Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B00DC/2FBBC36E001811F1B6A12A14426F56BC/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.mft
File:                     Vd5CtrGL1XmaJuhCmWED-jS8Fxg.mft (raw, json)
Hash identifier:          TfxQnxJ56lKE+zlknS2nx53ZN1TkqtZ5onStuP42Qkw=
Subject key identifier:   76:2F:2B:95:35:58:B3:61:55:92:97:86:D6:FD:E4:0E:CD:29:FF:0E
Authority key identifier: 55:DE:42:B6:B1:8B:D5:79:9A:26:E8:42:99:61:03:FA:34:BC:17:18
Certificate issuer:       /CN=A91B00DC/serialNumber=55DE42B6B18BD5799A26E842996103FA34BC1718
Certificate serial:       38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B00DC/2FBBC36E001811F1B6A12A14426F56BC/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.mft
Manifest number:          36
Signing time:             Mon 11 May 2026 08:48:39 +0000
Manifest this update:     Mon 11 May 2026 08:48:39 +0000
Manifest next update:     Mon 18 May 2026 08:48:39 +0000
Files and hashes:         1: Vd5CtrGL1XmaJuhCmWED-jS8Fxg.crl (hash: x03SsJeKb2+uZOzlqBvKTFUukJ7XH0ubcWHh9wW3j+4=)
                          2: 63ABE3C0001811F1804E761C426F56BC.roa (hash: DthUWy6Hm+llw2ps4qbubO2gT5P5TYvR85rrtYYcYEE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B00DC/2FBBC36E001811F1B6A12A14426F56BC/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.crl
                          rsync://rpki.apnic.net/member_repository/A91B00DC/2FBBC36E001811F1B6A12A14426F56BC/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B00DC, serialNumber=55DE42B6B18BD5799A26E842996103FA34BC1718
        Validity
            Not Before: May 11 08:48:39 2026 GMT
            Not After : May 18 08:48:39 2026 GMT
        Subject: CN=6a0197e7-6bef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:49:7f:4f:fc:70:74:46:dd:a3:77:30:e6:98:
                    02:b6:b0:84:83:7b:ea:1f:8b:0f:d1:64:cf:81:07:
                    a9:36:f4:39:35:21:94:7f:81:84:fe:e2:86:43:87:
                    31:3a:97:b3:7a:92:60:a4:87:7d:7f:bf:4f:e1:03:
                    0d:77:e9:9d:04:c0:d9:f1:ec:ac:55:72:bc:1d:5c:
                    16:40:63:ed:bf:5c:cb:e0:6c:86:c4:2a:06:5e:bd:
                    af:b0:5a:8b:3b:fc:65:26:05:4b:04:16:8c:ad:48:
                    b2:40:f7:d9:f6:3e:3a:96:c1:25:42:6a:ae:a2:36:
                    9a:30:45:07:03:a1:ce:96:b7:c4:19:b7:8e:7c:15:
                    c7:35:32:bd:a8:27:1f:10:a9:50:af:a0:16:e2:3c:
                    69:ae:c6:26:da:ce:0b:82:6e:dd:49:12:d5:57:d3:
                    2a:d4:59:31:df:a0:0e:ed:55:35:d3:01:a0:84:7f:
                    ed:f7:c7:43:c5:ee:5b:76:6b:6a:45:6b:1e:1c:b0:
                    9d:fe:2c:d1:01:ca:6c:05:57:3c:3a:58:f4:b7:8c:
                    0a:41:0c:d2:7f:5e:64:17:66:6f:c8:5e:7d:e3:ef:
                    dc:c1:a0:0c:69:35:6f:80:bb:d2:d8:8f:b1:dc:d9:
                    c3:15:37:06:68:b9:75:cb:d3:ea:46:c8:15:f5:48:
                    68:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:2F:2B:95:35:58:B3:61:55:92:97:86:D6:FD:E4:0E:CD:29:FF:0E
            X509v3 Authority Key Identifier:
                keyid:55:DE:42:B6:B1:8B:D5:79:9A:26:E8:42:99:61:03:FA:34:BC:17:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B00DC/2FBBC36E001811F1B6A12A14426F56BC/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B00DC/2FBBC36E001811F1B6A12A14426F56BC/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:1a:9b:c5:46:5e:65:43:a7:2c:b0:81:97:0e:1b:a6:7d:6c:
         fb:7a:c7:e4:41:81:07:ed:51:f4:f5:49:1a:ee:55:20:5c:99:
         4a:ee:53:a1:cc:c8:7e:8b:c1:ee:4b:e7:5b:c9:78:cf:80:8d:
         91:7a:f6:51:84:3d:c7:b4:59:79:f5:51:d5:7f:2a:71:57:35:
         cf:e7:8b:27:b7:a3:dc:b4:44:3b:bd:65:14:eb:58:af:23:82:
         17:e7:0f:c3:23:77:9b:57:05:ce:59:2c:f5:32:b6:bf:d2:51:
         40:f4:d6:5f:d8:f0:11:5b:28:40:c3:2f:6f:54:c6:ca:08:69:
         2f:c3:28:eb:8d:1a:08:f8:0e:01:11:ed:2f:37:7a:a2:af:d2:
         20:a9:71:ec:53:0e:55:ce:bb:c5:2e:36:52:47:c8:de:2c:42:
         0e:ae:0f:d3:f2:75:93:35:ad:2f:5e:cc:aa:51:48:71:2b:e5:
         1b:ef:df:88:5b:fa:64:ab:98:b6:e9:57:6c:e7:fa:ff:7b:9c:
         1e:52:e5:37:09:5f:62:c5:9e:6e:6a:4e:5e:64:d0:1b:ca:ad:
         55:5b:c6:04:fa:88:97:aa:66:e0:7b:c4:c4:de:b6:dd:2c:c0:
         a6:3b:67:44:8d:17:79:87:c3:0c:7a:25:9c:69:df:89:6b:c3:
         c2:8a:8e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:31:30 2026 by rpki-client