Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EEF/D7105BB6DEF311F09ED41296576F56BC/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.mft
File:                     vOqRFN-TbN6JT8CE-AjP0J4U9LQ.mft (raw, json)
Hash identifier:          SMQ0UmG9jxx0We6vVaK3RWDLe+7R+LWNc6DIePuXBME=
Subject key identifier:   D3:DC:D2:58:56:F5:01:7D:70:9A:6A:BC:40:BE:C8:89:3A:3A:5A:D6
Authority key identifier: BC:EA:91:14:DF:93:6C:DE:89:4F:C0:84:F8:08:CF:D0:9E:14:F4:B4
Certificate issuer:       /CN=A91E4EEF/serialNumber=BCEA9114DF936CDE894FC084F808CFD09E14F4B4
Certificate serial:       44
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4EEF/D7105BB6DEF311F09ED41296576F56BC/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.mft
Manifest number:          42
Signing time:             Fri 17 Apr 2026 08:11:01 +0000
Manifest this update:     Fri 17 Apr 2026 08:11:00 +0000
Manifest next update:     Fri 24 Apr 2026 08:11:00 +0000
Files and hashes:         1: vOqRFN-TbN6JT8CE-AjP0J4U9LQ.crl (hash: 9rb7Mww82Z/D5M4T5fqK7Z7IKKMdJnSwon4TVX80P84=)
                          2: 8C5382D6DEF511F0A9861D4A586F56BC.roa (hash: tby1fxG8dty2Idd5oP0UTbPf2lfAkyvFDEToKB0Y640=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4EEF/D7105BB6DEF311F09ED41296576F56BC/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E4EEF/D7105BB6DEF311F09ED41296576F56BC/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4EEF, serialNumber=BCEA9114DF936CDE894FC084F808CFD09E14F4B4
        Validity
            Not Before: Apr 17 08:11:00 2026 GMT
            Not After : Apr 24 08:11:00 2026 GMT
        Subject: CN=69e1eb15-d1fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:60:54:91:a0:94:8c:84:54:18:fe:00:c1:17:
                    b0:33:73:ea:64:04:f4:74:df:f6:68:d2:cf:96:88:
                    dc:f2:99:fe:92:04:be:9c:4a:93:a7:07:92:82:bb:
                    fa:b2:f5:67:a7:3b:42:5d:3c:83:fc:51:1c:92:37:
                    fb:23:5a:af:f1:9d:e5:b8:27:13:d4:35:d9:29:92:
                    b5:be:94:a9:dd:58:6f:c7:24:25:d6:ad:a5:fe:63:
                    f7:11:eb:b6:95:db:8e:ee:aa:f0:88:66:97:d0:86:
                    87:c7:05:a4:34:fe:fb:90:3f:f6:2d:bf:85:53:1f:
                    0b:7a:fd:0b:fd:05:0d:68:26:c7:e6:d0:6b:e6:2f:
                    79:3c:88:b2:9e:d1:91:d9:97:05:54:56:4e:30:15:
                    53:12:b9:9b:2b:7a:d7:d0:ca:9c:85:20:40:4f:48:
                    77:56:44:a5:63:13:44:71:ee:42:e9:36:13:44:bc:
                    f1:a0:3e:cb:d5:cd:d8:27:14:89:31:63:33:cd:1f:
                    35:43:45:7d:02:c2:ce:6e:4e:b2:d0:20:65:57:79:
                    52:83:ee:f9:95:48:53:16:0a:d1:50:1f:16:b4:16:
                    22:67:c2:d5:da:7e:bc:0c:2a:f4:44:02:84:6f:42:
                    cc:26:f7:50:c2:49:be:30:57:fd:3f:00:b2:e3:d5:
                    8e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:DC:D2:58:56:F5:01:7D:70:9A:6A:BC:40:BE:C8:89:3A:3A:5A:D6
