Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft
File:                     Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft (raw, json)
Hash identifier:          v4H1Whe5zFmVvIeo81U2EZdvJJ+WB3sW8HflMjC5cvM=
Subject key identifier:   DE:09:84:63:70:BE:E2:51:5C:56:03:84:47:F4:78:7C:E7:9F:A4:03
Authority key identifier: 56:CD:32:D1:3F:8C:AE:1E:92:F9:C9:7F:39:5F:1A:23:AB:B9:C6:F7
Certificate issuer:       /CN=A91C5B46/serialNumber=56CD32D13F8CAE1E92F9C97F395F1A23ABB9C6F7
Certificate serial:       2687
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft
Manifest number:          266C
Signing time:             Tue 24 Mar 2026 15:38:47 +0000
Manifest this update:     Tue 24 Mar 2026 15:38:46 +0000
Manifest next update:     Tue 31 Mar 2026 15:38:46 +0000
Files and hashes:         1: Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.crl (hash: v4V4hsOq9etsxHoQYvbbLtlNiI0VzMqs3mgldTdmYvY=)
                          2: E2E360EEF3EE11ECBAE10054C4F9AE02.roa (hash: YYtbQVr1blBcfl0KXa9WX3fO1sfcPhFjjPvdgZB4tRs=)
                          3: E21E1C6CF3EE11ECBAE10054C4F9AE02.roa (hash: M+Wr8rsuFkv+pEdccGdYS8z/By6LwokW8IQrKL2jIU8=)
                          4: E14BDC8EF3EE11ECBAE10054C4F9AE02.roa (hash: /HZqYc+XrDRax1XWxnWWaDO8ZrVsGYFgHHVy0LG/zoI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.crl
                          rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 15:38:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9863 (0x2687)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5B46, serialNumber=56CD32D13F8CAE1E92F9C97F395F1A23ABB9C6F7
        Validity
            Not Before: Mar 24 15:38:46 2026 GMT
            Not After : Mar 31 15:38:46 2026 GMT
        Subject: CN=69c2b007-3b11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5e:f2:70:7d:c5:3b:c0:bf:a7:d6:cd:2f:38:
                    a3:57:88:82:e1:2f:04:ae:47:92:df:23:db:a4:21:
                    2a:ed:ff:06:e7:2a:f3:2c:88:8a:b3:14:9b:25:a2:
                    cc:4a:95:37:d0:4e:23:cd:43:a8:42:29:08:c4:ac:
                    50:72:4d:17:f2:e4:91:a7:8b:56:0a:39:02:af:35:
                    0a:e1:a7:1d:0b:a5:51:06:34:6b:3a:37:e5:d6:5a:
                    24:2e:2d:c9:2f:ef:f6:6b:4f:52:0d:15:0a:b8:2a:
                    b4:9f:88:02:e9:91:51:38:d1:3f:6b:32:33:32:1a:
                    67:d2:4c:5a:74:00:4e:fc:02:c4:87:df:84:48:44:
                    eb:18:32:da:bc:3a:0b:11:67:e6:1c:1f:04:b7:2c:
                    bc:17:dd:47:21:ac:65:94:c5:24:33:c7:c9:df:e3:
                    27:76:68:45:23:50:58:70:03:76:85:63:87:8f:d3:
                    2f:d6:6e:ec:e6:fe:f0:ec:b6:9a:c1:4e:0d:5b:f0:
                    07:04:99:f5:43:ae:67:9e:7c:00:f5:c8:f8:0d:88:
                    74:35:d0:a0:67:c5:1e:6e:07:ad:59:e4:e0:f7:ec:
                    43:1b:c8:d1:89:0e:8e:7c:d2:61:e7:4f:24:88:bf:
                    47:5c:54:e8:40:40:33:2b:8f:d8:07:6d:f4:a0:3b:
                    7b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:09:84:63:70:BE:E2:51:5C:56:03:84:47:F4:78:7C:E7:9F:A4:03
            X509v3 Authority Key Identifier:
                keyid:56:CD:32:D1:3F:8C:AE:1E:92:F9:C9:7F:39:5F:1A:23:AB:B9:C6:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:a6:da:75:07:79:ca:c9:2c:af:e0:97:3f:1f:f1:b9:9d:39:
         b8:65:4b:67:82:6b:85:54:31:ff:31:2e:b5:3c:b3:bb:51:11:
         03:70:4b:e8:f1:da:cf:99:cb:13:19:76:8e:57:2b:f2:14:7c:
         6d:02:3b:7a:29:41:f5:1f:78:c2:12:bd:ba:4d:c9:7a:2e:7d:
         f7:b3:7a:70:ab:f9:8b:91:79:d6:ce:48:eb:75:0a:a3:27:79:
         af:52:5e:e4:6d:22:41:86:be:8d:9e:98:8b:7f:90:c7:c0:58:
         ee:76:c7:b3:41:35:fb:9b:ab:e0:ae:1d:03:c0:ed:b0:a8:1b:
         bc:7b:65:fe:8a:4e:ad:bf:c7:8e:45:f4:19:57:60:6f:7a:9a:
         30:4f:9d:2b:e5:a6:ae:5f:15:06:a9:a1:1e:a0:0a:7b:7b:0a:
         54:3e:1a:4d:ed:01:c4:c8:1e:52:8e:5d:1e:db:cc:e0:b1:ce:
         61:1f:fe:90:aa:7b:f6:fb:dd:0d:a5:df:2c:0f:db:db:3b:65:
         81:77:46:48:9f:07:14:ce:3b:a7:03:fe:40:9a:a6:01:32:7d:
         0d:e6:c0:78:79:88:48:72:c4:ae:dc:23:2d:66:8c:6c:b6:55:
         c0:4c:44:c8:7d:69:f9:4a:85:60:79:e9:a6:5a:0c:c5:a3:ea:
         81:a3:2a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:18:31 2026 by rpki-client