Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
File:                     4VW4KofSjod2AvmU-P_T50Sq9IA.mft (raw, json)
Hash identifier:          JU6HpS3E9DATFLRoa3G/HHl70CGruJhluBb4P1etO4w=
Subject key identifier:   56:79:56:4F:26:4D:48:C5:23:A6:33:92:2F:9F:72:C7:14:77:38:FE
Authority key identifier: E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80
Certificate issuer:       /CN=A91B625F/serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480
Certificate serial:       08DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
Manifest number:          0852
Signing time:             Thu 26 Mar 2026 20:53:50 +0000
Manifest this update:     Thu 26 Mar 2026 20:53:50 +0000
Manifest next update:     Thu 02 Apr 2026 20:53:50 +0000
Files and hashes:         1: 4VW4KofSjod2AvmU-P_T50Sq9IA.crl (hash: 0TNAdUPGjpgKsHarqNKMXqwUHNeyq5fzZNDMfUqDATk=)
                          2: 0989F3EE120911EB83107638C4F9AE02.roa (hash: 4Y9nNKAigvhYjcu279sIrumnfKE8nPHZdarr6Cb3oLQ=)
                          3: 1BDAA63E12B211EBA631032CC4F9AE02.roa (hash: sYhhaYoxdAzhClysEfyco8DOZT06ACPXGgRoT8fF4sA=)
                          4: 190D1EDC32C411EB98F62F5FC4F9AE02.roa (hash: rjElA2OWEyqb1O0JSaEyfj+lEFs3L7mpqepJIx3ebGA=)
                          5: AD0EFB005DFD11EBAD26AA4BC4F9AE02.roa (hash: C//L8dqksd8wIiYlgl9aF5lle1XW+/2dgZ+Mvuzm+b0=)
                          6: F5D6628C205011EB9EC2AA46C4F9AE02.roa (hash: GF1Q9WC2AFPyPxrIdnDx0DujlM4kUztE9+LDlhci/E4=)
                          7: BBBC061A122711EB952CAB3FC4F9AE02.roa (hash: C0xBTRlD8HLET0RP6eUIhENntX7keWJnMKK0uyPRa78=)
                          8: C13E824AC49F11EBAC936D7AC4F9AE02.roa (hash: yHJ8vOtxRGFU0cYTCITAbcI8dCzSp/DJjmxjwuQbPrM=)
                          9: F255E05612DB11EBBE14D853C4F9AE02.roa (hash: vLQDmUgwBRf1LfHES4fcrNN9SFNnqF9R/jcKitT1EiY=)
                          10: 82CA92C4703A11EBB9A2D47AC4F9AE02.roa (hash: nyqS5eXZEzcdM+pwx4cIcrVn+dhu/AnRzLZWpHkKUok=)
                          11: 86CD7C2E72B011EB9FC4FE4EC4F9AE02.roa (hash: OMXUb6Lx3/4kaa1T15ov60ZpldaZCJFTzLaLw/ElCUo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl
                          rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 20:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2269 (0x8dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B625F, serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480
        Validity
            Not Before: Mar 26 20:53:50 2026 GMT
            Not After : Apr  2 20:53:50 2026 GMT
        Subject: CN=69c59cde-6fec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a2:17:f4:80:e1:4e:99:1e:d0:cb:c5:39:28:
                    a9:2b:2f:da:20:d8:7e:76:7c:fe:07:ce:ff:e3:ee:
                    88:68:60:e5:54:ad:1d:aa:06:fc:af:51:03:f4:e4:
                    91:e7:c9:42:3e:7a:ec:09:3b:1a:72:99:eb:35:bd:
                    39:d3:b5:95:14:e7:07:45:a3:64:2f:07:eb:5e:19:
                    65:d0:45:9f:67:ce:ae:cd:3e:fb:cf:d6:59:ee:8d:
                    74:78:23:11:bf:e0:eb:39:f3:d7:12:4c:87:85:a7:
                    7d:91:81:3b:7a:9d:91:fb:59:52:92:cc:7c:0c:ef:
                    0d:3e:1a:93:0e:29:00:fa:67:c8:3d:5e:a5:f9:39:
                    eb:b2:90:15:48:5f:ed:d6:0e:c5:36:5e:ef:5b:ed:
                    5b:c4:02:59:5c:8d:5f:9d:ad:49:de:e1:fc:ef:1f:
                    6f:6c:5b:0e:e1:f3:ee:cf:6e:2e:e7:c0:db:17:74:
                    49:51:10:ed:b2:de:b4:67:1e:e6:e1:87:6a:cb:10:
                    15:02:3b:c2:1b:34:1b:e6:64:dc:f1:a6:1e:29:07:
                    b8:dc:d5:28:7b:07:c7:94:d5:09:37:66:2b:0e:b5:
                    5f:f2:4f:5d:c0:89:08:ca:a4:83:0e:5a:91:44:d7:
                    c6:56:71:2f:3e:2a:e9:9e:45:6e:74:7f:2a:b9:d9:
                    e7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:79:56:4F:26:4D:48:C5:23:A6:33:92:2F:9F:72:C7:14:77:38:FE
            X509v3 Authority Key Identifier:
                keyid:E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:f6:c5:c5:a0:da:e7:ce:17:eb:b5:90:09:7e:af:9f:e9:73:
         1d:f5:62:f8:23:35:8f:1e:e1:0a:fb:60:04:c7:0d:7a:f4:75:
         66:79:b5:ef:9f:7b:f3:d1:3b:b7:d6:9d:98:25:e6:45:c7:22:
         02:d4:7e:bb:76:39:3a:53:21:b0:75:d8:25:93:ee:9b:8b:6c:
         06:6e:22:6f:c7:ac:ad:df:92:e3:ad:58:3c:b6:82:a7:fe:6a:
         01:7c:2e:ae:9c:23:c4:20:22:eb:c5:69:3d:cf:19:0c:18:af:
         cf:62:79:6e:7e:73:47:09:c4:c3:a2:89:6a:a6:ae:1b:e8:0b:
         64:93:7a:dd:19:bb:60:fe:91:90:29:b5:59:f0:a7:32:17:56:
         62:48:38:ab:0a:4c:56:91:fd:0b:1a:89:e9:3f:6b:bd:d6:c2:
         da:7d:05:52:b6:5a:03:86:ae:ba:bf:66:28:d0:61:d9:36:9d:
         a6:e2:7c:8d:c4:23:d0:69:de:8e:8a:53:17:47:64:bd:c1:a7:
         88:5b:b5:15:68:bc:e4:3e:fe:93:e0:42:af:15:47:8f:2a:94:
         7b:8e:f6:3f:fb:fa:eb:28:5c:f3:93:25:fc:bd:4f:82:6b:ab:
         58:62:6d:1a:c3:58:4f:4b:77:59:b0:a8:1e:8f:11:93:18:68:
         1c:22:a4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:35:30 2026 by rpki-client