Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.mft
File:                     VIY3awW4olUjKeNhvXJcd-H40Mk.mft (raw, json)
Hash identifier:          amKXES8/yqEg4MvJedwpIqIHcz+nL73nyLuV6uhd28c=
Subject key identifier:   D9:39:AC:FA:63:74:75:98:A8:4B:2C:93:FA:03:EC:D8:C5:BB:E3:70
Authority key identifier: 54:86:37:6B:05:B8:A2:55:23:29:E3:61:BD:72:5C:77:E1:F8:D0:C9
Certificate issuer:       /CN=A91D17F2/serialNumber=5486376B05B8A2552329E361BD725C77E1F8D0C9
Certificate serial:       0DFA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIY3awW4olUjKeNhvXJcd-H40Mk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.mft
Manifest number:          0D93
Signing time:             Thu 16 Apr 2026 18:01:13 +0000
Manifest this update:     Thu 16 Apr 2026 18:01:13 +0000
Manifest next update:     Thu 23 Apr 2026 18:01:13 +0000
Files and hashes:         1: VIY3awW4olUjKeNhvXJcd-H40Mk.crl (hash: kJ0LVoLp41Kr5JYJ9ushGtVV0ANY0CN6vditxgu46/o=)
                          2: C97A1A3EB41C11F0AFF91911C4F9AE02.roa (hash: nJl/9CFmVp29B4Ix10HGbDmYMJPOnZIRDaogeFvZyK4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.crl
                          rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIY3awW4olUjKeNhvXJcd-H40Mk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 18:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3578 (0xdfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D17F2, serialNumber=5486376B05B8A2552329E361BD725C77E1F8D0C9
        Validity
            Not Before: Apr 16 18:01:13 2026 GMT
            Not After : Apr 23 18:01:13 2026 GMT
        Subject: CN=69e123e9-bd11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b9:e2:86:e1:ed:74:0e:ea:d7:4d:85:3a:04:
                    f8:78:b5:05:ed:9f:0b:31:bb:69:b1:8d:c8:67:c8:
                    9e:4d:72:92:16:e9:00:17:77:67:69:cf:69:c8:2a:
                    9a:6d:5f:cc:26:c4:6d:3a:b0:42:2c:77:e2:96:95:
                    47:ec:a8:a2:f3:f0:07:4d:91:ed:55:24:dc:8d:de:
                    a9:14:c5:1f:35:c6:5b:b2:7b:c8:f5:79:19:9a:56:
                    ba:ca:e5:1d:28:e6:77:dc:ac:1b:6a:8c:aa:07:b9:
                    cd:69:c3:78:53:fc:f2:ff:8e:64:c2:a9:7a:87:e7:
                    ec:59:48:c7:aa:0a:8d:ce:57:2e:e6:70:35:06:03:
                    9f:37:74:9e:f0:b4:fd:30:22:8c:11:d1:ce:a2:32:
                    a7:47:c7:7d:cb:f9:92:8a:f2:39:bc:4e:29:95:7a:
                    fc:7a:66:64:07:48:5d:e5:89:ed:51:53:4e:4f:56:
                    13:c5:70:c0:9e:2a:26:fe:24:4b:a6:91:26:b9:59:
                    c2:73:d4:cb:b1:70:d7:c8:47:07:ca:e2:6b:f0:05:
                    c3:80:54:b1:87:b1:6b:59:29:4d:58:9f:12:94:d0:
                    4e:29:2d:21:d7:da:88:aa:56:32:33:47:a0:ab:4e:
                    27:93:97:94:c6:d3:1d:e2:ef:d9:68:23:ff:45:c1:
                    1c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:39:AC:FA:63:74:75:98:A8:4B:2C:93:FA:03:EC:D8:C5:BB:E3:70
            X509v3 Authority Key Identifier:
                keyid:54:86:37:6B:05:B8:A2:55:23:29:E3:61:BD:72:5C:77:E1:F8:D0:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIY3awW4olUjKeNhvXJcd-H40Mk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:3c:bf:48:8e:ad:85:2a:71:1c:5f:d7:fd:7b:8d:0d:d1:10:
         38:14:fc:a8:79:83:a9:13:01:52:b8:1f:4b:f2:be:80:c6:0f:
         1f:09:9e:cd:78:db:92:83:3c:65:5a:c8:15:a9:18:b9:97:1f:
         12:db:7e:24:e0:86:64:a7:73:07:5b:fc:a9:fe:e4:05:9b:c1:
         1a:04:ba:a2:bf:7c:0e:ed:7b:7d:15:93:66:98:09:0b:ea:e5:
         f7:cf:2b:6e:e4:69:87:9c:f9:d5:7b:20:50:86:a4:e9:6e:45:
         f1:cc:51:2a:c0:23:9f:f0:fb:47:9c:0a:da:e2:60:94:d4:a5:
         65:50:55:87:1a:66:1e:93:f9:9c:55:c5:7a:98:1d:02:6c:51:
         5d:6a:7b:56:d8:e7:b6:a2:64:b6:af:ec:8d:c4:e6:a3:53:d7:
         99:28:03:e3:b7:7b:d4:37:2f:d9:aa:2c:44:bc:c8:ae:be:7a:
         85:45:49:f6:2d:62:2f:a4:e2:8b:54:31:5c:5d:1d:d2:05:ad:
         d9:54:56:5f:74:94:be:2c:2c:c1:3d:3d:1d:1d:76:7f:b3:43:
         76:3f:32:5e:c7:52:28:04:15:09:2c:4a:cf:29:56:a1:00:b8:
         4d:ed:f4:b1:56:92:9b:63:53:8c:27:04:0e:8d:04:ea:1f:5d:
         53:13:ae:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:17:57 2026 by rpki-client