Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEB42/1AD97B646A6E11EDBB990363C4F9AE02/ViN5KFSLCC9bE8Fu3D5qfC-A_PE.mft
File:                     ViN5KFSLCC9bE8Fu3D5qfC-A_PE.mft (raw, json)
Hash identifier:          2zW7VGHBhtHV0V7NtMzxBX+7EmkIidRzfytC8rXqYRA=
Subject key identifier:   C6:CC:2B:0B:CD:78:C3:C3:C6:BD:8D:06:40:DF:86:C7:D6:59:BB:4A
Authority key identifier: 56:23:79:28:54:8B:08:2F:5B:13:C1:6E:DC:3E:6A:7C:2F:80:FC:F1
Certificate issuer:       /CN=A91AEB42/serialNumber=56237928548B082F5B13C16EDC3E6A7C2F80FCF1
Certificate serial:       02A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ViN5KFSLCC9bE8Fu3D5qfC-A_PE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AEB42/1AD97B646A6E11EDBB990363C4F9AE02/ViN5KFSLCC9bE8Fu3D5qfC-A_PE.mft
Manifest number:          028E
Signing time:             Wed 25 Mar 2026 01:23:28 +0000
Manifest this update:     Wed 25 Mar 2026 01:23:27 +0000
Manifest next update:     Wed 01 Apr 2026 01:23:27 +0000
Files and hashes:         1: ViN5KFSLCC9bE8Fu3D5qfC-A_PE.crl (hash: gkA3YHewzrdbx8lWndS+1N6YXEfPbRx5s2HG3rzVMeQ=)
                          2: 7F12211CB57611EF8568F73EC4F9AE02.roa (hash: pLOQ+EfJsrTumBXzksWxgOZTuOF5k35EqMzbJXr7Chw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AEB42/1AD97B646A6E11EDBB990363C4F9AE02/ViN5KFSLCC9bE8Fu3D5qfC-A_PE.crl
                          rsync://rpki.apnic.net/member_repository/A91AEB42/1AD97B646A6E11EDBB990363C4F9AE02/ViN5KFSLCC9bE8Fu3D5qfC-A_PE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ViN5KFSLCC9bE8Fu3D5qfC-A_PE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:23:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 681 (0x2a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AEB42, serialNumber=56237928548B082F5B13C16EDC3E6A7C2F80FCF1
        Validity
            Not Before: Mar 25 01:23:27 2026 GMT
            Not After : Apr  1 01:23:27 2026 GMT
        Subject: CN=69c33910-5cd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7a:4f:46:0a:2a:cb:eb:59:17:66:5e:88:af:
                    f3:10:d6:b7:42:95:c5:ea:9b:76:be:19:01:d6:ee:
                    1f:a1:a9:5e:86:36:9e:46:34:99:90:c8:1c:87:1e:
                    10:64:1c:90:93:ea:b2:07:d4:23:bd:ae:5e:18:b4:
                    70:fb:47:ed:00:ea:f0:50:ad:2a:03:28:47:41:66:
                    58:33:f7:a8:cf:b6:23:41:fb:8d:ef:67:bb:0b:7b:
                    27:86:f8:10:10:5f:2a:8b:12:cb:8b:a2:e6:b3:48:
                    bb:eb:94:b5:0c:dc:0f:30:9e:98:6e:f8:92:57:57:
                    50:95:20:14:92:07:08:f5:44:f5:ec:58:6c:ab:27:
                    90:30:af:86:18:28:a4:11:68:70:2c:0e:56:0d:ad:
                    36:75:b4:b6:2f:99:fe:ea:f2:16:8b:53:f2:11:c1:
                    70:5c:e3:6b:4a:8d:da:2f:53:31:5f:e1:96:fd:76:
                    5b:50:c2:14:c2:55:c2:0e:b0:e4:ef:87:e8:81:ba:
                    d9:74:f5:5c:4f:fe:19:99:c7:81:22:2e:bb:ba:d1:
                    b7:4d:26:51:08:18:ee:ae:02:fb:f9:03:f1:52:47:
                    f9:12:df:bf:fe:34:00:8c:43:49:5c:64:ce:d4:c1:
                    d0:0d:28:df:e4:f5:17:03:a3:8d:e7:89:55:aa:47:
                    ad:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:CC:2B:0B:CD:78:C3:C3:C6:BD:8D:06:40:DF:86:C7:D6:59:BB:4A
            X509v3 Authority Key Identifier:
                keyid:56:23:79:28:54:8B:08:2F:5B:13:C1:6E:DC:3E:6A:7C:2F:80:FC:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AEB42/1AD97B646A6E11EDBB990363C4F9AE02/ViN5KFSLCC9bE8Fu3D5qfC-A_PE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ViN5KFSLCC9bE8Fu3D5qfC-A_PE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEB42/1AD97B646A6E11EDBB990363C4F9AE02/ViN5KFSLCC9bE8Fu3D5qfC-A_PE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:ce:e9:61:72:c7:21:9e:eb:6c:52:d3:54:90:5f:6c:c3:96:
         4e:fd:95:ca:ec:6d:c2:60:f5:fa:22:cd:db:11:cc:d2:44:85:
         e7:03:6a:c7:31:13:98:8c:76:17:ae:32:e7:a4:a6:0a:38:f4:
         ba:72:02:1a:a9:89:9e:33:05:b1:39:71:b5:0e:9e:ce:34:6a:
         1b:50:6d:a5:72:55:4a:da:91:be:55:e3:5f:32:ca:8a:1e:61:
         df:18:b4:92:ab:46:4e:5a:09:67:4d:b4:54:f0:d0:d6:a5:9d:
         d1:2e:67:ae:bf:7f:f4:c5:c4:75:c3:c4:08:39:8b:7e:d6:97:
         dd:af:44:be:17:c3:49:97:b6:53:b3:c6:d5:3d:e7:fe:d6:f0:
         aa:26:5c:c6:a6:ad:9c:ef:f3:81:47:9f:64:9c:c0:e2:f4:1f:
         9a:24:78:8a:30:6a:c7:5c:75:f6:40:64:6f:8e:12:11:ce:5c:
         e9:cc:29:9b:55:be:71:51:b2:1a:a1:f8:f7:b0:54:29:d5:8f:
         33:36:3f:4a:90:c5:e9:9d:48:a8:ee:64:98:53:9a:d9:62:fe:
         08:a6:7f:e0:9e:8d:0d:52:54:34:d5:b0:69:c8:24:4a:42:41:
         af:07:0b:4f:43:b3:04:1d:72:c7:ad:55:1f:41:21:2d:65:f2:
         e6:4e:61:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:38:44 2026 by rpki-client