Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.mft
File:                     vkMB4qQLT2pH4YWmdX2abo18dEI.mft (raw, json)
Hash identifier:          1Z1dokZ9lPZ74PoA7ZyJUu0LQRhwIw+0M+9IRZIY2LI=
Subject key identifier:   EA:71:E3:CC:54:32:3A:31:00:C9:1F:98:EA:2E:F9:7D:31:30:9F:83
Authority key identifier: BE:43:01:E2:A4:0B:4F:6A:47:E1:85:A6:75:7D:9A:6E:8D:7C:74:42
Certificate issuer:       /CN=A919318C/serialNumber=BE4301E2A40B4F6A47E185A6757D9A6E8D7C7442
Certificate serial:       A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkMB4qQLT2pH4YWmdX2abo18dEI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.mft
Manifest number:          99
Signing time:             Wed 15 Apr 2026 07:06:40 +0000
Manifest this update:     Wed 15 Apr 2026 07:06:39 +0000
Manifest next update:     Wed 22 Apr 2026 07:06:39 +0000
Files and hashes:         1: vkMB4qQLT2pH4YWmdX2abo18dEI.crl (hash: Q/KUOlm0B1ViAu9euSHJHsFIR4rNxRQWfysJy05mquI=)
                          2: 99DC33DA621D11F0B3B28C17C4F9AE02.roa (hash: PaNCeOBgBausBmkVaNGCZJiD6DTSxbMiBGDU8oOrlo8=)
                          3: 9FB4CD9462DB11F0B8A4FE59C4F9AE02.roa (hash: zli8UWvhlCj/6OfJgReWS/J0Zy5c1SeMbcyJruIVEGs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.crl
                          rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkMB4qQLT2pH4YWmdX2abo18dEI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 07:06:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 163 (0xa3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919318C, serialNumber=BE4301E2A40B4F6A47E185A6757D9A6E8D7C7442
        Validity
            Not Before: Apr 15 07:06:39 2026 GMT
            Not After : Apr 22 07:06:39 2026 GMT
        Subject: CN=69df3900-25af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:25:48:b1:da:70:46:92:a3:30:60:85:25:62:
                    a1:f5:95:4d:3f:ed:b0:2f:2d:a6:67:af:09:04:dd:
                    3e:52:86:9d:77:b7:31:d3:db:67:25:e8:83:91:3d:
                    b3:6f:20:f4:30:23:a3:eb:ca:e6:6e:e6:56:9f:62:
                    e2:4c:42:4c:30:e4:34:95:b9:86:55:41:6d:ac:2d:
                    f9:3b:fc:c0:87:18:4b:5e:8b:43:c0:03:74:59:9c:
                    7f:b8:17:c1:f6:ca:12:9c:02:d5:25:e0:0f:23:0b:
                    6a:db:1d:6e:55:e6:92:3d:80:0a:85:24:a1:3a:60:
                    34:53:e7:75:fe:c2:8c:d2:68:86:8f:40:83:37:e8:
                    3b:e1:05:aa:b0:b6:56:4a:e6:ba:53:f4:35:3e:d2:
                    41:04:87:6b:9b:2b:e9:36:38:bb:87:d8:00:47:f9:
                    a9:30:96:c8:02:c0:88:a0:ab:13:04:b5:8e:56:23:
                    de:e8:bd:b7:c9:3f:76:f5:65:c0:49:9a:ed:1b:d0:
                    90:18:8f:88:01:4f:af:58:f2:6f:bb:db:4b:d1:b2:
                    b3:b1:35:cb:83:4a:5c:ac:3d:a9:64:df:56:d2:57:
                    87:aa:7c:fb:b5:ba:81:0d:3d:c6:d9:65:50:52:7a:
                    f3:e2:04:2c:9c:60:17:05:1c:bf:bf:a8:67:01:c8:
                    2d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:71:E3:CC:54:32:3A:31:00:C9:1F:98:EA:2E:F9:7D:31:30:9F:83
            X509v3 Authority Key Identifier:
                keyid:BE:43:01:E2:A4:0B:4F:6A:47:E1:85:A6:75:7D:9A:6E:8D:7C:74:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkMB4qQLT2pH4YWmdX2abo18dEI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:9a:93:19:d2:3b:b9:4a:0d:bf:0f:d2:c5:b7:e6:06:cd:ce:
         e1:2c:07:45:3c:0d:7b:d5:bb:85:2e:43:87:db:e6:66:0a:5e:
         b1:92:5d:e7:d4:c7:8e:85:a2:9e:6f:b3:5a:14:93:08:e7:87:
         6e:75:6a:15:55:b2:a1:d9:e1:51:ad:74:36:cb:0c:ee:db:ed:
         3f:50:6a:bc:27:25:44:34:ce:34:97:b5:88:52:b8:14:44:b4:
         bf:88:dd:70:cb:d1:a9:ba:4c:9a:c5:68:19:94:b4:c6:d5:f4:
         42:77:eb:6d:e0:8f:23:35:67:39:13:e6:ff:9b:cb:cc:88:3c:
         51:2f:20:3c:5b:62:e3:b8:d8:86:85:3b:80:63:5d:c5:6f:64:
         ce:e9:fb:62:bb:b0:5c:86:1a:7d:a9:4f:8d:c0:f0:29:ac:7e:
         37:4d:37:4e:5e:77:8d:7c:84:cb:b0:b9:0c:cf:26:a1:5b:52:
         69:36:20:d8:0e:a0:d0:f7:1a:73:30:66:bc:88:79:a2:51:06:
         7b:c5:d8:94:42:91:ff:99:70:f2:15:61:0e:61:e0:13:97:97:
         0d:59:fb:b3:34:7c:fe:22:d5:08:c1:5a:dc:eb:df:34:ff:94:
         f6:2b:aa:77:7c:f2:08:7e:bc:2c:64:66:62:bf:ed:20:6b:f8:
         c1:37:96:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:21:06 2026 by rpki-client