Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91288D9/BA59535E425711EA8F838A43C4F9AE02/VB4KZv5g86rAJQLO8eSOYnpi90E.mft
File:                     VB4KZv5g86rAJQLO8eSOYnpi90E.mft (raw, json)
Hash identifier:          7H8F6ULRAT6WOqH3gLdzkNO69fObkrnhy1Lz9kLHzAc=
Subject key identifier:   BC:72:6E:3E:AA:C0:46:1C:D7:C0:44:79:13:9E:4A:4F:9F:D4:DD:41
Authority key identifier: 54:1E:0A:66:FE:60:F3:AA:C0:25:02:CE:F1:E4:8E:62:7A:62:F7:41
Certificate issuer:       /CN=A91288D9/serialNumber=541E0A66FE60F3AAC02502CEF1E48E627A62F741
Certificate serial:       0BB6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB4KZv5g86rAJQLO8eSOYnpi90E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91288D9/BA59535E425711EA8F838A43C4F9AE02/VB4KZv5g86rAJQLO8eSOYnpi90E.mft
Manifest number:          0BAD
Signing time:             Thu 16 Apr 2026 18:56:01 +0000
Manifest this update:     Thu 16 Apr 2026 18:56:00 +0000
Manifest next update:     Thu 23 Apr 2026 18:56:00 +0000
Files and hashes:         1: VB4KZv5g86rAJQLO8eSOYnpi90E.crl (hash: b0DX2pypMa0Ai7DByLCnGoXFiY+vNPaxKTdbi1rqx3M=)
                          2: E0FCE614425811EAADEA3B45C4F9AE02.roa (hash: 7oG02MBB/SRXLUOCXgCbbBEuZX5luY+3kV7hTOcxtSk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91288D9/BA59535E425711EA8F838A43C4F9AE02/VB4KZv5g86rAJQLO8eSOYnpi90E.crl
                          rsync://rpki.apnic.net/member_repository/A91288D9/BA59535E425711EA8F838A43C4F9AE02/VB4KZv5g86rAJQLO8eSOYnpi90E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB4KZv5g86rAJQLO8eSOYnpi90E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 18:55:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2998 (0xbb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91288D9, serialNumber=541E0A66FE60F3AAC02502CEF1E48E627A62F741
        Validity
            Not Before: Apr 16 18:56:00 2026 GMT
            Not After : Apr 23 18:56:00 2026 GMT
        Subject: CN=69e130c0-31ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f3:05:5b:b0:e0:c7:81:fc:95:d2:3c:39:9f:
                    09:4d:11:b3:ba:62:18:af:ab:d9:ff:3d:e9:e9:d2:
                    8e:55:db:0a:b3:81:73:18:aa:84:41:b6:35:fe:85:
                    8b:a0:3f:09:87:7b:ac:27:94:0d:57:84:14:10:a0:
                    18:9f:3d:b2:82:1d:94:42:d3:d6:8b:1f:a6:95:20:
                    a1:7c:8d:7f:f6:7e:46:33:4d:f7:95:80:71:5c:7a:
                    eb:a7:56:e5:d8:08:49:37:ae:1e:34:9e:71:c2:e9:
                    66:00:a5:e9:3d:04:9d:75:6e:68:f7:bd:a8:02:db:
                    7b:72:a5:92:c7:23:4f:f2:a7:1a:60:e3:9e:aa:75:
                    4d:9b:1d:da:74:d4:6d:f5:bc:a7:37:31:53:7b:82:
                    3a:41:2f:99:39:71:27:a2:8f:d5:a4:f7:fb:8b:05:
                    de:6c:c2:79:a3:4d:fa:b9:26:53:21:07:b6:3a:1b:
                    9c:3e:a4:ba:22:7d:a3:ab:3c:a5:51:f2:fb:55:ed:
                    0d:51:41:f7:81:7b:7d:45:85:11:96:54:1e:26:78:
                    b1:48:6c:4b:65:1a:ce:7e:cb:5a:3f:fb:97:3d:62:
                    7d:af:21:d7:b3:88:36:d3:44:05:8a:ed:a6:c0:09:
                    50:4a:f4:d1:96:4b:62:1e:40:ea:6b:52:36:ba:a9:
                    7a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:72:6E:3E:AA:C0:46:1C:D7:C0:44:79:13:9E:4A:4F:9F:D4:DD:41
            X509v3 Authority Key Identifier:
                keyid:54:1E:0A:66:FE:60:F3:AA:C0:25:02:CE:F1:E4:8E:62:7A:62:F7:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91288D9/BA59535E425711EA8F838A43C4F9AE02/VB4KZv5g86rAJQLO8eSOYnpi90E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB4KZv5g86rAJQLO8eSOYnpi90E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91288D9/BA59535E425711EA8F838A43C4F9AE02/VB4KZv5g86rAJQLO8eSOYnpi90E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:d8:8a:7d:c3:ae:bb:82:c5:bd:5f:65:bd:76:67:41:8a:fa:
         18:f4:1f:dc:ca:96:41:60:43:df:1e:cf:a7:f1:7a:8a:43:b2:
         ab:69:5b:ea:6f:a4:fb:de:80:7a:b2:e4:b0:7a:74:b3:56:9b:
         34:59:d8:8b:cc:3b:55:17:98:74:48:ce:07:66:de:fe:64:1f:
         93:0b:f8:21:a6:e8:99:45:7d:cb:0e:88:96:f6:96:46:25:c2:
         bf:7b:9c:46:f2:92:ad:1c:f6:b1:b8:9b:9e:17:a3:cd:11:c7:
         83:31:c9:ab:a4:77:cc:df:a3:76:06:31:68:23:38:01:fa:4c:
         9e:01:1f:05:f3:37:b9:c5:64:ea:36:4d:3c:0d:0f:19:7c:97:
         64:fd:87:d0:96:c0:7c:90:8b:3e:b3:ae:a8:61:cc:ac:e8:13:
         93:39:ec:9f:52:f4:79:8e:b9:be:3e:0b:dc:fd:91:26:5d:f7:
         26:77:79:20:ff:a8:a5:a4:d1:60:88:69:77:d3:ec:a5:3e:77:
         a3:5b:c7:6b:e0:9e:e5:e7:06:2e:7f:14:dc:ad:0f:8d:91:e4:
         25:bd:b7:6d:b9:cd:2f:d0:ca:9f:38:5c:d0:ed:f1:b3:99:27:
         cd:99:bf:36:23:0d:fd:eb:07:5c:b1:0d:2a:f5:06:f6:99:8d:
         5a:c8:13:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:42:36 2026 by rpki-client