Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.mft
File:                     VIY3awW4olUjKeNhvXJcd-H40Mk.mft (raw, json)
Hash identifier:          vImNOYpZA/wJxPZ7S1/LGoXKKDdWOZJRYBX3UE7qIOM=
Subject key identifier:   61:F0:FF:8A:8E:4A:73:61:19:91:1E:B4:64:D3:62:E2:22:4D:3B:1D
Authority key identifier: 54:86:37:6B:05:B8:A2:55:23:29:E3:61:BD:72:5C:77:E1:F8:D0:C9
Certificate issuer:       /CN=A91D17F2/serialNumber=5486376B05B8A2552329E361BD725C77E1F8D0C9
Certificate serial:       0DEE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIY3awW4olUjKeNhvXJcd-H40Mk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.mft
Manifest number:          0D87
Signing time:             Tue 24 Mar 2026 17:57:32 +0000
Manifest this update:     Tue 24 Mar 2026 17:57:31 +0000
Manifest next update:     Tue 31 Mar 2026 17:57:31 +0000
Files and hashes:         1: VIY3awW4olUjKeNhvXJcd-H40Mk.crl (hash: RpteQKU5dusz0ZMfHdG92XM4hRjUhpEprn0KfHGR7iM=)
                          2: C97A1A3EB41C11F0AFF91911C4F9AE02.roa (hash: nJl/9CFmVp29B4Ix10HGbDmYMJPOnZIRDaogeFvZyK4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.crl
                          rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIY3awW4olUjKeNhvXJcd-H40Mk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 17:57:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3566 (0xdee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D17F2, serialNumber=5486376B05B8A2552329E361BD725C77E1F8D0C9
        Validity
            Not Before: Mar 24 17:57:31 2026 GMT
            Not After : Mar 31 17:57:31 2026 GMT
        Subject: CN=69c2d08c-d668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f0:92:d4:65:b5:45:ce:e1:cc:ba:b2:bf:16:
                    5b:c3:69:86:7e:e3:9c:8c:3f:78:fe:43:57:51:c9:
                    58:25:7c:20:e9:18:16:47:61:25:cb:f0:d6:a9:aa:
                    fa:28:c4:60:2b:93:c4:74:bb:e2:db:ca:bc:fb:28:
                    3d:26:81:0a:d5:90:01:74:5a:fb:e2:b8:d9:8a:77:
                    e2:6c:16:24:42:1f:2d:91:de:d1:3b:29:21:a5:c8:
                    b1:40:8c:26:ef:15:48:28:e2:ff:14:1d:7b:da:43:
                    4e:c2:d5:7c:5a:71:6c:3d:16:fe:59:e4:b6:5d:e4:
                    be:6b:08:dc:dd:85:1f:41:29:04:18:28:7f:9c:08:
                    da:a8:0a:d4:60:7c:57:41:cf:c2:3b:6b:3f:f2:70:
                    4e:31:f3:2f:1e:d6:23:b7:11:16:c4:c2:df:14:6a:
                    32:f3:6b:61:2b:4c:95:2b:6f:b1:0a:d5:1e:49:32:
                    89:46:00:92:74:e6:18:be:f5:be:07:6e:48:84:23:
                    a1:f5:4f:33:a6:e6:f8:2f:8c:f1:70:8f:27:79:51:
                    06:e9:e8:c9:1d:7a:37:af:8b:66:cd:e9:e1:02:06:
                    1d:db:0a:4d:71:55:27:d5:1b:63:08:b1:d3:a9:2b:
                    62:7a:7e:27:f5:cd:85:1e:d0:aa:5f:11:2b:f2:7a:
                    0a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:F0:FF:8A:8E:4A:73:61:19:91:1E:B4:64:D3:62:E2:22:4D:3B:1D
            X509v3 Authority Key Identifier:
                keyid:54:86:37:6B:05:B8:A2:55:23:29:E3:61:BD:72:5C:77:E1:F8:D0:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIY3awW4olUjKeNhvXJcd-H40Mk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:52:3d:79:87:ea:fc:78:01:c3:90:b3:ac:10:4c:a1:79:74:
         6e:e6:02:4a:4e:1f:c0:f6:f4:0d:39:0b:00:fd:d1:9d:01:20:
         19:a9:d1:16:37:7e:cf:b4:ef:88:40:dc:83:30:83:a1:07:19:
         29:47:de:2b:8a:62:cb:cd:d3:82:56:da:85:2d:a1:91:c5:f0:
         a0:bc:f0:8e:68:17:81:af:44:f7:38:64:42:3d:92:b7:8b:3f:
         fd:a1:82:49:a4:7b:ef:53:4c:f9:22:5e:68:93:d2:60:2d:57:
         c6:5c:23:81:5f:04:99:cb:52:d0:6e:49:26:5e:b4:22:b6:64:
         b1:ff:66:ec:17:47:9b:a5:9d:b4:a9:9a:1e:76:a1:da:b8:5b:
         81:50:21:12:56:b5:cf:22:e4:e9:a1:01:c2:4e:88:1c:88:16:
         39:ea:52:3c:d5:65:5c:03:ee:c2:c2:4d:c7:21:dc:5b:25:16:
         e0:4b:16:c4:27:5e:50:5d:f6:2a:63:a8:12:33:8c:70:e7:82:
         ed:f5:d1:fc:3f:28:86:7b:37:e9:7c:c8:bd:97:ca:b7:bd:ec:
         56:3b:7f:80:41:bc:5f:24:38:07:54:77:be:6a:ea:92:3b:13:
         5d:44:55:1e:89:9e:a2:4f:94:d4:c7:e0:e8:87:61:82:e2:ec:
         38:85:2d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:53:51 2026 by rpki-client