Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.mft
File:                     vkiLTmCsanOmVu_bxfpnoajegSo.mft (raw, json)
Hash identifier:          q9VTVROZOI1KlYAWgE1jlyZCnABwJuFxKNq4Kp/SP4o=
Subject key identifier:   93:52:97:6A:C9:C2:E2:26:9F:2D:95:39:D3:DC:73:B5:7F:8D:F6:86
Authority key identifier: BE:48:8B:4E:60:AC:6A:73:A6:56:EF:DB:C5:FA:67:A1:A8:DE:81:2A
Certificate issuer:       /CN=A91ADE0A/serialNumber=BE488B4E60AC6A73A656EFDBC5FA67A1A8DE812A
Certificate serial:       2347
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkiLTmCsanOmVu_bxfpnoajegSo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.mft
Manifest number:          2303
Signing time:             Tue 12 May 2026 15:50:52 +0000
Manifest this update:     Tue 12 May 2026 15:50:51 +0000
Manifest next update:     Tue 19 May 2026 15:50:51 +0000
Files and hashes:         1: vkiLTmCsanOmVu_bxfpnoajegSo.crl (hash: 5+6cx98wOHUEwbgp6McComCAcY+5OYvouCeM8l44TEI=)
                          2: 815465903EB511E9881B6529C4F9AE02.roa (hash: +ANu6JmCUfWc/fEshVMRk/CtwPkSloyzKlXpU5KCY3Y=)
                          3: 4AB8D38E178811EF95C8DF41C4F9AE02.roa (hash: 1Kz1vE1HOF5/kl+i8Rr4tSzcXBMpG4BgFwTZXnp4/e4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.crl
                          rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkiLTmCsanOmVu_bxfpnoajegSo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 15:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9031 (0x2347)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADE0A, serialNumber=BE488B4E60AC6A73A656EFDBC5FA67A1A8DE812A
        Validity
            Not Before: May 12 15:50:51 2026 GMT
            Not After : May 19 15:50:51 2026 GMT
        Subject: CN=6a034c5c-6242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f5:2a:d1:13:a6:74:11:77:5f:51:e0:25:55:
                    09:75:b5:90:02:b6:25:7d:8c:ff:69:ac:ea:dc:43:
                    4f:66:a5:c7:9d:72:d0:62:46:7f:19:f7:e3:46:10:
                    4f:92:0d:fc:15:e5:9b:c4:3e:e4:75:f3:a8:ee:f6:
                    5c:3d:1e:f2:a4:72:18:4b:53:9a:e5:9e:13:3a:0d:
                    c4:29:ea:7e:f1:2f:32:38:ab:eb:16:86:bf:e2:2e:
                    1b:06:f5:7a:02:1e:b8:79:fd:88:d8:e8:6d:63:69:
                    d7:8f:e8:7a:bb:c0:b3:38:d5:38:58:ed:10:ab:24:
                    14:a9:9c:35:66:b7:fe:82:e5:12:8f:1b:07:a2:04:
                    d3:ae:ea:50:25:e9:32:55:7a:0a:05:6e:d4:27:35:
                    2c:33:71:87:bb:2e:d8:99:e0:81:f6:42:3f:2b:77:
                    7d:a2:25:9a:84:c7:3c:b5:85:9a:62:84:71:8c:1d:
                    2a:35:b9:5f:05:c8:4c:e4:79:6d:af:eb:d0:56:50:
                    04:b3:4a:3b:79:b5:a2:22:b7:de:85:56:29:6c:3f:
                    0c:f1:d7:dd:4a:2b:81:53:74:9c:d8:37:8e:53:09:
                    b5:00:b5:9d:9f:6d:e6:46:92:52:17:d6:22:db:18:
                    fe:b9:95:16:d3:b5:13:6d:df:23:5f:da:b6:43:38:
                    a3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:52:97:6A:C9:C2:E2:26:9F:2D:95:39:D3:DC:73:B5:7F:8D:F6:86
            X509v3 Authority Key Identifier:
                keyid:BE:48:8B:4E:60:AC:6A:73:A6:56:EF:DB:C5:FA:67:A1:A8:DE:81:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkiLTmCsanOmVu_bxfpnoajegSo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:23:01:23:2f:dd:4d:03:59:77:1f:45:ad:6a:fc:4f:e2:f9:
         4b:88:2a:19:2c:6c:4d:50:df:06:5d:c6:68:dd:4c:0c:09:31:
         09:6d:dd:dc:c5:f6:ec:d6:0b:31:45:24:b9:a5:57:4b:41:48:
         6d:75:a3:a8:11:c4:bd:09:24:8c:21:93:3c:d4:d1:af:15:cb:
         74:88:80:db:39:be:80:cd:79:7b:ad:ec:e4:7e:d8:89:ee:42:
         31:22:4d:d6:eb:d4:3a:ff:2b:46:5b:da:28:8b:6e:8c:72:e0:
         e8:9b:32:1f:13:d3:e7:1c:cb:47:da:8b:56:d1:d2:22:23:c7:
         c7:e0:5d:d9:91:9d:d5:6a:d4:d6:6c:79:2d:a1:38:cc:c3:1f:
         78:39:6f:42:49:0a:ae:f4:29:bb:0f:ba:34:88:84:a5:74:2b:
         f5:e7:01:e4:3f:eb:d1:86:19:a2:1a:64:80:72:28:2f:0e:b4:
         7d:ad:b5:93:69:53:ce:b7:cc:e5:52:23:53:88:a8:8b:df:f7:
         21:58:0c:55:26:8d:2c:92:20:7c:df:a6:c5:f8:ce:91:09:ef:
         d0:76:46:07:d1:48:ac:c8:f9:3d:2c:d4:be:e6:65:36:8e:a6:
         25:73:5c:5c:50:ef:1b:d3:3b:21:db:29:1b:a4:80:e7:90:aa:
         d8:d7:5b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:47:35 2026 by rpki-client