Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8BE3/EEEF7FEABF9C11EF9DA88282C4F9AE02/VU9dfGbsUOhKiru6mWgXfkcp02Y.mft
File:                     VU9dfGbsUOhKiru6mWgXfkcp02Y.mft (raw, json)
Hash identifier:          XMCd7I/DFjJHGgWWa0spX5NENh1tKKbBZhLxgNSqC/o=
Subject key identifier:   75:3A:A7:37:33:98:FC:68:00:5F:80:4D:A9:37:CE:A2:E3:85:07:B8
Authority key identifier: 55:4F:5D:7C:66:EC:50:E8:4A:8A:BB:BA:99:68:17:7E:47:29:D3:66
Certificate issuer:       /CN=A91E8BE3/serialNumber=554F5D7C66EC50E84A8ABBBA9968177E4729D366
Certificate serial:       0101
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VU9dfGbsUOhKiru6mWgXfkcp02Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8BE3/EEEF7FEABF9C11EF9DA88282C4F9AE02/VU9dfGbsUOhKiru6mWgXfkcp02Y.mft
Manifest number:          FD
Signing time:             Fri 17 Apr 2026 05:56:37 +0000
Manifest this update:     Fri 17 Apr 2026 05:56:37 +0000
Manifest next update:     Fri 24 Apr 2026 05:56:37 +0000
Files and hashes:         1: VU9dfGbsUOhKiru6mWgXfkcp02Y.crl (hash: dTWCQpbhwUHFeVmVNBV996wJUPxzRN8X0stBPsFLOL8=)
                          2: 0AC098846EDA11F08D404571C4F9AE02.roa (hash: MQmdIDvcYM844/1uv1UkwZ4FyyfbWMvsu3GOUFQnx9w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8BE3/EEEF7FEABF9C11EF9DA88282C4F9AE02/VU9dfGbsUOhKiru6mWgXfkcp02Y.crl
                          rsync://rpki.apnic.net/member_repository/A91E8BE3/EEEF7FEABF9C11EF9DA88282C4F9AE02/VU9dfGbsUOhKiru6mWgXfkcp02Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VU9dfGbsUOhKiru6mWgXfkcp02Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:56:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 257 (0x101)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8BE3, serialNumber=554F5D7C66EC50E84A8ABBBA9968177E4729D366
        Validity
            Not Before: Apr 17 05:56:37 2026 GMT
            Not After : Apr 24 05:56:37 2026 GMT
        Subject: CN=69e1cb95-ee61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a5:1b:7e:d9:14:19:60:17:10:fe:a0:0f:b4:
                    3c:36:d1:0b:43:04:85:2f:83:6b:cf:78:54:f0:66:
                    cb:da:b5:ec:bf:f7:8e:4e:72:34:f6:77:11:8c:3f:
                    59:4f:a7:c4:32:07:a1:f9:8d:98:09:7b:3e:5f:60:
                    70:a7:1f:84:97:96:e3:72:26:b1:de:52:04:c3:25:
                    83:dd:74:0c:6c:d1:7c:03:41:02:8d:8e:a4:f2:a4:
                    33:cd:14:f0:2e:00:0d:b7:9f:31:f0:6b:ff:ae:c5:
                    5f:d9:13:06:c3:6f:04:68:1b:5c:d4:89:65:11:68:
                    46:85:0f:3b:78:02:66:36:e9:17:ec:f3:c3:de:fd:
                    62:a0:17:91:5b:24:2d:78:96:ce:28:e6:0d:d2:96:
                    ed:58:25:c5:98:3f:bd:71:91:54:6c:78:7b:80:94:
                    a6:08:84:56:16:79:10:b9:54:7c:27:d7:f5:cf:65:
                    8f:49:7b:a4:e4:c4:08:60:6d:26:fb:fc:96:c2:1e:
                    5f:b9:11:81:59:bf:94:6c:c2:b3:cd:71:f5:0a:03:
                    e0:fd:24:1b:b3:4e:6b:0f:73:56:a0:45:4f:f2:3e:
                    e9:05:53:b5:18:6b:49:73:30:0a:e8:4b:5b:94:62:
                    96:60:68:c6:17:f6:20:f5:6b:a6:20:44:a5:bf:15:
                    88:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:3A:A7:37:33:98:FC:68:00:5F:80:4D:A9:37:CE:A2:E3:85:07:B8
            X509v3 Authority Key Identifier:
                keyid:55:4F:5D:7C:66:EC:50:E8:4A:8A:BB:BA:99:68:17:7E:47:29:D3:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8BE3/EEEF7FEABF9C11EF9DA88282C4F9AE02/VU9dfGbsUOhKiru6mWgXfkcp02Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VU9dfGbsUOhKiru6mWgXfkcp02Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8BE3/EEEF7FEABF9C11EF9DA88282C4F9AE02/VU9dfGbsUOhKiru6mWgXfkcp02Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:4c:69:d4:9c:b5:4c:70:6a:ca:84:23:09:20:06:d3:60:9f:
         58:f3:eb:a2:12:6f:c8:13:b6:b4:bf:30:c9:ca:f7:e2:17:6f:
         1d:d7:12:73:66:9f:90:2f:04:cb:31:fa:a7:fa:b8:e2:74:13:
         64:5a:82:58:d5:5f:7d:c3:2b:89:92:79:d2:68:23:e9:95:cb:
         0b:31:aa:d2:75:11:80:66:2a:51:2b:54:86:34:d7:14:f4:83:
         6d:68:bf:b3:a6:20:6e:f3:a2:0c:6c:f9:72:59:81:bf:fc:58:
         24:02:08:61:02:0f:58:74:3f:d7:cc:f4:33:65:78:93:21:34:
         43:19:24:b3:b8:89:ab:9a:ec:9b:13:0d:cb:24:1d:b6:34:33:
         3e:dc:7e:13:6e:6d:cd:c9:6d:cc:80:a0:f1:26:2c:7f:c2:8c:
         11:a3:8d:e9:23:bc:78:fa:03:e4:5d:98:f0:ac:01:99:a6:ed:
         5c:03:36:03:cc:dc:cb:a4:99:c3:23:b7:3c:9c:00:f7:8a:72:
         9e:fa:fc:1e:7e:1f:7b:59:b8:fd:0e:f0:fb:84:67:86:f6:b1:
         1e:e8:58:4a:d8:78:52:c0:2c:70:86:8e:56:b8:e0:fa:5c:ec:
         64:0f:86:29:c1:5c:46:40:e5:f8:4f:29:dd:8b:3b:7a:54:23:
         9b:a8:7b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:24:55 2026 by rpki-client