            X509v3 Authority Key Identifier:
                keyid:BC:EA:91:14:DF:93:6C:DE:89:4F:C0:84:F8:08:CF:D0:9E:14:F4:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4EEF/D7105BB6DEF311F09ED41296576F56BC/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EEF/D7105BB6DEF311F09ED41296576F56BC/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:43:a2:10:61:00:44:84:80:45:51:a7:d2:62:d7:33:55:86:
         0a:23:1b:b9:bd:74:d5:5e:5b:a4:93:04:c9:4e:50:3c:73:6f:
         f2:bf:c3:79:7d:e5:61:89:e3:73:f5:cd:e7:f3:3b:f0:d8:4f:
         58:5b:01:11:84:05:30:96:be:7a:9d:26:fe:09:e5:24:6d:f5:
         79:8f:d8:a6:a6:85:cf:de:13:a8:60:2c:b5:01:0f:22:6b:27:
         f4:81:e6:f5:0d:4d:29:a6:bf:04:4b:96:68:e3:4f:c4:f5:a1:
         e9:e0:ab:d6:37:55:d0:89:e4:6d:9b:0b:4c:d8:44:6c:35:22:
         79:90:f6:cc:93:c7:39:2e:15:0b:db:de:12:7e:a1:0f:91:23:
         21:66:c4:d8:d6:8d:b1:7a:e8:ff:e7:cd:34:df:9e:b6:db:4e:
         fd:6a:0f:3f:8e:f6:66:82:f4:ae:8b:76:c9:07:46:01:8c:59:
         5f:34:93:04:bb:5e:98:ec:e3:78:c3:0b:ca:ef:16:45:e4:09:
         05:a8:89:d0:ef:98:af:78:05:a0:8e:b3:8a:36:ea:c3:a5:bb:
         21:ba:b7:45:29:c0:eb:fd:81:01:ab:8f:f8:3a:01:21:ef:15:
         e2:85:c4:ba:23:16:d5:fc:66:f7:77:27:88:cc:8f:77:ae:4b:
         d9:a7:d6:62
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
NEVFRjExMC8GA1UEBRMoQkNFQTkxMTRERjkzNkNERTg5NEZDMDg0RjgwOENGRDA5
RTE0RjRCNDAeFw0yNjA0MTcwODExMDBaFw0yNjA0MjQwODExMDBaMBgxFjAUBgNV
BAMTDTY5ZTFlYjE1LWQxZmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDsYFSRoJSMhFQY/gDBF7Azc+pkBPR03/Zo0s+WiNzymf6SBL6cSpOnB5KCu/qy
9WenO0JdPIP8URySN/sjWq/xneW4JxPUNdkpkrW+lKndWG/HJCXWraX+Y/cR67aV
247uqvCIZpfQhofHBaQ0/vuQP/Ytv4VTHwt6/Qv9BQ1oJsfm0GvmL3k8iLKe0ZHZ
lwVUVk4wFVMSuZsretfQypyFIEBPSHdWRKVjE0Rx7kLpNhNEvPGgPsvVzdgnFIkx
YzPNHzVDRX0Cws5uTrLQIGVXeVKD7vmVSFMWCtFQHxa0FiJnwtXafrwMKvREAoRv
Qswm91DCSb4wV/0/ALLj1Y43AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU09zSWFb1
AX1wmmq8QL7IiTo6WtYwHwYDVR0jBBgwFoAUvOqRFN+TbN6JT8CE+AjP0J4U9LQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0RUVGL0Q3MTA1QkI2REVG
MzExRjA5RUQ0MTI5NjU3NkY1NkJDL3ZPcVJGTi1UYk42SlQ4Q0UtQWpQMEo0VTlM
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvdk9xUkZOLVRiTjZKVDhDRS1BalAwSjRVOUxRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0
RUVGL0Q3MTA1QkI2REVGMzExRjA5RUQ0MTI5NjU3NkY1NkJDL3ZPcVJGTi1UYk42
SlQ4Q0UtQWpQMEo0VTlMUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBPQ6IQYQBEhIBFUafSYtczVYYKIxu5vXTVXlukkwTJTlA8c2/yv8N5feVhieNz
9c3n8zvw2E9YWwERhAUwlr56nSb+CeUkbfV5j9impoXP3hOoYCy1AQ8iayf0geb1
DU0ppr8ES5Zo40/E9aHp4KvWN1XQieRtmwtM2ERsNSJ5kPbMk8c5LhUL294SfqEP
kSMhZsTY1o2xeuj/580035622079ag8/jvZmgvSui3bJB0YBjFlfNJMEu16Y7ON4
wwvK7xZF5AkFqInQ75iveAWgjrOKNurDpbshurdFKcDr/YEBq4/4OgEh7xXihcS6
IxbV/Gb3dyeIzI93rkvZp9Zi
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:13:27 2026 by rpki-client