Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.mft
File:                     vTfx1AdHvmxfXGujMH32Vgq2gaM.mft (raw, json)
Hash identifier:          LYFktlSajNJ8IAAReP6LafEfGDHBg7SPku32qz/Qi8w=
Subject key identifier:   89:B1:65:6B:D4:22:C4:33:98:40:1A:9B:34:10:5F:6B:8B:E0:87:56
Authority key identifier: BD:37:F1:D4:07:47:BE:6C:5F:5C:6B:A3:30:7D:F6:56:0A:B6:81:A3
Certificate issuer:       /CN=A91817E6/serialNumber=BD37F1D40747BE6C5F5C6BA3307DF6560AB681A3
Certificate serial:       FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vTfx1AdHvmxfXGujMH32Vgq2gaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.mft
Manifest number:          0C13
Signing time:             Tue 24 Mar 2026 19:53:25 +0000
Manifest this update:     Tue 24 Mar 2026 19:53:25 +0000
Manifest next update:     Tue 31 Mar 2026 19:53:25 +0000
Files and hashes:         1: vTfx1AdHvmxfXGujMH32Vgq2gaM.crl (hash: ei2ixKuGbX5pbtEISCjCMu15uxVdDsvvQQ1kc7q3COs=)
                          2: 28C454FCB41211EF8D2EC946C4F9AE02.roa (hash: QB5ktFkmasLbkBlP1SMErkyzO+uRKfcfUdHGElXJLuw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.crl
                          rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vTfx1AdHvmxfXGujMH32Vgq2gaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:53:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 252 (0xfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91817E6, serialNumber=BD37F1D40747BE6C5F5C6BA3307DF6560AB681A3
        Validity
            Not Before: Mar 24 19:53:25 2026 GMT
            Not After : Mar 31 19:53:25 2026 GMT
        Subject: CN=69c2ebb5-10b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c1:b6:c3:86:42:25:66:f4:1e:62:c3:7f:a3:
                    4e:b1:56:d7:82:22:dd:db:da:81:c3:2a:1c:c4:c0:
                    3c:23:5d:85:86:f8:30:16:ac:8c:61:4f:7e:80:8f:
                    29:53:17:17:78:dc:c5:5e:02:bd:ee:0d:38:65:c4:
                    d6:40:6b:41:b5:3d:46:2e:74:44:b6:3f:81:30:87:
                    d0:83:93:01:79:28:94:de:97:a5:a4:36:10:77:c3:
                    1a:58:93:a6:01:8b:51:c5:b7:08:40:e7:04:f3:50:
                    aa:e5:63:d9:11:98:72:86:cf:04:1d:3f:89:f9:84:
                    22:cf:87:8d:5d:19:ab:97:03:68:5d:56:c3:d8:47:
                    10:dd:fd:c4:25:8e:3c:a7:5a:d8:81:f1:4a:4f:8a:
                    80:9f:c3:8e:a5:cb:94:42:06:e1:4e:f0:2e:1a:ac:
                    24:2e:90:41:7d:1f:1a:8b:04:be:77:67:81:20:db:
                    43:70:92:27:16:46:7e:97:d1:79:f9:88:20:2d:4e:
                    b2:f6:93:0e:b1:83:95:60:9b:e8:10:8e:77:11:30:
                    7d:a4:ac:2d:37:a9:e3:7f:93:bd:fc:75:42:4b:9d:
                    ea:d3:95:24:2a:42:a4:8c:cc:e4:a5:c8:1a:91:ac:
                    8d:20:d7:36:95:79:0f:1c:ae:2f:7e:7b:01:6d:af:
                    38:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:B1:65:6B:D4:22:C4:33:98:40:1A:9B:34:10:5F:6B:8B:E0:87:56
            X509v3 Authority Key Identifier:
                keyid:BD:37:F1:D4:07:47:BE:6C:5F:5C:6B:A3:30:7D:F6:56:0A:B6:81:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vTfx1AdHvmxfXGujMH32Vgq2gaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:98:68:98:7c:fd:84:37:ec:19:64:a3:bd:42:27:42:5b:cc:
         6c:11:08:a6:11:ee:23:02:f0:b3:9b:bc:c9:fe:bb:ff:19:bb:
         34:2f:a7:58:b8:c9:3d:28:96:5f:42:09:17:7a:5d:ec:da:60:
         1c:97:71:e2:d1:a1:20:90:14:03:fb:82:d5:91:7d:2b:54:d8:
         f3:83:06:10:02:d2:dd:a1:84:ba:c3:43:e3:c9:84:78:1b:e0:
         47:fc:58:10:9f:5b:c4:8c:1b:3e:cc:96:ff:33:cf:b1:f7:99:
         f0:87:f6:d5:40:d5:02:b2:4a:f5:09:52:34:a4:73:f1:aa:45:
         d5:54:0c:f7:06:8e:42:e0:c6:66:82:58:ed:d2:5e:f3:7c:08:
         1c:65:03:3f:a4:5c:f3:5d:23:33:99:24:fd:34:41:f0:a6:ac:
         2b:b1:c1:d4:f2:27:c8:00:67:81:77:95:41:2a:26:ad:82:87:
         8a:e0:93:c7:49:cd:95:c5:ab:d1:03:1e:ab:23:14:46:4d:cb:
         0f:5f:cb:61:80:4e:41:ef:6f:9a:8c:79:48:0b:e4:26:7d:8e:
         bc:59:41:c3:99:12:ae:e7:24:12:a5:d9:d1:05:c9:4f:a5:a8:
         f2:b4:f5:00:21:33:32:07:62:d2:54:63:5c:91:88:fd:b1:aa:
         0c:d6:9d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:17:13 2026 by rpki-client