Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.mft
File:                     vGOOV8p7khRPunE61ttk5tCtSZE.mft (raw, json)
Hash identifier:          wUjCVmu+faJ3S85Ku3BM3zu74HiC0dsq7v3ykqyA8uM=
Subject key identifier:   6D:68:E6:49:AC:11:D0:BB:FE:C1:E0:AB:F9:83:DB:EE:77:5A:6F:A0
Authority key identifier: BC:63:8E:57:CA:7B:92:14:4F:BA:71:3A:D6:DB:64:E6:D0:AD:49:91
Certificate issuer:       /CN=A91D31B0/serialNumber=BC638E57CA7B92144FBA713AD6DB64E6D0AD4991
Certificate serial:       0348
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vGOOV8p7khRPunE61ttk5tCtSZE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.mft
Manifest number:          0340
Signing time:             Fri 17 Apr 2026 00:53:06 +0000
Manifest this update:     Fri 17 Apr 2026 00:53:06 +0000
Manifest next update:     Fri 24 Apr 2026 00:53:06 +0000
Files and hashes:         1: vGOOV8p7khRPunE61ttk5tCtSZE.crl (hash: kw5PY7vt0hB+t6Df3JTOsyYE6mdQ5XeqCzuaqNc/p8s=)
                          2: 7BB181E201BA11EDA4103D0DC4F9AE02.roa (hash: NnBviFT4TY6Qwr2zsDo63Z5Jckcd6G9/6LCOasbnkg8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.crl
                          rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vGOOV8p7khRPunE61ttk5tCtSZE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:53:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 840 (0x348)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D31B0, serialNumber=BC638E57CA7B92144FBA713AD6DB64E6D0AD4991
        Validity
            Not Before: Apr 17 00:53:06 2026 GMT
            Not After : Apr 24 00:53:06 2026 GMT
        Subject: CN=69e18472-45e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:78:42:53:cf:41:bb:37:fb:96:d1:54:a7:15:
                    e8:84:d3:80:e6:31:64:b5:b4:3f:53:81:66:40:a7:
                    fa:9c:cb:86:08:95:1e:24:ac:83:ce:6f:9f:05:d4:
                    56:16:bc:4c:13:72:e0:2d:37:35:f5:00:5f:69:db:
                    dd:db:c4:cc:15:81:a4:da:5b:f0:e8:de:52:d7:80:
                    45:33:b6:93:07:ef:bc:cc:d7:95:6d:26:4c:57:81:
                    32:ed:cc:37:97:92:0f:76:55:28:19:b5:c6:26:66:
                    39:cd:5a:95:4e:74:1c:0c:2e:d1:79:d2:6b:f2:ad:
                    3f:1b:17:1e:da:33:f6:f8:40:76:cb:7c:ba:0e:b0:
                    41:28:4c:59:96:76:94:c7:9f:84:42:e0:94:16:cd:
                    5e:2f:da:6b:5f:66:17:e9:44:cc:39:f8:19:70:a0:
                    f5:b1:17:b2:98:79:ed:7c:16:51:c0:cb:38:4a:e2:
                    b0:06:24:ec:1b:ee:79:ba:37:1c:ee:24:56:30:22:
                    f2:6c:5d:05:80:26:a0:19:df:19:e7:ae:63:0a:ea:
                    9b:b7:6b:00:3e:ad:e0:50:1b:39:97:37:a6:f1:ef:
                    d2:85:4b:a6:4a:3f:d4:4e:8f:9c:08:41:a8:9b:f6:
                    44:00:d8:8c:21:71:df:cd:00:3d:dc:51:1e:62:32:
                    22:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:68:E6:49:AC:11:D0:BB:FE:C1:E0:AB:F9:83:DB:EE:77:5A:6F:A0
            X509v3 Authority Key Identifier:
                keyid:BC:63:8E:57:CA:7B:92:14:4F:BA:71:3A:D6:DB:64:E6:D0:AD:49:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vGOOV8p7khRPunE61ttk5tCtSZE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:c7:55:b2:ab:25:29:36:6a:2a:af:62:85:2c:99:a9:52:56:
         4a:74:0f:d2:19:92:40:37:57:93:f1:b9:39:ba:00:5f:98:a7:
         62:f2:ef:c4:72:23:18:75:cb:a3:8c:e2:d9:0c:0f:95:ae:e1:
         93:a3:fc:44:d3:49:d1:78:dc:0b:ca:a9:c5:b8:eb:1d:59:33:
         01:8a:f7:58:b8:42:84:35:3b:1b:c3:dd:17:3f:57:7a:3c:ce:
         d7:df:23:53:24:93:d8:50:78:d6:44:47:e1:a0:36:46:63:aa:
         65:18:ef:6e:d1:0a:e6:f7:fc:b9:13:09:54:f2:9c:1b:eb:10:
         e2:98:b3:91:48:0a:08:7f:75:68:68:a4:99:f3:c0:29:f8:ff:
         c2:67:1d:d1:6b:f7:f1:b2:8a:d4:59:7d:5d:17:51:bc:fe:b7:
         e9:52:ec:78:15:a3:3c:86:6c:46:1c:80:ef:6b:fd:a3:13:48:
         b9:8c:57:9a:63:b3:3c:26:54:45:87:0e:7a:f5:c5:66:60:13:
         6f:a4:28:34:38:97:9a:04:aa:55:b9:b7:5d:79:7c:12:13:c4:
         c0:5f:2c:9d:df:52:f0:1e:07:bf:64:6a:3f:a7:c4:53:38:c3:
         a2:f0:7c:83:f4:26:ca:19:50:93:a8:ab:65:8d:15:63:0f:e7:
         3e:cd:35:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:45:23 2026 by rpki-client