Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91504D6/B6C0934C31A911EFB6FB1D60C4F9AE02/_x_VyU8S81-tE63yeZqJj94Gysk.mft
File:                     _x_VyU8S81-tE63yeZqJj94Gysk.mft (raw, json)
Hash identifier:          cM9w+6zzN7Dy4TzCi4RD8UpU2/UFYfapAqISlIALgVk=
Subject key identifier:   CC:C3:85:33:D6:56:52:DF:6D:F9:B9:73:9B:AF:C9:20:B2:A0:B0:F1
Authority key identifier: FF:1F:D5:C9:4F:12:F3:5F:AD:13:AD:F2:79:9A:89:8F:DE:06:CA:C9
Certificate issuer:       /CN=A91504D6/serialNumber=FF1FD5C94F12F35FAD13ADF2799A898FDE06CAC9
Certificate serial:       0158
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_x_VyU8S81-tE63yeZqJj94Gysk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91504D6/B6C0934C31A911EFB6FB1D60C4F9AE02/_x_VyU8S81-tE63yeZqJj94Gysk.mft
Manifest number:          014E
Signing time:             Wed 25 Mar 2026 04:24:07 +0000
Manifest this update:     Wed 25 Mar 2026 04:24:06 +0000
Manifest next update:     Wed 01 Apr 2026 04:24:06 +0000
Files and hashes:         1: _x_VyU8S81-tE63yeZqJj94Gysk.crl (hash: n7d2fMWEkl/NGfWmvAqMNbZkRHuFzoWzaXbGXWt2BBM=)
                          2: A81815BE31B711EF8F3D5F6BC4F9AE02.roa (hash: 78Wv+6aKAGbhECZsdv9fFpU3tkRjW1tyEYTu7qFTNZY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91504D6/B6C0934C31A911EFB6FB1D60C4F9AE02/_x_VyU8S81-tE63yeZqJj94Gysk.crl
                          rsync://rpki.apnic.net/member_repository/A91504D6/B6C0934C31A911EFB6FB1D60C4F9AE02/_x_VyU8S81-tE63yeZqJj94Gysk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_x_VyU8S81-tE63yeZqJj94Gysk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:24:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 344 (0x158)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91504D6, serialNumber=FF1FD5C94F12F35FAD13ADF2799A898FDE06CAC9
        Validity
            Not Before: Mar 25 04:24:06 2026 GMT
            Not After : Apr  1 04:24:06 2026 GMT
        Subject: CN=69c36366-a434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:51:43:c0:23:e3:89:1b:7a:64:a8:f6:74:91:
                    a2:4a:b0:10:87:9b:af:e5:7c:fe:4c:cc:54:9d:13:
                    95:5a:83:f4:8f:5f:a2:cf:15:35:83:92:23:f5:fb:
                    f4:2b:d2:2e:a3:6e:e1:68:59:18:f9:35:7a:9c:79:
                    63:24:93:bc:7a:20:5b:1f:a3:d3:c6:3f:67:6d:0d:
                    11:2f:df:66:1b:55:90:ae:99:09:e5:2c:2b:4d:a7:
                    5e:62:b2:ca:b9:59:8b:d1:df:8c:34:dc:d9:37:26:
                    e7:8a:70:50:19:57:8b:49:16:53:3e:58:20:81:76:
                    3e:0e:ad:fe:a2:32:c3:dd:87:10:5d:22:b4:cc:8a:
                    1e:d1:98:3b:2d:89:96:31:11:15:b1:20:67:56:47:
                    e5:38:8c:7c:6b:0d:b7:31:c2:34:38:65:d6:56:60:
                    93:a5:4f:96:1f:d7:85:02:aa:34:bc:d6:c4:0b:d5:
                    3d:57:1a:1c:bf:16:9f:e8:bb:82:9b:a6:7d:01:9f:
                    ea:a8:8c:85:e1:71:57:1c:5a:3f:a8:2d:ca:c0:a1:
                    54:4c:8f:93:3c:37:dc:7d:15:ec:e0:6b:d9:c2:c6:
                    50:a8:29:8a:06:8f:20:7f:d1:2a:cf:d7:39:d9:bf:
                    70:32:5e:b5:31:15:5d:99:3c:28:dd:5f:4c:fd:1e:
                    c2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:C3:85:33:D6:56:52:DF:6D:F9:B9:73:9B:AF:C9:20:B2:A0:B0:F1
            X509v3 Authority Key Identifier:
                keyid:FF:1F:D5:C9:4F:12:F3:5F:AD:13:AD:F2:79:9A:89:8F:DE:06:CA:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91504D6/B6C0934C31A911EFB6FB1D60C4F9AE02/_x_VyU8S81-tE63yeZqJj94Gysk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_x_VyU8S81-tE63yeZqJj94Gysk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91504D6/B6C0934C31A911EFB6FB1D60C4F9AE02/_x_VyU8S81-tE63yeZqJj94Gysk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:26:56:4f:09:b1:f1:98:fb:44:29:d6:38:35:fb:b7:d1:3b:
         45:7d:94:c8:5e:21:a1:17:69:92:10:5b:ef:67:fa:b9:d0:b8:
         2b:43:20:1b:9f:33:ef:5e:14:b3:b5:85:97:78:80:e4:c9:a4:
         53:10:a3:ef:6c:e1:0b:6e:3f:2f:18:67:30:36:94:fa:55:ff:
         86:d5:9f:d5:38:ef:42:aa:a4:32:1c:e5:8f:b9:b0:0c:59:de:
         30:96:ce:c7:bf:f8:f5:f8:42:9e:6e:67:3c:41:be:53:e6:db:
         68:4e:3b:c2:03:5b:a7:61:ca:52:87:97:98:1c:13:26:96:94:
         71:1e:78:c8:e3:eb:1d:a5:7a:00:1a:ac:da:16:6e:82:00:50:
         70:c8:36:e9:b1:20:29:22:74:34:bc:24:2e:b4:05:b6:7d:21:
         80:69:a2:5f:e9:df:e3:48:11:57:27:27:7e:d9:f2:2c:62:b9:
         0a:ab:30:0c:56:3f:47:dd:d0:e0:ce:1f:37:92:81:04:9b:9f:
         2a:cc:f4:9e:a0:02:38:6e:6b:ee:25:dc:53:4a:df:c9:b5:25:
         22:fd:a5:af:ac:d8:94:e5:ae:88:75:f6:67:8a:4e:99:89:4b:
         79:33:2f:45:cc:73:b6:10:6e:d1:d1:55:d6:13:e4:1e:12:c2:
         f9:1c:4b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:47:32 2026 by rpki-client