Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft
File:                     vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft (raw, json)
Hash identifier:          UcA1yUXU0TNaIR45RHGP/x4VwbVX2NVn8wYr0mpm548=
Subject key identifier:   FF:B8:6B:02:BF:BF:C6:F9:83:F3:22:0F:DA:D4:AC:BD:9D:44:85:3A
Authority key identifier: BD:D5:EB:15:63:38:39:3D:74:4D:AE:2F:C5:32:D5:83:2B:C7:85:BF
Certificate issuer:       /CN=A91ACC41/serialNumber=BDD5EB156338393D744DAE2FC532D5832BC785BF
Certificate serial:       0CD9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vdXrFWM4OT10Ta4vxTLVgyvHhb8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft
Manifest number:          0CD0
Signing time:             Sat 18 Apr 2026 18:15:51 +0000
Manifest this update:     Sat 18 Apr 2026 18:15:51 +0000
Manifest next update:     Sat 25 Apr 2026 18:15:51 +0000
Files and hashes:         1: vdXrFWM4OT10Ta4vxTLVgyvHhb8.crl (hash: ubZN7RBTadPk3XI/xjBfBpWVRQ30R9BhNv/hLtw0iM8=)
                          2: 674009AE09D811EA9BCFCE1EC4F9AE02.roa (hash: Y/Ibz6yH57us0XVA78pihe3EPEMLDwbUf8iL1FZSQgM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.crl
                          rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vdXrFWM4OT10Ta4vxTLVgyvHhb8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 18:15:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3289 (0xcd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ACC41, serialNumber=BDD5EB156338393D744DAE2FC532D5832BC785BF
        Validity
            Not Before: Apr 18 18:15:51 2026 GMT
            Not After : Apr 25 18:15:51 2026 GMT
        Subject: CN=69e3ca57-dba1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:90:09:8d:4c:09:03:5d:2e:73:05:ec:ca:a2:
                    b7:70:99:de:97:86:d3:38:7a:05:f9:9c:da:0f:07:
                    11:5b:50:a7:29:f5:b1:74:d5:66:55:43:9a:31:e4:
                    8f:99:3d:bf:3f:30:9d:39:c3:b6:ce:bb:e6:fd:ce:
                    3e:96:14:b8:47:33:fc:53:d7:f9:c9:3f:73:d7:3b:
                    eb:8d:68:13:3c:c6:ca:ea:47:76:da:a0:dc:da:c5:
                    05:d9:95:04:9f:2c:15:bc:80:95:e2:c1:e3:87:ca:
                    ea:51:4d:64:55:25:0e:13:bb:c6:e8:62:a0:c3:02:
                    4b:f6:02:35:44:37:59:d5:c7:d3:04:ae:02:41:d8:
                    60:a3:cb:5a:47:18:32:8f:20:4b:51:60:09:ec:33:
                    82:9a:07:ba:27:0d:fb:bc:53:48:b5:82:9b:0f:5f:
                    1f:36:f4:64:4c:1d:29:3c:0e:40:32:46:34:b1:f4:
                    ec:6b:d1:91:13:71:ec:ae:0d:b5:b3:f0:a6:92:86:
                    01:bd:78:83:bf:e2:54:73:e1:f6:53:00:24:c9:bd:
                    9e:0a:fc:56:3b:b6:20:8a:ef:86:df:d4:84:3d:67:
                    fd:de:73:3b:87:a5:5d:af:6c:3b:35:b4:2d:01:01:
                    a5:09:76:56:36:81:b3:b7:c3:a7:64:b9:07:92:71:
                    38:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:B8:6B:02:BF:BF:C6:F9:83:F3:22:0F:DA:D4:AC:BD:9D:44:85:3A
            X509v3 Authority Key Identifier:
                keyid:BD:D5:EB:15:63:38:39:3D:74:4D:AE:2F:C5:32:D5:83:2B:C7:85:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vdXrFWM4OT10Ta4vxTLVgyvHhb8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:82:bb:c0:a2:59:be:16:8a:f7:19:d6:5f:cb:39:e6:32:5f:
         6f:01:d9:08:0f:0e:7c:d3:53:44:b9:e7:89:12:87:b2:d9:3c:
         b4:c6:2c:a1:90:c5:08:5e:ed:b7:72:25:2f:2e:73:e9:96:59:
         eb:42:52:c6:3d:d1:4c:c8:8a:dd:75:e4:a3:5d:ac:13:09:36:
         ae:ec:ce:ae:c3:2d:a1:5f:7f:0d:4e:d3:a6:e9:b9:43:7d:cf:
         0a:45:a4:4d:28:20:6a:92:89:a4:ff:ca:aa:8f:c7:49:4a:aa:
         7a:7b:c0:90:5e:c1:a1:35:3e:3d:59:e8:73:1a:e3:50:67:ee:
         ee:07:58:4f:fd:36:28:d6:71:d1:85:ad:c3:7b:d4:a8:9d:99:
         53:b5:f6:3a:a0:7d:52:9f:af:44:e3:ba:98:8f:b5:51:31:c3:
         5d:9f:d8:c8:ed:d2:97:9e:6d:13:b0:b1:d2:7b:98:47:1d:28:
         af:4c:5a:77:2d:0a:b3:e9:60:06:57:5c:f9:c2:a4:f6:3f:96:
         25:2d:93:2e:d9:fe:9b:4e:4b:d6:68:25:35:da:7d:45:e4:5d:
         c7:7e:22:bd:c7:16:56:50:e8:2f:87:7b:0c:7e:7d:3c:1e:a5:
         a1:6a:f7:4e:9c:dc:78:e4:36:93:96:e7:89:eb:c0:d2:9f:59:
         06:1d:c7:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:22:28 2026 by rpki-client