Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.mft
File:                     vkiLTmCsanOmVu_bxfpnoajegSo.mft (raw, json)
Hash identifier:          dCYyabqUqUNtKJC9Q4tyyNu5P4WnEAIB27vwZWOXwQY=
Subject key identifier:   CD:7A:C1:8F:60:61:11:02:26:0F:59:88:CD:F1:E6:C8:17:DB:97:36
Authority key identifier: BE:48:8B:4E:60:AC:6A:73:A6:56:EF:DB:C5:FA:67:A1:A8:DE:81:2A
Certificate issuer:       /CN=A91ADE0A/serialNumber=BE488B4E60AC6A73A656EFDBC5FA67A1A8DE812A
Certificate serial:       233A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkiLTmCsanOmVu_bxfpnoajegSo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.mft
Manifest number:          22F6
Signing time:             Thu 16 Apr 2026 15:48:39 +0000
Manifest this update:     Thu 16 Apr 2026 15:48:38 +0000
Manifest next update:     Thu 23 Apr 2026 15:48:38 +0000
Files and hashes:         1: vkiLTmCsanOmVu_bxfpnoajegSo.crl (hash: QBX+Ygo7/M5Of+JIa/eYh1Q/i7wzycuiV07qa55Otls=)
                          2: 4AB8D38E178811EF95C8DF41C4F9AE02.roa (hash: 1Kz1vE1HOF5/kl+i8Rr4tSzcXBMpG4BgFwTZXnp4/e4=)
                          3: 815465903EB511E9881B6529C4F9AE02.roa (hash: +ANu6JmCUfWc/fEshVMRk/CtwPkSloyzKlXpU5KCY3Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.crl
                          rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkiLTmCsanOmVu_bxfpnoajegSo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 15:48:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9018 (0x233a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADE0A, serialNumber=BE488B4E60AC6A73A656EFDBC5FA67A1A8DE812A
        Validity
            Not Before: Apr 16 15:48:38 2026 GMT
            Not After : Apr 23 15:48:38 2026 GMT
        Subject: CN=69e104d6-9617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1d:a1:fb:df:ad:7c:60:4b:a1:45:e4:72:a0:
                    95:8f:79:1c:62:59:35:e2:47:1c:dc:b8:8d:1d:15:
                    d3:01:fa:95:5e:af:e1:f8:af:66:13:07:55:98:f7:
                    c7:d4:fa:79:df:73:38:e6:6b:be:05:b0:e5:f1:fd:
                    d8:09:6e:ce:41:8a:fb:48:b9:38:59:a9:26:aa:4e:
                    a6:d6:92:33:67:18:8e:ae:05:65:3b:2c:a4:29:06:
                    76:99:a7:95:d3:b3:6b:28:66:85:6b:70:fd:df:5c:
                    d5:11:b9:7d:fd:94:88:42:83:7d:8d:ce:b5:e7:46:
                    ba:a1:b0:ff:86:b3:56:1c:91:99:79:6d:e6:ba:20:
                    5b:8a:8f:5d:97:65:f8:d3:25:aa:1f:dd:dc:43:8f:
                    8e:8c:2b:39:7d:0b:1d:49:e5:51:8d:80:8d:df:6d:
                    90:77:2d:36:8f:0f:22:b1:eb:8f:7e:a0:cf:fa:60:
                    b0:3c:ec:00:86:45:ba:eb:89:29:7c:7b:69:b2:dc:
                    d8:10:f5:4e:c2:96:c2:88:1c:31:ae:f0:cf:64:fc:
                    76:3d:9c:70:62:73:e3:d1:ab:3f:5f:8b:d3:25:7f:
                    35:9e:bb:d5:25:e9:69:4a:2b:c8:0b:ab:61:61:71:
                    a9:47:d1:09:6d:ac:73:fc:c9:7e:74:59:63:66:4c:
