Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.mft
File:                     Vd1sG_HER988yGQNERKpasrh-Aw.mft (raw, json)
Hash identifier:          B0dvtfrVv5FEd72Bc4CT1J50n/K5gFamHZtwlhPvZs8=
Subject key identifier:   31:20:40:AD:8B:50:D6:64:07:57:EE:74:FE:85:FA:7B:D8:CC:CE:B7
Authority key identifier: 55:DD:6C:1B:F1:C4:47:DF:3C:C8:64:0D:11:12:A9:6A:CA:E1:F8:0C
Certificate issuer:       /CN=A91C5CA9/serialNumber=55DD6C1BF1C447DF3CC8640D1112A96ACAE1F80C
Certificate serial:       9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd1sG_HER988yGQNERKpasrh-Aw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.mft
Manifest number:          95
Signing time:             Fri 27 Mar 2026 07:00:34 +0000
Manifest this update:     Fri 27 Mar 2026 07:00:34 +0000
Manifest next update:     Fri 03 Apr 2026 07:00:34 +0000
Files and hashes:         1: Vd1sG_HER988yGQNERKpasrh-Aw.crl (hash: lVPEvVT0CBjJKvnnKgnk+FcXtzIvwyDVd3mU+tmrshc=)
                          2: 36B587404B0F11F0A2359B4EC4F9AE02.roa (hash: Np4RhG1xsJNFE2oTPHnRwfjk0sVMuj4yUU4qDWm5ytg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.crl
                          rsync://rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd1sG_HER988yGQNERKpasrh-Aw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 07:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 157 (0x9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5CA9, serialNumber=55DD6C1BF1C447DF3CC8640D1112A96ACAE1F80C
        Validity
            Not Before: Mar 27 07:00:34 2026 GMT
            Not After : Apr  3 07:00:34 2026 GMT
        Subject: CN=69c62b12-5004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d4:14:fd:50:51:74:02:ab:fb:34:37:a2:b6:
                    c9:fd:35:9f:85:30:b5:4e:ae:bc:8e:51:4f:06:48:
                    8f:ea:8f:1e:bb:00:63:d0:3d:a9:ab:f0:c6:87:26:
                    5b:1f:22:f7:da:3d:12:18:03:fa:40:6a:ba:57:4b:
                    05:c3:b3:0f:6e:47:88:1c:5f:e9:46:d4:6d:89:8d:
                    1c:f3:8f:6a:67:0b:ad:70:a4:c4:56:ae:23:89:30:
                    f9:64:ee:c5:19:70:63:58:2b:c0:4a:23:2a:90:36:
                    be:9f:1f:b7:f9:b2:74:61:52:b5:55:15:d1:b6:98:
                    24:00:63:8c:2c:62:34:01:6c:ab:5d:d8:77:1f:bd:
                    c7:64:bd:7a:a3:7b:0c:f4:b0:a2:66:d5:d5:e7:98:
                    d4:e7:74:f0:32:81:b5:43:55:4f:f8:e9:7f:62:45:
                    74:c1:9b:88:81:bf:ba:ea:39:39:7d:2c:ed:67:1b:
                    85:69:cd:a1:c2:45:8f:41:22:c0:9b:33:07:d1:ae:
                    35:ea:61:47:31:b0:37:b3:58:ff:86:ae:cc:83:d9:
                    4f:18:4a:15:83:fd:5a:14:67:b8:ca:01:8b:89:d9:
                    c8:2f:b9:46:0b:da:52:cb:23:42:bb:ef:5d:d1:8d:
                    10:5f:b0:c5:5f:8a:44:fe:55:96:8a:eb:89:91:02:
                    4b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:20:40:AD:8B:50:D6:64:07:57:EE:74:FE:85:FA:7B:D8:CC:CE:B7
            X509v3 Authority Key Identifier:
                keyid:55:DD:6C:1B:F1:C4:47:DF:3C:C8:64:0D:11:12:A9:6A:CA:E1:F8:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd1sG_HER988yGQNERKpasrh-Aw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:dc:a8:50:35:10:7c:71:b8:27:60:e3:1f:9a:08:aa:66:fe:
         54:71:f2:88:0e:7c:ec:83:76:1c:7c:83:11:9c:b6:e9:69:07:
         96:38:d4:99:59:4b:ee:4a:6e:f6:6b:22:cb:36:3e:b4:82:99:
         6f:84:3f:66:e5:7d:c8:5d:95:2a:91:ad:b5:9f:83:21:f0:69:
         4e:e3:80:db:01:7f:aa:05:16:8d:a7:d3:83:60:47:6a:c3:e2:
         cd:3f:49:93:54:6a:15:33:09:6e:81:38:86:5e:c3:55:11:c3:
         87:97:3c:0b:73:20:d2:e8:d6:05:e9:58:51:cf:78:f0:8c:14:
         3f:b8:40:16:0c:4c:d6:e2:19:fd:04:1e:63:6a:53:8a:2e:cc:
         a4:62:e6:36:8b:04:98:03:10:ee:d5:06:7c:99:d6:a6:17:b8:
         04:a2:3a:de:7a:c4:fa:c6:0e:ba:68:30:cd:44:42:b2:0e:63:
         04:73:d3:54:13:99:99:9f:c2:58:61:ff:0b:94:e7:86:50:02:
         2d:80:c4:53:6c:f3:85:80:c7:7b:c0:f9:0a:d7:e6:b5:7b:2e:
         9b:9f:da:dd:93:70:d5:90:b3:6f:d7:19:30:0c:1d:81:b4:39:
         32:b6:00:c8:b5:00:8d:e4:35:3c:f2:7c:02:b0:af:e7:09:92:
         41:8d:3d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:12 2026 by rpki-client