Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft
File:                     M-VCXQNo-C_4W5uEf0EjitWNTlA.mft (raw, json)
Hash identifier:          RGm2Q6FXyw6GIoYu7rLiVTc2YN67gsoanG86vXCqEQ0=
Subject key identifier:   42:B4:41:91:D3:FA:A9:05:16:D0:43:7D:4C:E5:36:36:9F:8F:4B:69
Authority key identifier: 33:E5:42:5D:03:68:F8:2F:F8:5B:9B:84:7F:41:23:8A:D5:8D:4E:50
Certificate issuer:       /CN=A91CFD5A/serialNumber=33E5425D0368F82FF85B9B847F41238AD58D4E50
Certificate serial:       01BD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M-VCXQNo-C_4W5uEf0EjitWNTlA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft
Manifest number:          01AB
Signing time:             Fri 17 Apr 2026 03:52:28 +0000
Manifest this update:     Fri 17 Apr 2026 03:52:28 +0000
Manifest next update:     Fri 24 Apr 2026 03:52:28 +0000
Files and hashes:         1: M-VCXQNo-C_4W5uEf0EjitWNTlA.crl (hash: rjQn4dAlvUb6NMosQjrVHxIGNe6THuKXoSv/d43tOdI=)
                          2: D677E18AB9AF11EE97EEDB49C4F9AE02.roa (hash: 4BM5LIM23GXw5AfkXFzMdqX+Y7TcpkGGG81Gw9eoyBY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.crl
                          rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M-VCXQNo-C_4W5uEf0EjitWNTlA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 445 (0x1bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFD5A, serialNumber=33E5425D0368F82FF85B9B847F41238AD58D4E50
        Validity
            Not Before: Apr 17 03:52:28 2026 GMT
            Not After : Apr 24 03:52:28 2026 GMT
        Subject: CN=69e1ae7c-833b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b3:86:78:7d:bf:c4:43:7b:a8:2d:27:27:bb:
                    9c:ac:17:2e:fe:82:5b:90:40:96:32:08:27:be:d9:
                    38:44:e4:ef:91:7b:12:5e:45:4c:1e:d3:77:4b:fe:
                    75:cd:ae:a0:c5:be:88:bb:f1:c6:89:c2:4b:46:b8:
                    5e:46:2e:48:09:51:6e:b7:38:65:1c:33:61:fb:91:
                    60:6c:95:0b:f3:ca:79:91:50:2f:ef:30:ac:59:50:
                    c7:9a:21:0a:95:e0:95:94:a1:ae:ca:8b:73:47:f3:
                    22:e2:aa:e7:44:74:61:35:68:43:a9:8c:3d:d0:40:
                    db:78:36:9d:2b:00:7a:f0:49:9b:e9:1c:77:58:20:
                    0d:84:a5:9b:78:a3:2b:34:7a:81:11:60:f2:73:e9:
                    df:94:3b:87:ef:47:db:a0:74:6b:a7:7e:db:e2:0a:
                    fb:4d:ee:a5:23:eb:3b:34:76:f1:a7:6c:d1:97:f1:
                    e9:6b:ed:cd:3a:2c:9c:55:0a:b9:cb:aa:9f:fb:39:
                    47:9d:4b:5b:c5:78:35:83:8f:62:9f:e8:7c:ff:f1:
                    01:5f:b8:c2:a4:31:b7:dc:b7:9e:73:da:d4:30:db:
                    9c:5b:72:87:cd:28:53:00:a4:5f:d2:db:f3:4a:71:
                    38:a3:c4:a9:de:5f:43:57:84:b3:f8:8c:d4:51:3d:
                    2f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:B4:41:91:D3:FA:A9:05:16:D0:43:7D:4C:E5:36:36:9F:8F:4B:69
            X509v3 Authority Key Identifier:
                keyid:33:E5:42:5D:03:68:F8:2F:F8:5B:9B:84:7F:41:23:8A:D5:8D:4E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M-VCXQNo-C_4W5uEf0EjitWNTlA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:0b:16:23:32:03:d1:be:46:9f:18:2e:9e:2c:53:35:1a:52:
         73:78:8c:34:a2:f2:67:76:b4:3d:3c:8e:0c:83:65:ca:bb:2f:
         ed:12:89:66:44:1b:5e:e7:c0:f8:58:7d:33:36:d0:c6:47:f6:
         f6:71:d5:6c:f8:6f:21:42:63:ec:94:51:0e:22:fd:11:df:59:
         b2:08:4c:21:9c:56:d2:48:1e:95:0f:f7:20:67:45:20:fb:76:
         5c:80:43:11:a9:87:42:6f:2a:b9:e2:19:7e:da:98:26:ee:4f:
         93:04:d7:33:c5:41:df:1d:17:b3:83:e0:1c:e5:69:67:76:0a:
         58:28:cf:7c:86:69:ab:27:d9:c1:82:be:7e:c5:7d:f8:76:1e:
         c5:34:52:0f:14:13:fa:a1:c9:d2:72:bb:b1:d8:95:e6:25:e4:
         f0:0c:4d:37:74:a8:57:70:9c:b5:2b:b0:08:52:e8:32:9d:52:
         47:13:61:db:32:72:5f:8b:da:4d:04:89:dc:90:cc:b4:8c:97:
         7c:99:71:e9:a1:af:0e:7b:5e:5f:3a:db:52:e1:6e:62:e5:b6:
         3d:ba:c7:dd:a5:3e:44:73:1c:38:f7:b8:70:61:18:8b:17:8b:
         00:c5:32:e4:91:20:f1:2b:65:7d:52:0c:17:d8:48:5d:77:a6:
         e4:c6:d9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:44:05 2026 by rpki-client