Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.mft
File:                     VXiaNBbn71Fc4I8Fo28d7YNETAk.mft (raw, json)
Hash identifier:          Xc7wbEB0+k+P450hKQ7+Ac3kttpFiXvjswETaMm+hb4=
Subject key identifier:   56:98:26:53:71:D6:CD:71:62:F4:CF:A6:FB:25:CE:CE:10:4D:FA:88
Authority key identifier: 55:78:9A:34:16:E7:EF:51:5C:E0:8F:05:A3:6F:1D:ED:83:44:4C:09
Certificate issuer:       /CN=A91F43F2/serialNumber=55789A3416E7EF515CE08F05A36F1DED83444C09
Certificate serial:       94
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXiaNBbn71Fc4I8Fo28d7YNETAk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.mft
Manifest number:          91
Signing time:             Wed 15 Apr 2026 07:05:54 +0000
Manifest this update:     Wed 15 Apr 2026 07:05:54 +0000
Manifest next update:     Wed 22 Apr 2026 07:05:54 +0000
Files and hashes:         1: VXiaNBbn71Fc4I8Fo28d7YNETAk.crl (hash: mmG/s+vOIuJzgTtjfwUDUZBX838wvQ8b6Va8BouLobc=)
                          2: A19F973C60C011F0A28C7F2CC4F9AE02.roa (hash: 1+gWdAZ37YIBU2iFVY3fHe/eCmXpEhHdoc6OKpG9wTE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.crl
                          rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXiaNBbn71Fc4I8Fo28d7YNETAk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 07:05:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 148 (0x94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F43F2, serialNumber=55789A3416E7EF515CE08F05A36F1DED83444C09
        Validity
            Not Before: Apr 15 07:05:54 2026 GMT
            Not After : Apr 22 07:05:54 2026 GMT
        Subject: CN=69df38d2-0dd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:45:83:0f:29:b3:28:3d:71:ae:bc:e3:02:03:
                    67:47:99:03:d6:ba:13:63:7f:9c:1f:75:37:dd:64:
                    e3:eb:7b:30:03:84:79:a2:7e:81:42:7c:06:52:13:
                    9c:73:a6:27:c8:b0:47:75:2e:55:9e:ab:49:d9:45:
                    bf:d8:36:c4:f6:b2:85:90:af:0f:71:8d:6a:fc:b1:
                    ac:21:66:24:52:02:98:9f:08:3f:b3:69:24:5b:3f:
                    fb:8d:c0:3a:1f:27:bd:48:08:4b:d4:e6:df:3d:4b:
                    63:c7:21:47:42:1d:68:40:3e:df:f8:bf:f5:52:4f:
                    d7:5f:d0:e6:4a:0f:35:2f:be:f9:1b:85:1e:a0:a0:
                    0a:6c:95:bf:c8:45:0f:44:84:36:8b:99:36:b6:e3:
                    be:1f:24:c9:b3:d0:59:9e:e3:78:ca:84:bd:23:a1:
                    62:47:9e:3c:6f:6b:06:da:31:22:5e:2e:b5:7c:fa:
                    07:ac:6a:cf:fa:cb:e5:21:e7:db:3c:7d:5e:22:fa:
                    d9:a5:de:2a:41:97:08:69:ec:7c:49:5a:21:39:e7:
                    2d:fb:b2:32:58:65:ee:b6:18:8f:a3:3c:fd:d1:43:
                    e5:dc:9c:f2:34:54:e5:77:ec:b8:c1:14:35:7c:da:
                    12:39:e5:fe:3c:bf:b0:e2:d9:87:91:5b:7b:d4:f3:
                    bb:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:98:26:53:71:D6:CD:71:62:F4:CF:A6:FB:25:CE:CE:10:4D:FA:88
            X509v3 Authority Key Identifier:
                keyid:55:78:9A:34:16:E7:EF:51:5C:E0:8F:05:A3:6F:1D:ED:83:44:4C:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXiaNBbn71Fc4I8Fo28d7YNETAk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:4e:aa:63:78:50:8d:16:4e:66:9e:2e:47:e9:2d:08:9a:df:
         17:a8:2d:1c:44:f2:71:c8:1e:a2:b1:a5:82:e5:60:a4:8a:d6:
         d7:6f:9f:c8:30:15:0b:40:87:60:ae:de:08:1a:34:bd:91:3c:
         42:e6:e3:bc:b7:28:f3:af:be:41:52:84:49:d0:e4:1b:21:65:
         a6:f6:31:f9:a0:3c:ae:05:25:31:5d:83:96:21:2c:83:cc:20:
         82:1b:cd:46:b8:98:39:67:53:e7:fd:a2:88:41:45:08:a4:d7:
         a3:d6:f1:27:ba:f6:18:6c:e8:f7:d2:49:44:fb:c3:28:ac:45:
         5a:06:f6:1f:c9:10:e9:5c:80:26:28:81:9a:ba:a8:63:4e:46:
         5c:ab:8a:b9:a0:04:0d:38:2c:c2:07:a2:ed:c5:29:24:f7:5a:
         9c:6e:d3:69:0a:76:a7:7c:33:4e:4d:4a:11:4d:be:b3:1e:3b:
         6e:70:bd:dc:86:ab:e5:36:08:f9:fa:2f:aa:9e:b6:cd:7e:9c:
         f8:f1:3b:a7:49:87:c9:74:65:d2:c4:f3:83:e0:aa:d2:ec:d5:
         e7:75:5e:98:df:a9:09:1d:c7:82:76:25:60:04:f2:a4:6a:7c:
         2f:7e:13:61:6f:4e:d1:ab:91:7a:3a:8e:dd:a1:59:79:3e:4f:
         8e:81:66:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:54:21 2026 by rpki-client