Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCCF4/AAD57936F0F111F0BD6DF555436F56BC/rVo_mWvNoZuP1pKxr8inCuMzPO0.mft
File:                     rVo_mWvNoZuP1pKxr8inCuMzPO0.mft (raw, json)
Hash identifier:          L38rW8CmOXGjNARiGLzTFrlDuqGTLoww1hRgf+j6/8I=
Subject key identifier:   76:EF:A0:4D:1E:86:97:EC:61:10:6E:AE:C0:9C:15:3B:62:AA:7D:A8
Authority key identifier: AD:5A:3F:99:6B:CD:A1:9B:8F:D6:92:B1:AF:C8:A7:0A:E3:33:3C:ED
Certificate issuer:       /CN=A91CCCF4/serialNumber=AD5A3F996BCDA19B8FD692B1AFC8A70AE3333CED
Certificate serial:       32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVo_mWvNoZuP1pKxr8inCuMzPO0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCCF4/AAD57936F0F111F0BD6DF555436F56BC/rVo_mWvNoZuP1pKxr8inCuMzPO0.mft
Manifest number:          2D
Signing time:             Wed 25 Mar 2026 07:57:15 +0000
Manifest this update:     Wed 25 Mar 2026 07:57:14 +0000
Manifest next update:     Wed 01 Apr 2026 07:57:14 +0000
Files and hashes:         1: rVo_mWvNoZuP1pKxr8inCuMzPO0.crl (hash: Bgl70qYr8pNC4ObUZimRAiXkMqTNmmh/TAhq6xhLYgI=)
                          2: 486020FAF24811F08C4BA3F45A6F56BC.roa (hash: Ieu/rdFxP/mHVBIZrGdaeX0beYQDY87XIGYLZGN38j4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCCF4/AAD57936F0F111F0BD6DF555436F56BC/rVo_mWvNoZuP1pKxr8inCuMzPO0.crl
                          rsync://rpki.apnic.net/member_repository/A91CCCF4/AAD57936F0F111F0BD6DF555436F56BC/rVo_mWvNoZuP1pKxr8inCuMzPO0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVo_mWvNoZuP1pKxr8inCuMzPO0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:57:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCCF4, serialNumber=AD5A3F996BCDA19B8FD692B1AFC8A70AE3333CED
        Validity
            Not Before: Mar 25 07:57:14 2026 GMT
            Not After : Apr  1 07:57:14 2026 GMT
        Subject: CN=69c3955b-3900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:23:5f:a1:9b:ca:90:e4:85:fe:77:25:53:20:
                    c0:71:85:83:33:b6:b6:8c:28:95:e0:3d:ea:93:74:
                    38:16:86:3a:7b:90:02:35:02:1b:77:bf:df:19:45:
                    c2:9d:27:f3:07:c8:84:12:2d:dd:32:33:fe:50:a0:
                    08:31:ee:39:9a:cc:51:d6:98:ec:7a:e8:34:02:fa:
                    18:ab:26:15:db:bc:a0:c0:cb:88:98:0c:a0:46:18:
                    cf:f5:c5:aa:e9:f2:fb:0b:63:4c:92:f7:2e:b1:3a:
                    47:31:a0:39:f0:b0:3d:98:ff:ed:58:17:af:2e:b2:
                    da:e1:7b:e0:68:94:8d:e7:8e:06:6d:4c:9c:0c:b9:
                    a5:ec:2a:15:67:5e:b5:8c:c9:6f:2c:31:7f:85:e5:
                    a0:b3:47:a1:81:40:d5:5d:f1:cd:d7:5c:43:2d:f0:
                    46:0c:4e:53:fc:ce:c8:48:22:7b:8b:95:eb:98:23:
                    a5:7f:9b:f7:c0:86:aa:28:67:2f:2e:81:d7:92:c9:
                    4b:f2:91:98:d2:86:37:a4:0c:28:8e:15:5f:2a:c3:
                    00:91:68:40:5f:fe:5c:15:ee:f1:63:b3:6d:31:7e:
                    e8:18:57:a0:c3:1f:f5:72:53:d8:03:13:ce:56:fb:
                    94:55:bf:3f:4a:25:52:74:68:cf:b4:46:1d:48:be:
                    55:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:EF:A0:4D:1E:86:97:EC:61:10:6E:AE:C0:9C:15:3B:62:AA:7D:A8
            X509v3 Authority Key Identifier:
                keyid:AD:5A:3F:99:6B:CD:A1:9B:8F:D6:92:B1:AF:C8:A7:0A:E3:33:3C:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCCF4/AAD57936F0F111F0BD6DF555436F56BC/rVo_mWvNoZuP1pKxr8inCuMzPO0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVo_mWvNoZuP1pKxr8inCuMzPO0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCCF4/AAD57936F0F111F0BD6DF555436F56BC/rVo_mWvNoZuP1pKxr8inCuMzPO0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:57:c1:99:60:54:d7:ac:97:b2:72:41:99:79:f4:6f:af:41:
         0e:36:7f:12:01:02:cb:98:92:50:37:e5:68:79:b8:5f:db:ed:
         4b:47:50:2f:d1:4d:bf:a1:5c:2a:02:ad:13:24:49:10:c0:14:
         85:c8:06:90:55:f2:c9:77:9e:fa:33:dd:96:86:71:b1:c1:e1:
         d3:3f:21:6e:d0:62:e7:5b:07:a5:89:52:50:47:6b:68:95:31:
         a4:98:69:c2:62:b4:eb:85:5a:fc:24:e8:d3:9a:8a:7e:65:3a:
         26:76:32:f8:2e:d6:16:ff:e3:2a:e7:38:13:ff:71:f0:4b:5a:
         41:a3:82:c0:a4:b8:6e:f1:b5:7c:6f:77:de:d0:b6:c1:4c:9a:
         3e:67:b0:fc:54:a6:be:e4:db:58:db:4b:40:35:8c:e0:2d:52:
         2a:04:88:b8:6b:6e:33:65:b6:9e:6c:0a:ff:77:f2:c9:51:69:
         37:23:d4:fe:05:21:cf:59:38:77:b1:f1:15:e4:aa:d1:8b:0f:
         d4:20:23:33:d2:84:69:f6:d8:a9:df:e8:d8:e0:25:b2:c1:13:
         0e:c0:d4:3d:69:30:7f:22:29:7b:93:65:62:9f:3a:01:8f:0e:
         d6:3f:c0:63:bc:d2:43:40:c3:b2:56:b5:97:e3:39:0b:14:a0:
         4e:91:ef:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:41:47 2026 by rpki-client