Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.mft
File:                     vELDvIdcBnayn9eryfgbSpH9iok.mft (raw, json)
Hash identifier:          PV99pZufaszyvHnYgzN67RuXQIkSNesvHdArUDf/2R0=
Subject key identifier:   60:80:09:F3:AE:6B:1F:64:56:E1:BD:AC:04:02:B9:42:E2:20:26:B1
Authority key identifier: BC:42:C3:BC:87:5C:06:76:B2:9F:D7:AB:C9:F8:1B:4A:91:FD:8A:89
Certificate issuer:       /CN=A91B7D14/serialNumber=BC42C3BC875C0676B29FD7ABC9F81B4A91FD8A89
Certificate serial:       0130
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vELDvIdcBnayn9eryfgbSpH9iok.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.mft
Manifest number:          012B
Signing time:             Fri 17 Apr 2026 05:18:09 +0000
Manifest this update:     Fri 17 Apr 2026 05:18:09 +0000
Manifest next update:     Fri 24 Apr 2026 05:18:09 +0000
Files and hashes:         1: vELDvIdcBnayn9eryfgbSpH9iok.crl (hash: oXhSeG/9iosysyfCbeTjv+bSQ7xQfRCYg1UkmX0y97A=)
                          2: AAA33A7A74B011EF85E1C348C4F9AE02.roa (hash: FW4g/QhH4gL1hdaSiCtFk1K0xDP8/LV5Fbh+qpfxD0o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.crl
                          rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vELDvIdcBnayn9eryfgbSpH9iok.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:18:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 304 (0x130)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7D14, serialNumber=BC42C3BC875C0676B29FD7ABC9F81B4A91FD8A89
        Validity
            Not Before: Apr 17 05:18:09 2026 GMT
            Not After : Apr 24 05:18:09 2026 GMT
        Subject: CN=69e1c291-3723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:06:37:b4:6c:95:99:82:8c:c1:14:0c:f4:99:
                    1f:5f:ba:65:56:c6:7e:89:d2:a8:20:cf:fc:28:7b:
                    7a:da:08:55:66:33:52:2f:c0:7d:e2:6f:5e:4f:a3:
                    8d:7c:6d:d8:46:11:70:f6:af:27:c3:1d:18:ee:58:
                    68:0f:5e:79:0f:40:a1:2d:dd:eb:de:d0:88:ab:2e:
                    6c:b8:c9:1e:83:b1:c8:9e:03:e5:e9:ad:a8:cb:ea:
                    af:c0:f6:e7:03:d5:83:82:5d:bd:3f:45:14:b9:bd:
                    e9:f1:af:54:0c:b8:2a:3a:20:d1:ea:57:42:a0:ca:
                    c0:cb:8d:e2:c2:e2:a2:35:af:68:43:fe:a5:fe:49:
                    ac:c6:81:29:a6:e7:51:a2:7c:51:70:70:df:e3:52:
                    a0:0d:24:bf:9e:49:8a:4e:03:aa:75:ac:8e:67:ac:
                    10:bb:25:2c:4a:cd:f9:bd:b4:32:dd:29:b2:5d:9e:
                    08:23:40:00:25:d5:ff:20:34:2b:8e:4d:86:eb:b2:
                    56:ce:ab:d5:03:3b:03:4a:4b:60:d2:24:d8:fa:a0:
                    29:d1:94:66:10:94:ed:a3:60:87:1a:32:be:0d:f5:
                    ff:a1:63:fa:1a:75:8c:eb:c3:94:1a:cf:41:66:8b:
                    88:c5:2a:08:41:73:61:12:23:75:4f:e6:83:19:1d:
                    74:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:80:09:F3:AE:6B:1F:64:56:E1:BD:AC:04:02:B9:42:E2:20:26:B1
            X509v3 Authority Key Identifier:
                keyid:BC:42:C3:BC:87:5C:06:76:B2:9F:D7:AB:C9:F8:1B:4A:91:FD:8A:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vELDvIdcBnayn9eryfgbSpH9iok.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:f5:20:88:48:f8:1a:d3:59:5a:cf:b9:a1:65:c4:6c:b7:f4:
         c9:0a:e4:3d:af:8a:fb:ba:09:b4:ca:a8:26:f9:90:62:09:ee:
         3c:26:2d:47:6f:81:5b:54:0e:d8:6b:b8:be:cb:a9:1e:05:cd:
         02:e2:00:c5:09:2a:d4:49:35:b9:b3:82:e5:be:de:10:8e:e1:
         ae:65:74:c4:15:ca:f2:01:0c:d7:84:63:6b:9f:3b:99:66:d4:
         15:d0:8b:65:41:83:4b:10:89:f6:42:eb:cf:9f:10:a2:67:69:
         3f:cc:fa:fa:88:8e:17:f9:55:2f:5b:0e:a6:71:b3:72:4c:ec:
         bd:9b:33:54:d2:8e:62:03:3a:7d:6a:02:72:ee:8e:b9:60:c8:
         84:92:57:6d:92:52:2d:70:31:4b:86:d7:39:ed:de:21:86:19:
         52:76:ab:62:ea:35:be:d8:be:bb:ae:fe:92:a9:87:e3:01:18:
         5c:b6:ac:dc:4f:c6:2e:b5:16:4d:54:c9:94:70:fb:10:88:6a:
         bb:02:9e:d4:82:cc:0a:cd:e5:4c:3f:c7:13:32:1d:67:e1:7e:
         6c:70:8e:d9:7b:d3:9c:45:86:a1:fe:d0:e0:da:7b:fa:27:23:
         96:cf:55:12:7f:99:db:dc:dd:1e:51:e0:ba:8e:e2:cb:00:6f:
         29:31:7c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:31:09 2026 by rpki-client