Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A514/3FF25AFA1F4911F096F7AE7AC4F9AE02/VU0O_yINZrbppAkPDcy6milc3bU.mft
File:                     VU0O_yINZrbppAkPDcy6milc3bU.mft (raw, json)
Hash identifier:          0TWhzZL//VwCefI7nhHIQVetlkB8mPO9WQqIXUuwrsg=
Subject key identifier:   20:C4:36:B5:3D:A6:4F:7C:59:D3:7E:28:F9:4B:0E:02:2D:FE:98:AD
Authority key identifier: 55:4D:0E:FF:22:0D:66:B6:E9:A4:09:0F:0D:CC:BA:9A:29:5C:DD:B5
Certificate issuer:       /CN=A914A514/serialNumber=554D0EFF220D66B6E9A4090F0DCCBA9A295CDDB5
Certificate serial:       C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VU0O_yINZrbppAkPDcy6milc3bU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A514/3FF25AFA1F4911F096F7AE7AC4F9AE02/VU0O_yINZrbppAkPDcy6milc3bU.mft
Manifest number:          C0
Signing time:             Fri 17 Apr 2026 06:43:51 +0000
Manifest this update:     Fri 17 Apr 2026 06:43:50 +0000
Manifest next update:     Fri 24 Apr 2026 06:43:50 +0000
Files and hashes:         1: VU0O_yINZrbppAkPDcy6milc3bU.crl (hash: qMj1EjrssjYAHSlHJMRIwUxtwfxftZcgF/Ms++LPvPA=)
                          2: 4499D9921F4A11F0AF06577CC4F9AE02.roa (hash: Nrn9HJKbbAN6/WO7m56GfRo1g91ZrJZGME+tEexROGo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A514/3FF25AFA1F4911F096F7AE7AC4F9AE02/VU0O_yINZrbppAkPDcy6milc3bU.crl
                          rsync://rpki.apnic.net/member_repository/A914A514/3FF25AFA1F4911F096F7AE7AC4F9AE02/VU0O_yINZrbppAkPDcy6milc3bU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VU0O_yINZrbppAkPDcy6milc3bU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:43:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 198 (0xc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A514, serialNumber=554D0EFF220D66B6E9A4090F0DCCBA9A295CDDB5
        Validity
            Not Before: Apr 17 06:43:50 2026 GMT
            Not After : Apr 24 06:43:50 2026 GMT
        Subject: CN=69e1d6a7-172d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f5:26:fa:55:e7:69:07:6e:34:c1:3b:61:6b:
                    72:2b:b8:55:76:55:1d:9c:b6:53:a5:c3:8c:53:25:
                    c8:7e:cc:60:be:f8:d4:68:d0:95:1c:00:4c:ef:f2:
                    48:2d:d7:23:db:e3:37:45:29:bf:e7:28:b1:4b:b8:
                    57:2a:2f:2d:ee:9d:93:3d:e6:fc:22:28:f8:c2:e1:
                    7f:08:ed:fb:49:43:7e:f8:8f:41:49:64:66:be:5b:
                    a6:52:fb:67:f7:81:2f:39:bb:11:8c:03:f0:b4:c6:
                    55:3b:65:1c:4f:9e:49:62:18:aa:ea:1c:b6:c6:b8:
                    6e:ec:66:07:94:1c:26:4c:90:95:00:83:70:94:15:
                    d5:bb:01:9b:7c:ea:9f:d8:cc:d2:93:35:ad:c4:be:
                    6b:54:b6:82:2e:1e:0e:fa:8b:20:8b:f8:e5:02:a3:
                    48:df:79:74:53:93:28:fb:d4:1f:b0:bc:91:39:a1:
                    0b:32:72:84:49:13:2f:b5:20:5e:10:9f:b8:4c:66:
                    ef:71:02:d4:64:b7:78:c7:1a:a6:d8:a1:61:e2:ad:
                    86:c9:fc:6a:3f:84:73:b0:0d:aa:56:fb:11:19:40:
                    0c:ad:40:1b:6d:86:1e:1d:81:07:6c:51:fe:d0:8c:
                    7a:3c:12:71:cf:d6:4b:35:96:b9:2f:f9:92:95:aa:
                    0c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:C4:36:B5:3D:A6:4F:7C:59:D3:7E:28:F9:4B:0E:02:2D:FE:98:AD
            X509v3 Authority Key Identifier:
                keyid:55:4D:0E:FF:22:0D:66:B6:E9:A4:09:0F:0D:CC:BA:9A:29:5C:DD:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A514/3FF25AFA1F4911F096F7AE7AC4F9AE02/VU0O_yINZrbppAkPDcy6milc3bU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VU0O_yINZrbppAkPDcy6milc3bU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A514/3FF25AFA1F4911F096F7AE7AC4F9AE02/VU0O_yINZrbppAkPDcy6milc3bU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:0b:4c:5c:af:76:ef:b0:ae:bf:00:f4:06:02:f6:7e:d4:1b:
         bb:da:24:3c:42:27:ae:92:f9:7a:a9:3d:ae:ac:a4:b1:bd:e8:
         61:8c:a9:13:9d:2f:91:65:81:67:1c:5b:c2:ab:7b:ea:89:29:
         96:82:9b:64:9b:ba:65:ef:08:94:92:bd:73:c2:14:b6:1d:70:
         e7:78:e2:31:07:e6:67:14:f6:1c:90:fd:f3:df:2b:64:c3:24:
         54:b3:31:11:d1:b2:ed:57:50:56:4f:ea:8c:9a:19:17:d0:17:
         c3:3e:52:37:59:6d:a6:f4:3b:e0:fa:11:4e:5b:a4:db:b4:cb:
         6a:5a:52:c9:c2:5f:b1:37:bd:71:59:8e:b1:1e:e9:90:5a:02:
         b9:60:f1:71:99:dc:b7:4f:b8:a5:65:9f:4d:55:3a:fc:da:97:
         56:cc:6b:04:91:69:b0:93:00:ef:60:42:8a:62:d6:6e:18:8e:
         bf:d3:b2:ef:8c:5e:a9:be:e8:0d:3a:92:55:03:46:2f:48:b7:
         1f:b0:6d:39:17:1a:76:04:3b:0a:aa:68:3b:87:eb:e8:06:2b:
         be:5f:18:74:2c:b7:27:d1:bb:e1:c1:09:15:56:c1:3b:f5:92:
         e5:7f:59:29:e6:79:13:7c:49:b6:70:81:f7:b9:36:af:77:0c:
         1c:d6:ff:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:33:28 2026 by rpki-client