Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B00DC/2FBBC36E001811F1B6A12A14426F56BC/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.mft
File:                     Vd5CtrGL1XmaJuhCmWED-jS8Fxg.mft (raw, json)
Hash identifier:          r4+XXlf5Dm2CmLl6zdJwIbSS9HmapHw1iKL39h05pe0=
Subject key identifier:   11:1B:C6:8F:02:2D:F8:51:ED:2C:B8:AF:88:2F:CB:53:F0:71:42:05
Authority key identifier: 55:DE:42:B6:B1:8B:D5:79:9A:26:E8:42:99:61:03:FA:34:BC:17:18
Certificate issuer:       /CN=A91B00DC/serialNumber=55DE42B6B18BD5799A26E842996103FA34BC1718
Certificate serial:       2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B00DC/2FBBC36E001811F1B6A12A14426F56BC/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.mft
Manifest number:          2A
Signing time:             Fri 17 Apr 2026 08:28:35 +0000
Manifest this update:     Fri 17 Apr 2026 08:28:35 +0000
Manifest next update:     Fri 24 Apr 2026 08:28:35 +0000
Files and hashes:         1: Vd5CtrGL1XmaJuhCmWED-jS8Fxg.crl (hash: cWonnCuI9B6nplaSw/2XtP5pw483fdLV26SFmBPJY2Y=)
                          2: 63ABE3C0001811F1804E761C426F56BC.roa (hash: DthUWy6Hm+llw2ps4qbubO2gT5P5TYvR85rrtYYcYEE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B00DC/2FBBC36E001811F1B6A12A14426F56BC/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.crl
                          rsync://rpki.apnic.net/member_repository/A91B00DC/2FBBC36E001811F1B6A12A14426F56BC/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B00DC, serialNumber=55DE42B6B18BD5799A26E842996103FA34BC1718
        Validity
            Not Before: Apr 17 08:28:35 2026 GMT
            Not After : Apr 24 08:28:35 2026 GMT
        Subject: CN=69e1ef33-d7c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b6:95:61:b9:0d:81:a2:1f:a3:b2:69:fc:f3:
                    ee:dd:ab:cf:74:88:59:53:fa:3b:3e:15:46:76:62:
                    6b:98:2f:89:48:20:cf:5c:ab:44:64:80:aa:54:b2:
                    c9:d0:cf:03:16:39:34:1a:91:61:63:63:2d:4f:24:
                    99:6d:37:4f:74:c2:b3:8b:06:40:16:20:f2:39:7f:
                    c1:8f:d4:a7:e4:93:db:4e:8f:00:63:71:6c:f6:1e:
                    98:12:8d:1b:63:71:ca:66:6e:55:dd:41:63:b3:28:
                    df:73:91:72:67:d9:c1:12:07:4e:b7:d7:59:67:90:
                    0b:62:b4:0b:1d:9f:28:d6:3d:15:09:9b:40:ad:38:
                    24:69:b7:90:29:31:c5:f0:b1:f4:5a:54:cc:16:6b:
                    cd:38:33:df:62:69:30:fc:7a:81:43:cd:d4:ce:1e:
                    f1:af:c6:d1:14:d4:37:36:02:6a:83:1f:71:75:fa:
                    53:5d:14:1c:e1:dc:0f:e5:73:55:89:af:81:56:81:
                    47:0a:da:c5:4b:7e:54:81:4c:0a:45:6b:f9:a7:9b:
                    43:6b:8a:15:b5:3e:31:d2:f3:e2:a6:e1:c4:1d:b3:
                    d3:e5:86:25:b4:64:b8:80:6a:71:ad:8b:85:b2:21:
                    e7:2b:22:e4:8c:68:97:64:7f:02:f2:5e:d3:bc:b4:
                    7d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:1B:C6:8F:02:2D:F8:51:ED:2C:B8:AF:88:2F:CB:53:F0:71:42:05
            X509v3 Authority Key Identifier:
                keyid:55:DE:42:B6:B1:8B:D5:79:9A:26:E8:42:99:61:03:FA:34:BC:17:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B00DC/2FBBC36E001811F1B6A12A14426F56BC/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B00DC/2FBBC36E001811F1B6A12A14426F56BC/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:04:2b:11:21:00:4d:9f:79:f3:28:aa:1e:f8:39:e7:9a:24:
         17:92:88:44:b9:22:7f:65:9d:d3:cd:70:85:c6:27:13:d5:30:
         9e:49:3e:4d:eb:f9:01:74:55:23:b8:cd:54:9d:00:0e:a9:c7:
         95:d0:70:e3:22:65:dc:8d:3e:7f:83:49:28:d5:88:41:d9:44:
         f5:a6:93:4f:cf:f7:c0:fa:cb:28:8a:92:a6:d4:73:63:4f:4e:
         09:ea:d2:7b:54:b1:fb:2b:e8:9b:51:d8:2f:4e:26:a2:ea:b1:
         29:c1:26:ba:11:10:5b:16:28:8d:64:e7:ff:2c:f6:57:b8:3f:
         07:71:fc:be:f3:a2:1b:ce:a0:4e:3c:26:b0:4f:45:29:ac:fb:
         32:f8:d1:9a:e2:47:2e:9f:1d:de:81:bc:b3:b6:e7:8b:a1:fd:
         f9:3b:ae:19:c6:93:d0:d3:77:18:9f:56:0a:69:6a:e0:94:7d:
         5b:73:23:7a:34:60:e9:b4:1b:77:14:22:27:4b:7e:81:bb:f4:
         d1:fd:ed:4b:90:71:71:bc:16:da:a2:0b:c4:f7:04:e6:69:75:
         40:6f:dc:e8:5e:34:42:c2:62:17:a3:dc:c1:6f:15:f1:4d:79:
         63:16:c5:41:1a:1e:47:e2:2b:3a:b3:ab:81:bc:a0:35:77:38:
         03:e7:37:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:30:16 2026 by rpki-client