Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EEF/D7105BB6DEF311F09ED41296576F56BC/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.mft
File:                     vOqRFN-TbN6JT8CE-AjP0J4U9LQ.mft (raw, json)
Hash identifier:          jCwALKKpX9mmPZNAebwUb7Z0m3edYQO+ghcVY9Zxlx0=
Subject key identifier:   6A:5D:21:B8:83:C2:81:38:C8:33:2E:65:BA:48:DB:48:DE:1C:60:1E
Authority key identifier: BC:EA:91:14:DF:93:6C:DE:89:4F:C0:84:F8:08:CF:D0:9E:14:F4:B4
Certificate issuer:       /CN=A91E4EEF/serialNumber=BCEA9114DF936CDE894FC084F808CFD09E14F4B4
Certificate serial:       28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4EEF/D7105BB6DEF311F09ED41296576F56BC/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.mft
Manifest number:          27
Signing time:             Sun 01 Mar 2026 10:15:15 +0000
Manifest this update:     Sun 01 Mar 2026 10:15:15 +0000
Manifest next update:     Sun 08 Mar 2026 10:15:15 +0000
Files and hashes:         1: vOqRFN-TbN6JT8CE-AjP0J4U9LQ.crl (hash: 5C0TSfwCHjCZUa1iVmTLffIzxcT7g4WgbbkVo+eqHNU=)
                          2: 8C5382D6DEF511F0A9861D4A586F56BC.roa (hash: vjfsamXqkXFmxfFh/f0yvWlnKb+B5x6VvVnf5hM9bVM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4EEF/D7105BB6DEF311F09ED41296576F56BC/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E4EEF/D7105BB6DEF311F09ED41296576F56BC/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:15:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4EEF, serialNumber=BCEA9114DF936CDE894FC084F808CFD09E14F4B4
        Validity
            Not Before: Mar  1 10:15:15 2026 GMT
            Not After : Mar  8 10:15:15 2026 GMT
        Subject: CN=69a411b3-fd9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d4:5b:94:5b:0d:00:d5:b5:40:00:e5:e6:6a:
                    d9:6e:d5:ae:70:2f:1c:3d:bb:bd:63:84:5d:ff:9c:
                    79:de:eb:32:1f:6d:a9:92:ef:0a:9c:01:9a:61:59:
                    d7:1f:51:bd:ef:b3:27:17:0a:25:c9:be:9f:d7:2b:
                    ea:86:75:6c:9b:af:3a:13:50:e2:f5:d4:4f:4b:02:
                    34:18:b2:b9:3b:8b:7a:63:83:28:a3:b9:2d:e7:63:
                    34:dc:d9:b7:d8:ae:0c:70:96:db:7e:44:19:aa:e2:
                    cd:00:32:07:95:ef:94:55:af:11:1c:55:76:4b:d5:
                    41:8e:ff:8b:4d:66:9d:ea:db:6d:b5:ba:b6:36:f7:
                    9a:d6:09:f0:5e:02:1c:5c:72:cf:f2:7b:9a:f0:e5:
                    94:d1:51:78:7b:75:fa:85:21:44:c0:fc:51:e1:5e:
                    fc:eb:4d:a0:00:44:c0:14:ad:a6:1f:cc:95:ca:49:
                    8f:8d:91:7b:ab:79:6a:79:9c:b0:22:62:65:d8:6b:
                    02:9a:9a:a7:1d:3b:b3:45:6a:3b:3a:83:84:0c:1f:
                    34:36:87:1a:69:80:ad:5a:56:12:c8:2e:95:90:9e:
                    6d:85:1b:ef:a7:cc:87:5a:8f:02:cb:f1:60:31:87:
                    7e:0e:a0:c2:b0:9a:ba:90:18:fd:b7:11:89:08:db:
                    e8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:5D:21:B8:83:C2:81:38:C8:33:2E:65:BA:48:DB:48:DE:1C:60:1E
            X509v3 Authority Key Identifier:
                keyid:BC:EA:91:14:DF:93:6C:DE:89:4F:C0:84:F8:08:CF:D0:9E:14:F4:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4EEF/D7105BB6DEF311F09ED41296576F56BC/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EEF/D7105BB6DEF311F09ED41296576F56BC/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:a1:91:eb:b1:63:6a:62:c9:6a:2e:eb:a1:51:73:87:74:f6:
         3f:41:b5:12:6f:74:b2:96:00:1f:2c:83:af:c2:09:ec:f3:2f:
         b9:d4:36:b5:76:43:81:f0:14:78:b7:37:98:bd:d2:0e:b5:93:
         2b:3a:ef:f3:1a:d3:4e:7b:a0:91:3e:0e:48:0a:a0:26:12:63:
         d2:02:05:57:fc:d6:54:3f:a8:ed:77:c4:57:3d:85:4f:5b:04:
         aa:6e:7c:61:91:c4:e7:49:44:4d:7f:d7:78:4a:6c:40:67:39:
         b9:49:6c:7a:b9:3b:6d:5a:26:b9:32:0f:7e:06:39:23:08:c7:
         17:6d:0e:df:f8:23:8f:a2:a5:e4:61:f9:25:be:a8:d0:13:18:
         02:91:46:6e:c6:71:7a:8d:07:3c:32:20:93:30:ea:1c:15:8b:
         c8:8f:08:df:0d:36:b7:76:dc:fd:30:eb:c3:53:24:fb:f2:48:
         cc:1d:50:c1:67:22:9a:cb:c6:7c:2d:d6:c9:8b:20:4a:4f:83:
         26:05:12:c8:f9:7d:87:c2:fa:2a:63:66:9a:6e:11:37:c0:a9:
         1a:40:a3:15:ff:18:eb:20:fd:50:c2:53:3d:63:99:d7:f1:c7:
         80:5d:2e:c0:09:17:97:97:10:45:48:ed:94:0a:89:2b:7d:fe:
         a1:5c:1e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:07:53 2026 by rpki-client