Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9124096/08B40C3ABB9F11F0AF9A5D1AC4F9AE02/voedoSIo9Sr7TRD2P4DgJvSFFqA.mft
File:                     voedoSIo9Sr7TRD2P4DgJvSFFqA.mft (raw, json)
Hash identifier:          lgvwHyFdxdd6CVV8W6RiCe4X6z5n+7W8AFqKss5T/Eo=
Subject key identifier:   01:D4:AE:74:AE:24:ED:C0:22:02:9D:63:C3:75:E9:AA:2A:9D:B8:63
Authority key identifier: BE:87:9D:A1:22:28:F5:2A:FB:4D:10:F6:3F:80:E0:26:F4:85:16:A0
Certificate issuer:       /CN=A9124096/serialNumber=BE879DA12228F52AFB4D10F63F80E026F48516A0
Certificate serial:       51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voedoSIo9Sr7TRD2P4DgJvSFFqA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9124096/08B40C3ABB9F11F0AF9A5D1AC4F9AE02/voedoSIo9Sr7TRD2P4DgJvSFFqA.mft
Manifest number:          4D
Signing time:             Fri 27 Mar 2026 07:49:16 +0000
Manifest this update:     Fri 27 Mar 2026 07:49:16 +0000
Manifest next update:     Fri 03 Apr 2026 07:49:16 +0000
Files and hashes:         1: voedoSIo9Sr7TRD2P4DgJvSFFqA.crl (hash: sEDx30Ju0WXKEJjMjdf75KyjAL5a9f1eY4+TOVovXcA=)
                          2: 0E3F5E5CBBB811F0B7A3E30BC4F9AE02.roa (hash: 4zRuuR1sO9CKHH38Jna18wV19qizi3M0wtTY0eQl8yM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9124096/08B40C3ABB9F11F0AF9A5D1AC4F9AE02/voedoSIo9Sr7TRD2P4DgJvSFFqA.crl
                          rsync://rpki.apnic.net/member_repository/A9124096/08B40C3ABB9F11F0AF9A5D1AC4F9AE02/voedoSIo9Sr7TRD2P4DgJvSFFqA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voedoSIo9Sr7TRD2P4DgJvSFFqA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 07:49:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9124096, serialNumber=BE879DA12228F52AFB4D10F63F80E026F48516A0
        Validity
            Not Before: Mar 27 07:49:16 2026 GMT
            Not After : Apr  3 07:49:16 2026 GMT
        Subject: CN=69c6367c-1985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:db:fb:04:c6:b9:b2:a2:38:a7:9e:69:e7:31:
                    f7:4d:3e:24:0e:97:12:2d:ed:d2:4b:7a:05:6d:93:
                    a9:23:29:b2:f0:0d:4c:8a:dd:b9:93:8b:3f:0e:23:
                    d9:5c:a9:26:10:0e:e8:07:5e:b4:ae:91:29:d5:1c:
                    f1:f0:58:af:b1:6a:ba:29:56:39:5d:90:85:20:1e:
                    c0:00:00:f5:f7:fb:6d:ad:0a:3b:bc:36:a0:68:97:
                    c3:80:63:1d:0c:a5:29:c9:be:fd:c5:91:7c:58:a8:
                    b3:f6:91:71:a8:36:fa:a8:ca:a2:7f:0b:eb:88:06:
                    3a:f4:5c:b5:42:a1:72:9c:53:80:73:c6:97:d2:7f:
                    ba:02:f3:fa:64:44:e3:32:57:f1:e5:f7:80:1b:1e:
                    ef:88:e2:f1:2b:53:57:d8:e9:35:2c:4a:51:d3:de:
                    d4:e2:7e:33:f1:f3:d0:77:1f:b1:66:36:9d:68:60:
                    1a:89:67:a5:1b:50:b5:a5:90:8c:84:1a:d5:26:57:
                    e4:14:7c:a3:81:9d:61:11:59:34:5d:d3:4b:98:e2:
                    25:b5:2b:1f:cf:44:69:7d:88:83:9c:f7:bf:dc:04:
                    71:1d:91:87:0e:0a:e9:10:bb:8d:9a:1c:4c:ad:f2:
                    6d:d5:cc:33:80:ca:8e:22:a6:c1:25:b3:72:d1:a4:
                    40:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:D4:AE:74:AE:24:ED:C0:22:02:9D:63:C3:75:E9:AA:2A:9D:B8:63
            X509v3 Authority Key Identifier:
                keyid:BE:87:9D:A1:22:28:F5:2A:FB:4D:10:F6:3F:80:E0:26:F4:85:16:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9124096/08B40C3ABB9F11F0AF9A5D1AC4F9AE02/voedoSIo9Sr7TRD2P4DgJvSFFqA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voedoSIo9Sr7TRD2P4DgJvSFFqA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124096/08B40C3ABB9F11F0AF9A5D1AC4F9AE02/voedoSIo9Sr7TRD2P4DgJvSFFqA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:3b:28:a3:15:8a:24:a4:b7:6f:cb:05:4f:47:f5:e7:93:e0:
         15:6d:6d:fe:4c:f2:2b:ef:eb:08:1b:db:ab:2b:2b:ca:94:60:
         a9:2a:de:d6:8c:7d:08:ed:1f:fe:8a:55:5f:a0:f3:da:40:4a:
         3d:c7:9d:e3:4e:e0:3e:9d:19:b4:8a:cc:cf:71:f5:f7:82:ec:
         ee:91:48:d2:b6:81:f1:fc:84:47:79:28:07:b9:42:d1:96:38:
         2c:ac:bb:06:79:6b:2c:80:91:a9:9f:08:1c:fc:f9:10:59:87:
         7b:73:c2:aa:b6:de:6a:ad:6b:b7:31:13:09:af:81:29:cc:68:
         15:d2:88:8e:d7:32:2b:69:d8:7a:6f:3b:43:88:44:54:57:5a:
         21:3d:9c:f5:1e:88:9f:91:09:6e:0c:36:06:ef:57:f8:ff:91:
         fb:d5:da:38:21:b3:db:4b:92:fa:49:81:73:2e:0c:41:ba:d5:
         fa:37:95:47:21:44:2f:74:86:ed:d4:b7:cf:dc:97:75:54:22:
         3c:bc:44:a5:e6:6f:2a:27:83:c2:ee:27:dd:bf:67:9d:e1:af:
         32:2f:06:4e:4f:90:b0:4d:6c:ca:1a:70:6e:4a:60:8b:9a:3c:
         29:1c:d6:f2:ff:47:54:65:e5:6d:3a:85:b4:d1:c9:47:f1:fa:
         09:80:80:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:45:43 2026 by rpki-client