier:          /4BIoY0+1mn+vBjJdQNknAQ4ofUr0WteRKaM2V9A+cc=
Subject key identifier:   27:04:E5:75:40:82:26:87:28:E1:1A:AF:88:89:D2:C6:8F:37:F9:EC
Authority key identifier: FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE
Certificate issuer:       /CN=A911FDBA/serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE
Certificate serial:       35AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft
Manifest number:          3572
Signing time:             Thu 16 Apr 2026 14:57:54 +0000
Manifest this update:     Thu 16 Apr 2026 14:57:54 +0000
Manifest next update:     Thu 23 Apr 2026 14:57:54 +0000
Files and hashes:         1: _vkUOxYWzaEVm1ns1eOZPpgmVP4.crl (hash: MFm6sFeXiPTXKZnYJhSmKgHRJhdbsTGF5KSW1hZjl48=)
                          2: CD692AAEF65311EAA7E5A684C4F9AE02.roa (hash: HFHk/hNjIZnEhj8GBFjikKlxt61+w/Nh1n84ChzN2oY=)
                          3: 800275E63FF911EB9BC3F51FC4F9AE02.roa (hash: CtU0kY5KWSLSlfwZkRorGoa4e7JgtnQg/6zuGIRKoKM=)
                          4: 57CA5DB02E2811EBB76B1E75C4F9AE02.roa (hash: CRBjNrDay0fKPUZhB/X7qmKie82SAt30Rk3lcvLRM5s=)
                          5: 931C5524175011EB8585CA60C4F9AE02.roa (hash: 5byMek5etqwTehUajH8Mj1zzTDL9e01ueYvXYYpN/aA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.crl
                          rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 14:57:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13739 (0x35ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911FDBA, serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE
        Validity
            Not Before: Apr 16 14:57:54 2026 GMT
            Not After : Apr 23 14:57:54 2026 GMT
        Subject: CN=69e0f8f2-c17b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:07:6a:34:86:9e:e2:60:04:83:23:bf:e1:31:
                    60:40:e8:d4:b4:c3:ed:4a:19:99:5e:ea:6a:db:eb:
                    bf:78:df:f2:f7:ff:ed:22:90:a1:1c:37:bf:93:1c:
                    be:8b:63:f9:5b:4a:b3:91:4f:eb:f1:16:f4:f5:05:
                    a0:3f:4b:05:1c:c4:f6:9d:07:49:3b:3a:7a:a4:e7:
                    fd:0a:ed:f0:fd:ed:82:6b:d3:e1:ab:b1:8b:20:9e:
                    4c:7e:05:fc:d0:4d:9c:16:d1:11:ae:61:e5:a6:3d:
                    de:53:67:fe:dd:ae:a8:95:82:f3:eb:e8:94:57:5c:
                    4e:1e:e9:9e:47:94:8e:53:f9:60:57:ca:43:cd:1f:
                    7d:c3:22:5f:ca:b1:b6:67:09:3c:82:36:da:f0:30:
                    2f:26:e2:42:5b:74:3a:32:96:0a:14:d5:58:47:76:
                    f5:56:2c:5d:fd:bf:71:ba:f2:f9:9c:df:cb:95:4a:
                    19:ce:f3:3c:ac:30:13:9b:ec:dd:13:f5:3d:23:a2:
                    39:37:cf:26:d4:79:ef:d6:6b:67:70:85:6c:5a:6a:
                    de:53:ae:27:c5:c5:19:30:ac:57:8b:17:cf:36:7c:
                    23:a1:3a:0f:70:4a:bc:24:9b:f2:e0:bd:41:90:fe:
                    26:e1:fc:c3:68:32:9a:b9:e2:ad:24:22:82:09:8c:
                    e1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:04:E5:75:40:82:26:87:28:E1:1A:AF:88:89:D2:C6:8F:37:F9:EC
            X509v3 Authority Key Identifier:
                keyid:FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:d9:1c:d1:28:d7:38:f3:c2:ba:10:b4:a4:de:62:e0:65:9a:
         da:fe:92:df:0f:2e:d8:14:8b:38:64:89:47:09:b9:1b:4d:7a:
         54:ab:67:9a:c2:96:69:d2:07:58:e7:f7:22:37:27:fc:c5:bb:
         46:bd:b2:77:0c:4f:d3:1d:95:23:d9:ab:a9:a2:45:1e:59:75:
         e0:69:f7:55:24:dd:73:39:ef:25:66:5a:90:5c:99:79:b0:73:
         bf:52:b1:26:33:9b:5f:79:c8:e8:6d:6d:c1:d1:8a:aa:4e:1f:
         25:30:a3:0d:72:6a:25:63:37:10:f9:bd:40:10:4b:42:65:49:
         bd:61:df:31:3c:06:01:be:5c:0a:92:9a:45:ab:c7:69:36:39:
         65:65:94:94:ac:c5:57:e8:ba:af:a4:ff:8e:45:70:07:0e:39:
         2c:c2:a5:4f:49:7f:32:81:a9:1c:37:0c:df:5f:00:8b:91:38:
         a8:99:45:d3:ae:80:f7:4b:c6:f3:0f:6d:e9:da:39:d5:ca:a4:
         b5:2e:79:4d:55:09:29:6a:30:c6:e2:57:a7:ef:14:12:d4:f1:
         96:39:7c:b2:78:2c:f9:fb:e6:4a:31:44:da:93:30:13:39:d7:
         fa:35:12:4e:38:e7:b3:f3:ee:cc:fa:b5:72:a6:08:6a:3a:0a:
         ad:93:8b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:29:33 2026 by rpki-client