Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.mft
File:                     V4yNAq7wtD4p_s6hiV3MnRBmNTU.mft (raw, json)
Hash identifier:          sIpVNZKrg0JTtrY8UfhVCaZHoiC08g0clymHzSoKAlU=
Subject key identifier:   47:74:23:8A:B6:D4:F1:77:D4:B1:CB:A8:92:9A:98:4E:33:79:13:C4
Authority key identifier: 57:8C:8D:02:AE:F0:B4:3E:29:FE:CE:A1:89:5D:CC:9D:10:66:35:35
Certificate issuer:       /CN=A91D4786/serialNumber=578C8D02AEF0B43E29FECEA1895DCC9D10663535
Certificate serial:       0106
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4yNAq7wtD4p_s6hiV3MnRBmNTU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.mft
Manifest number:          FF
Signing time:             Wed 25 Mar 2026 05:24:09 +0000
Manifest this update:     Wed 25 Mar 2026 05:24:08 +0000
Manifest next update:     Wed 01 Apr 2026 05:24:08 +0000
Files and hashes:         1: V4yNAq7wtD4p_s6hiV3MnRBmNTU.crl (hash: DBEvsudExP7gEjNFI3SYwJzctkQ4mU+Q3FIUSch7+DU=)
                          2: 073CAA38A7C811EF92C28379C4F9AE02.roa (hash: NUIndaatcaulOjWyNrpbRvmZbEsP5jvoX9Ee5iUIQ1Y=)
                          3: 89FFAC1AF26B11F092350A59636F56BC.roa (hash: GktjzTnaS2jVEU4E0L4jhJZ+0kYhshKaQ+y+Uwli+hY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.crl
                          rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4yNAq7wtD4p_s6hiV3MnRBmNTU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:24:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 262 (0x106)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4786, serialNumber=578C8D02AEF0B43E29FECEA1895DCC9D10663535
        Validity
            Not Before: Mar 25 05:24:08 2026 GMT
            Not After : Apr  1 05:24:08 2026 GMT
        Subject: CN=69c37178-b60e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c4:3e:c5:5e:59:8a:0a:a8:44:36:39:fe:ca:
                    0b:5b:aa:09:72:69:f0:72:a1:86:4d:f2:2c:e1:94:
                    52:37:c4:de:e6:e7:6a:35:b6:d1:0d:87:3b:fd:cf:
                    c2:c2:6a:cf:2b:77:b2:c7:6a:d0:83:e1:d9:d0:a3:
                    65:89:ed:16:b0:09:45:bf:ba:95:cb:42:7c:07:f5:
                    7b:9b:20:de:9b:d3:09:10:f6:1b:12:3b:21:4c:a2:
                    bf:e5:d6:07:f1:f4:05:87:22:e4:79:03:f5:31:20:
                    e5:e0:1a:0a:86:df:4e:00:c5:8b:d7:29:f1:37:17:
                    74:c6:bf:47:6c:9f:99:55:3e:ee:a5:31:44:72:c1:
                    fe:1b:0a:b1:c9:4d:08:74:1d:e5:13:19:13:c7:60:
                    c8:bb:6d:b0:8d:02:23:cb:1f:26:90:88:20:56:e7:
                    04:11:4f:80:e7:54:cf:9c:d7:36:22:4f:fd:4d:8f:
                    70:6e:0e:a1:6c:2c:03:15:04:70:e3:b5:b6:12:cb:
                    83:4f:0d:20:50:25:f7:6c:18:3e:31:21:d9:04:93:
                    1f:0c:8b:b7:a2:e7:e3:20:90:02:36:85:67:9f:5d:
                    59:a6:a8:20:20:7e:ec:6b:e4:e0:eb:72:02:d2:07:
                    68:7a:41:c0:8f:c4:00:be:40:95:83:ac:d1:af:b5:
                    80:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:74:23:8A:B6:D4:F1:77:D4:B1:CB:A8:92:9A:98:4E:33:79:13:C4
            X509v3 Authority Key Identifier:
                keyid:57:8C:8D:02:AE:F0:B4:3E:29:FE:CE:A1:89:5D:CC:9D:10:66:35:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4yNAq7wtD4p_s6hiV3MnRBmNTU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:57:ea:a0:fb:cc:fa:41:73:a1:63:83:de:05:41:6f:26:d9:
         e8:47:bc:8a:e8:a8:dc:30:48:2b:60:ed:30:da:34:d0:34:24:
         08:af:2c:b5:c3:ad:f4:9a:99:9f:dd:8a:94:bc:cd:2e:ed:76:
         20:2a:6a:38:9c:74:a1:9b:49:6c:de:46:95:f2:86:05:ca:2d:
         7c:1a:07:7a:de:7d:3a:7e:2c:d3:6f:0d:1e:5a:bd:e2:7f:76:
         6c:20:a2:2e:ae:b7:dc:e6:1d:65:c1:a2:5d:db:ef:e8:a3:96:
         c4:34:d4:c0:b8:a8:64:78:35:28:ae:45:c2:a7:d7:cc:79:c0:
         82:2a:bd:51:fe:6b:9b:fe:d9:f6:fb:0e:12:4b:4d:78:da:e2:
         a2:bc:c4:c6:c6:bd:a1:32:26:c2:bb:15:ab:8d:af:d7:92:7f:
         93:3d:2a:1d:0d:a9:a0:be:57:6b:0d:0d:31:9e:12:a0:f9:cd:
         07:2f:6b:eb:b4:c2:14:e9:0e:0d:13:d6:4e:2d:d0:04:9b:49:
         c9:09:7c:b3:85:3c:37:87:ca:41:ac:22:53:23:2e:df:3f:46:
         e2:11:a8:5a:8d:bd:72:74:3f:1e:0d:75:f3:48:b5:29:b1:ad:
         e4:a8:c3:b8:df:ed:59:cc:9a:e7:d0:e7:41:51:04:d6:85:6b:
         0d:52:e7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:25:37 2026 by rpki-client