Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.mft
File:                     vpuQTrdssFxgw-LDeeL6SJoOF3I.mft (raw, json)
Hash identifier:          e3UhYA5NmgZlUUa5/h2PIx751v9LD+5jxA6NhIO4bBg=
Subject key identifier:   0E:F4:D5:74:2F:38:3A:39:99:61:FB:63:C2:1F:A4:84:21:E8:A4:72
Authority key identifier: BE:9B:90:4E:B7:6C:B0:5C:60:C3:E2:C3:79:E2:FA:48:9A:0E:17:72
Certificate issuer:       /CN=A91E5832/serialNumber=BE9B904EB76CB05C60C3E2C379E2FA489A0E1772
Certificate serial:       D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpuQTrdssFxgw-LDeeL6SJoOF3I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.mft
Manifest number:          D5
Signing time:             Sun 01 Mar 2026 07:50:59 +0000
Manifest this update:     Sun 01 Mar 2026 07:50:58 +0000
Manifest next update:     Sun 08 Mar 2026 07:50:58 +0000
Files and hashes:         1: vpuQTrdssFxgw-LDeeL6SJoOF3I.crl (hash: pARqPb5wxvRaC+b+NAq7wACjgnpg0WI1PLn9OcQnUrc=)
                          2: A9C0AECED0BA11EFB7A6B027C4F9AE02.roa (hash: e4LQu9ey64tnaj1cRnayPgo17RkPQUzu+plEeXoKU5M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.crl
                          rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpuQTrdssFxgw-LDeeL6SJoOF3I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:50:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 215 (0xd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5832, serialNumber=BE9B904EB76CB05C60C3E2C379E2FA489A0E1772
        Validity
            Not Before: Mar  1 07:50:58 2026 GMT
            Not After : Mar  8 07:50:58 2026 GMT
        Subject: CN=69a3efe3-1dea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:25:3e:78:af:e4:3a:66:41:34:1a:ab:23:51:
                    23:b1:92:43:ac:94:72:36:b2:33:e6:cb:79:fe:90:
                    86:ff:23:16:d4:91:5f:44:92:e0:9f:2b:e2:70:71:
                    2a:65:d3:83:81:e2:a8:5d:8c:96:cd:39:19:6c:eb:
                    d7:ec:80:d1:7b:66:e4:31:bd:c7:47:5c:8c:12:1f:
                    20:fa:17:dc:fb:78:41:3e:98:d7:4b:cc:b1:be:71:
                    77:97:35:c6:1c:bd:eb:11:4b:8e:c7:22:f0:6d:82:
                    67:b6:d6:a4:c9:e2:95:cb:91:ad:34:5d:66:30:cf:
                    b3:41:e2:0d:57:96:b9:0f:74:e6:86:2d:cb:1c:45:
                    3f:9e:f6:3b:aa:4d:15:ee:ee:4a:0c:47:be:18:10:
                    10:da:fe:92:fb:57:54:8e:b5:eb:47:5e:fc:c4:8a:
                    9c:dc:31:0c:70:69:a8:78:61:a4:f6:66:21:5a:7c:
                    b7:11:5c:d0:ba:8d:04:8d:2b:88:a0:42:ad:f8:b0:
                    e3:1e:4d:60:fb:81:67:ea:b0:1d:4b:25:74:b8:ee:
                    43:c0:42:0f:8c:5e:0a:ac:19:e8:b7:21:c7:27:30:
                    34:67:53:cf:7a:c0:9c:9c:10:5a:3d:85:2b:b3:0f:
                    31:62:37:4c:d0:c3:2b:55:fc:b4:66:26:2d:e7:0c:
                    9f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:F4:D5:74:2F:38:3A:39:99:61:FB:63:C2:1F:A4:84:21:E8:A4:72
            X509v3 Authority Key Identifier:
                keyid:BE:9B:90:4E:B7:6C:B0:5C:60:C3:E2:C3:79:E2:FA:48:9A:0E:17:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpuQTrdssFxgw-LDeeL6SJoOF3I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:f9:0f:91:d3:8a:2c:00:59:cb:ef:b2:ce:70:d7:58:09:fe:
         57:11:4e:3c:12:03:dc:6a:e9:ae:1d:52:55:12:55:e0:60:af:
         79:8e:d7:92:67:d0:49:1f:60:f5:f7:2b:64:49:7b:10:ac:b6:
         3f:49:8a:a5:8f:dd:3a:a1:c3:b3:0c:a3:5f:49:4e:20:01:9f:
         ce:eb:9c:f8:ee:79:bf:08:f7:71:aa:44:8b:2e:29:50:d1:e2:
         7a:13:3f:6f:3d:c3:14:35:0a:20:2b:cf:71:9c:ab:a2:f6:ba:
         1a:a7:5a:9a:d3:e2:98:db:01:4c:63:c1:55:59:8b:ba:e6:e1:
         8f:5c:f2:ce:80:5c:50:99:19:3e:75:e8:c5:ee:98:ee:7f:af:
         1b:b2:ac:ba:43:10:b0:6d:06:3f:20:31:c2:76:58:3c:2a:7f:
         c1:34:1f:4f:ab:20:98:a4:7b:91:10:20:71:5e:58:d6:a6:8f:
         37:a1:6e:c8:57:ed:50:2e:30:91:ac:eb:ea:2f:b8:bc:8f:ca:
         7f:b7:60:cd:58:2f:0d:e6:35:b5:8b:89:a2:c3:71:af:7a:5e:
         7d:24:d6:b9:d0:9a:06:f5:3e:ad:2d:a4:bd:3d:d5:dd:67:07:
         34:4f:41:d3:30:ce:d2:be:5c:5b:46:a1:65:34:30:ea:86:8d:
         d1:51:bd:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:59:54 2026 by rpki-client