Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft
File:                     VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft (raw, json)
Hash identifier:          YUB5lY3ljRUzSG4Mk3MnoAi8SfHAOwaByzMPyFZDehQ=
Subject key identifier:   F0:4B:1F:75:C4:65:D5:A8:1D:B7:66:66:32:F6:A2:28:DF:D8:33:9D
Authority key identifier: 54:72:1E:08:61:09:69:0A:39:65:2C:BA:A8:A0:E6:1A:B0:A9:F0:72
Certificate issuer:       /CN=A91936EB/serialNumber=54721E086109690A39652CBAA8A0E61AB0A9F072
Certificate serial:       0CA2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft
Manifest number:          0C93
Signing time:             Thu 16 Apr 2026 18:28:49 +0000
Manifest this update:     Thu 16 Apr 2026 18:28:49 +0000
Manifest next update:     Thu 23 Apr 2026 18:28:49 +0000
Files and hashes:         1: VHIeCGEJaQo5ZSy6qKDmGrCp8HI.crl (hash: UrqZt31apVOCeLxxcvLJ/s4N1aS7bDhqYOEc7bSUrNc=)
                          2: 98B698EEE8A811F084817E76576F56BC.roa (hash: JBryeLEpdHknVs2/azmwAglPMtPdhkj/YFJ0rtMnNdU=)
                          3: CC4D97CAE8A811F0B40EB576576F56BC.roa (hash: D5fKc+44BFNosYF9mliDVf4cmNZpEtwAIPTStvxfd+8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.crl
                          rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 18:28:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3234 (0xca2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91936EB, serialNumber=54721E086109690A39652CBAA8A0E61AB0A9F072
        Validity
            Not Before: Apr 16 18:28:49 2026 GMT
            Not After : Apr 23 18:28:49 2026 GMT
        Subject: CN=69e12a61-2649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6a:01:b4:0c:1c:02:e6:c1:e1:ec:49:1b:4f:
                    5a:f1:22:77:95:3e:37:09:1e:f5:b2:12:72:20:e6:
                    9a:f2:46:5a:40:b9:52:bd:9b:21:da:4c:84:44:6a:
                    50:11:90:b5:d5:0b:7c:ef:7b:57:93:96:f5:2e:2f:
                    31:4f:af:40:ca:80:3f:3f:6f:05:c3:ab:fb:5b:cf:
                    9f:e9:ef:bb:47:00:3b:2c:93:86:de:6c:10:83:70:
                    5a:b2:d5:6e:13:33:ed:40:39:98:f9:48:fc:3d:23:
                    cf:4f:76:ac:c4:0d:0f:dd:10:f0:e7:0d:7f:8c:d2:
                    ad:1c:ee:ca:b0:a3:87:03:70:c9:4b:6c:7b:b1:29:
                    e1:9b:07:a2:8e:36:5b:2a:56:49:7f:70:98:53:42:
                    18:09:73:d9:b0:25:ca:f4:cb:50:ed:9e:fa:9f:19:
                    74:0a:48:3c:fe:a2:b7:82:07:f4:b8:93:87:b4:6c:
                    7c:66:d6:4f:53:81:0d:23:92:ad:5c:3e:29:d2:33:
                    75:59:16:8e:b1:1e:82:56:cc:56:41:d2:2f:ff:a2:
                    51:0e:03:a4:d4:bb:5b:d0:a8:85:5e:a5:f2:60:28:
                    f4:54:2f:b3:b5:62:87:6b:b2:c9:03:9c:6d:8c:4c:
                    e0:54:70:50:81:c7:46:dd:9f:a2:f1:f1:6b:bc:d8:
                    6c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:4B:1F:75:C4:65:D5:A8:1D:B7:66:66:32:F6:A2:28:DF:D8:33:9D
            X509v3 Authority Key Identifier:
                keyid:54:72:1E:08:61:09:69:0A:39:65:2C:BA:A8:A0:E6:1A:B0:A9:F0:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:06:7b:43:15:1d:69:2d:cf:77:b2:b3:0e:95:b6:dc:45:62:
         e6:3b:a7:34:cf:e9:a7:a2:60:29:4d:67:82:25:08:7a:22:45:
         dd:78:f1:02:e8:ca:8c:b8:90:db:21:d8:b7:af:c8:1a:62:d2:
         e6:df:f6:b4:b2:17:32:07:85:d2:b4:f9:90:56:a0:bb:26:d4:
         6e:80:bb:ad:6e:9d:ea:5e:01:35:5f:13:50:2b:22:22:97:32:
         33:a1:b5:27:5f:5d:52:97:38:31:a7:22:6e:e6:43:ab:72:b9:
         18:d5:c7:38:f4:fc:7e:90:86:50:0e:fa:c2:c7:f8:2c:86:a9:
         9d:93:21:50:eb:05:87:1c:62:6b:d6:a0:1f:7b:8f:19:4a:1b:
         5d:a6:f6:df:46:64:ce:e7:f9:a4:1e:90:7a:07:27:f8:12:44:
         5e:a4:a1:d1:5c:c3:b5:47:cc:5b:77:b6:2c:f2:46:51:8d:d9:
         fc:f1:a9:da:9e:17:45:88:0e:75:83:01:0e:6f:26:54:f3:ca:
         fa:e4:b8:6a:17:02:98:6f:61:1f:ca:cf:89:10:6e:34:9f:7b:
         a2:51:ad:d6:cc:39:48:28:e6:21:0a:78:ba:bf:af:76:c8:0e:
         90:f4:95:86:57:4f:76:16:49:19:48:f8:c7:c9:e6:56:ac:84:
         ec:78:b1:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:55:01 2026 by rpki-client