                    7c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:7A:C1:8F:60:61:11:02:26:0F:59:88:CD:F1:E6:C8:17:DB:97:36
            X509v3 Authority Key Identifier:
                keyid:BE:48:8B:4E:60:AC:6A:73:A6:56:EF:DB:C5:FA:67:A1:A8:DE:81:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkiLTmCsanOmVu_bxfpnoajegSo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:c5:43:a2:ec:6f:38:81:16:13:ac:aa:c9:e1:8c:42:93:65:
         1b:0b:0e:1e:3d:ab:de:e8:5f:ce:89:e1:5d:5a:12:bc:92:45:
         b2:6f:1c:87:fc:57:89:6d:64:dd:5e:33:f4:28:e0:c3:9d:1b:
         5f:60:30:d5:96:94:e0:58:1c:fd:33:89:97:60:d8:c6:16:a8:
         c6:49:bc:3f:1c:20:cd:6a:78:dd:10:70:43:e5:79:d6:e1:b7:
         0d:e2:ab:04:82:f7:fd:17:95:6a:9f:46:cc:04:86:bf:b8:53:
         5d:67:82:a9:cd:c9:eb:e1:9c:56:85:4f:ad:da:70:3e:40:d2:
         fe:9e:45:59:c4:f9:dc:ad:04:d1:60:0d:2f:34:f6:c2:b4:06:
         d6:84:fb:ca:0a:d5:81:57:65:05:b6:00:83:c9:88:7e:86:05:
         c9:06:21:69:bf:41:7f:fe:f4:89:bb:20:8c:d3:b9:d4:af:22:
         64:d8:51:d6:95:25:72:c9:55:33:52:73:85:80:a4:9f:36:1f:
         89:3f:1e:97:10:a2:7b:57:ad:6f:1a:92:7e:d6:07:c6:bd:9d:
         52:24:a9:ec:fe:bc:ed:44:e4:40:a0:a1:ce:5d:c3:2e:4d:f0:
         9f:79:04:73:76:68:b7:1a:b5:e3:af:fd:0a:5e:af:42:4a:3e:
         13:47:1a:0c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICIzowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QURFMEExMTAvBgNVBAUTKEJFNDg4QjRFNjBBQzZBNzNBNjU2RUZEQkM1RkE2N0Ex
QThERTgxMkEwHhcNMjYwNDE2MTU0ODM4WhcNMjYwNDIzMTU0ODM4WjAYMRYwFAYD
VQQDEw02OWUxMDRkNi05NjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAth2h+9+tfGBLoUXkcqCVj3kcYlk14kcc3LiNHRXTAfqVXq/h+K9mEwdVmPfH
1Pp533M45mu+BbDl8f3YCW7OQYr7SLk4Wakmqk6m1pIzZxiOrgVlOyykKQZ2maeV
07NrKGaFa3D931zVEbl9/ZSIQoN9jc6150a6obD/hrNWHJGZeW3muiBbio9dl2X4
0yWqH93cQ4+OjCs5fQsdSeVRjYCN322Qdy02jw8iseuPfqDP+mCwPOwAhkW664kp
fHtpstzYEPVOwpbCiBwxrvDPZPx2PZxwYnPj0as/X4vTJX81nrvVJelpSivIC6th
YXGpR9EJbaxz/Ml+dFljZkx89wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM16wY9g
YRECJg9ZiM3x5sgX25c2MB8GA1UdIwQYMBaAFL5Ii05grGpzplbv28X6Z6Go3oEq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREUwQS8zMEQ4MDEyNkMx
MTMxMUU1QjAxQTcyNjlDNEY5QUUwMi92a2lMVG1Dc2FuT21WdV9ieGZwbm9hamVn
U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZraUxUbUNzYW5PbVZ1X2J4ZnBub2FqZWdTby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
REUwQS8zMEQ4MDEyNkMxMTMxMUU1QjAxQTcyNjlDNEY5QUUwMi92a2lMVG1Dc2Fu
T21WdV9ieGZwbm9hamVnU28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAB8VDouxvOIEWE6yqyeGMQpNlGwsOHj2r3uhfzonhXVoSvJJFsm8ch/xXiW1k
3V4z9Cjgw50bX2Aw1ZaU4Fgc/TOJl2DYxhaoxkm8PxwgzWp43RBwQ+V51uG3DeKr
BIL3/ReVap9GzASGv7hTXWeCqc3J6+GcVoVPrdpwPkDS/p5FWcT53K0E0WANLzT2
wrQG1oT7ygrVgVdlBbYAg8mIfoYFyQYhab9Bf/70ibsgjNO51K8iZNhR1pUlcslV
M1JzhYCknzYfiT8elxCie1etbxqSftYHxr2dUiSp7P687UTkQKChzl3DLk3wn3kE
c3Zotxq146/9Cl6vQko+E0caDA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:20:24 2026 by rpki-client