Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft
File:                     votHM7Guikc2t-kTJzPWVAkePSs.mft (raw, json)
Hash identifier:          xxVmduhL/+DiOo2HTvBkymJ+Zk5gvU6kg9MBhj4OBgU=
Subject key identifier:   5F:8D:E0:4E:7A:03:A4:91:48:64:F4:A7:3E:6A:37:6D:F3:34:15:7E
Authority key identifier: BE:8B:47:33:B1:AE:8A:47:36:B7:E9:13:27:33:D6:54:09:1E:3D:2B
Certificate issuer:       /CN=A91B23D9/serialNumber=BE8B4733B1AE8A4736B7E9132733D654091E3D2B
Certificate serial:       F2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/votHM7Guikc2t-kTJzPWVAkePSs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft
Manifest number:          EA
Signing time:             Wed 25 Mar 2026 05:38:49 +0000
Manifest this update:     Wed 25 Mar 2026 05:38:48 +0000
Manifest next update:     Wed 01 Apr 2026 05:38:48 +0000
Files and hashes:         1: votHM7Guikc2t-kTJzPWVAkePSs.crl (hash: UEvsVVJGh2bdIInBYaRDQTqy3K3CndibnD12ZJT02NM=)
                          2: 63817B3AC9D211EFBC6F934DC4F9AE02.roa (hash: m0i0X9j0yXnsKKSGdxoju3T5IQpZd4Oir8j6ny4qit8=)
                          3: A3815188C9D211EFB961F44DC4F9AE02.roa (hash: DHIuEGlAe2mG5wZOhiV1lUw2gUeKuaIT7YiSDLTxpgQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.crl
                          rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/votHM7Guikc2t-kTJzPWVAkePSs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:38:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 242 (0xf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B23D9, serialNumber=BE8B4733B1AE8A4736B7E9132733D654091E3D2B
        Validity
            Not Before: Mar 25 05:38:48 2026 GMT
            Not After : Apr  1 05:38:48 2026 GMT
        Subject: CN=69c374e9-4f3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e4:df:55:29:13:0b:1b:72:73:66:4d:23:71:
                    95:2b:41:ea:a3:c0:b9:f8:2b:9e:33:8c:9e:00:8c:
                    8a:97:85:1f:66:b1:cc:bf:1c:ac:3e:cb:41:dd:ec:
                    e9:68:a5:85:7c:65:87:04:5e:60:62:0d:57:98:62:
                    06:ba:94:16:c5:5d:dd:88:c7:56:6a:b8:1d:e7:0e:
                    b2:1f:c4:0b:5b:b0:2a:b2:e6:3f:72:cf:22:5e:3e:
                    fb:2a:5d:ed:8c:fb:02:f4:5e:72:b2:8d:9e:21:da:
                    6f:a9:e7:15:7e:44:b6:9b:db:ba:63:5d:28:9d:ef:
                    04:8d:15:58:86:a7:d9:54:e7:ed:ae:80:aa:3b:bb:
                    26:2a:0f:59:b7:5a:87:ad:26:4b:cf:6e:10:8d:68:
                    c2:20:4a:6c:01:39:31:28:af:23:45:85:2c:13:f5:
                    83:be:31:63:dc:25:60:88:e4:25:b7:a7:92:43:f1:
                    a3:ac:2d:9d:47:d7:14:4f:ba:e4:fd:86:2f:e0:aa:
                    a5:4e:b3:4f:2c:d2:1e:3b:80:b8:0b:f5:78:21:50:
                    8c:dd:bb:68:ce:99:f9:b3:1c:cf:01:dd:e8:44:63:
                    b6:f0:84:4b:80:08:96:09:b7:e7:b7:79:6e:4e:31:
                    2f:82:29:4f:ca:4b:f7:00:fb:20:14:4f:44:c2:30:
                    fb:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:8D:E0:4E:7A:03:A4:91:48:64:F4:A7:3E:6A:37:6D:F3:34:15:7E
            X509v3 Authority Key Identifier:
                keyid:BE:8B:47:33:B1:AE:8A:47:36:B7:E9:13:27:33:D6:54:09:1E:3D:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/votHM7Guikc2t-kTJzPWVAkePSs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:bf:df:1b:7c:6b:55:6f:8f:98:ab:b4:f6:3d:bc:43:2d:e1:
         4f:7a:e7:fa:08:c5:36:d9:6d:e6:b8:fb:69:fe:9c:e3:96:35:
         a8:f1:06:12:40:f9:21:71:c1:dd:46:89:03:20:fe:9b:6f:66:
         47:2c:c6:e6:25:70:01:4e:58:d5:c4:2a:b8:b0:98:42:10:eb:
         fd:96:21:31:96:4e:ce:3f:79:c5:61:23:90:7d:74:3b:3d:ea:
         99:5f:75:96:d0:07:71:fa:28:93:6b:90:2f:dc:bc:ef:9f:d7:
         bb:0e:92:41:69:bc:94:53:2b:eb:52:73:8a:54:cf:4e:94:98:
         fe:1e:aa:46:89:35:2f:39:33:fa:89:18:36:54:36:33:40:6b:
         d5:7d:e2:8e:86:34:fe:3f:cb:23:03:f2:0e:6c:a3:50:e3:4b:
         bb:b9:c6:ac:2c:45:e6:b5:31:f3:20:38:89:69:17:80:2a:04:
         1e:74:78:80:e4:98:fc:fd:f0:1d:4c:6d:47:97:d1:d6:bb:e0:
         b3:fe:0b:de:19:10:ce:15:6d:fe:c4:00:ce:26:b2:b5:97:d2:
         8d:3a:4c:86:b0:64:e8:49:e7:59:ee:0c:c2:b9:d6:61:c0:91:
         50:02:dc:41:6f:f8:4a:8b:d8:e4:10:28:cb:a0:22:48:f3:03:
         ea:4b:4e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:04:16 2026 by rpki-client