Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft
File:                     ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft (raw, json)
Hash identifier:          +OYPmaXJxIz1WiwICJF4CWMhq2Fcxn/cBiLxshTDHFo=
Subject key identifier:   86:10:1B:77:B7:78:A1:15:CD:99:23:D3:09:6F:B9:11:CA:C6:84:24
Authority key identifier: 6A:BF:EF:C8:34:19:11:6E:F3:4A:F3:A5:A7:FF:48:DE:03:BE:83:32
Certificate issuer:       /CN=A91D4E45/serialNumber=6ABFEFC83419116EF34AF3A5A7FF48DE03BE8332
Certificate serial:       0718
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ar_vyDQZEW7zSvOlp_9I3gO-gzI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft
Manifest number:          0709
Signing time:             Tue 24 Mar 2026 21:41:20 +0000
Manifest this update:     Tue 24 Mar 2026 21:41:19 +0000
Manifest next update:     Tue 31 Mar 2026 21:41:19 +0000
Files and hashes:         1: ar_vyDQZEW7zSvOlp_9I3gO-gzI.crl (hash: ESgbuCQsrSVmeb6qm3Z4y8ESygqt+OVJ7yey13lrLxo=)
                          2: 1B25BF167FE111EBB6C0941AC4F9AE02.roa (hash: HMfayLmm0jpFCDpVCCzDmRgwU66yO5eXMZ9A310lDoI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.crl
                          rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ar_vyDQZEW7zSvOlp_9I3gO-gzI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1816 (0x718)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4E45, serialNumber=6ABFEFC83419116EF34AF3A5A7FF48DE03BE8332
        Validity
            Not Before: Mar 24 21:41:19 2026 GMT
            Not After : Mar 31 21:41:19 2026 GMT
        Subject: CN=69c30500-7dcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:70:91:a9:4c:0c:c2:30:fa:92:dd:0a:87:4f:
                    f6:98:96:35:3e:85:b6:59:01:d6:4a:65:bd:27:3b:
                    cb:a3:22:3d:07:78:38:a4:1d:cf:fc:eb:95:7f:b4:
                    c3:3a:a5:a4:64:90:9d:9b:5f:f8:76:54:7e:2b:c9:
                    6b:45:d0:5c:9d:76:ad:ae:7a:b5:13:f0:c3:55:83:
                    af:ed:14:81:f4:bf:13:c3:c7:d4:d5:1d:5e:1d:0e:
                    b2:9b:b5:d8:59:df:3f:c7:50:00:89:10:8e:0f:04:
                    8e:9f:2f:6f:60:d0:bb:03:f6:5e:d8:eb:d2:eb:97:
                    04:16:2a:3d:cc:67:a4:7a:25:17:c8:62:e5:c8:30:
                    5a:a6:58:4c:96:63:55:f8:8b:21:67:b0:81:7c:d6:
                    e9:71:49:ad:e7:5d:a2:41:fe:9a:1c:27:f3:fe:e5:
                    ba:1a:a0:0f:3f:17:b8:b3:95:19:0f:bd:ba:6c:a1:
                    9a:65:dd:72:00:7c:11:62:9f:99:33:db:78:00:84:
                    ea:0a:2f:1f:90:7c:f5:a2:2a:fe:2c:a7:15:3e:ff:
                    3b:e8:3d:db:a0:01:3b:d5:c4:77:d3:0b:5d:44:02:
                    0f:6b:d5:cb:08:5a:50:55:ff:14:e3:87:b0:bd:6c:
                    fc:dc:92:b2:fa:36:92:6a:4e:24:81:d6:27:db:de:
                    93:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:10:1B:77:B7:78:A1:15:CD:99:23:D3:09:6F:B9:11:CA:C6:84:24
            X509v3 Authority Key Identifier:
                keyid:6A:BF:EF:C8:34:19:11:6E:F3:4A:F3:A5:A7:FF:48:DE:03:BE:83:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ar_vyDQZEW7zSvOlp_9I3gO-gzI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:00:ce:56:39:03:62:19:9f:75:23:72:93:a6:eb:94:3d:bb:
         a8:41:4d:c6:83:08:40:cd:73:4c:e6:ed:72:ba:d6:f8:ab:24:
         1e:1f:b0:6f:58:a5:1e:df:e4:97:e2:53:ac:6f:bf:0f:02:03:
         5d:45:71:65:db:1b:a9:e1:bc:59:e6:51:33:d1:63:72:c9:72:
         fd:8a:58:72:b9:2d:c7:21:f1:ad:38:4a:15:ed:04:5b:3c:bb:
         75:d2:51:45:eb:96:56:1e:1d:63:a3:d9:52:f9:f0:fb:8e:20:
         6f:1c:2f:6c:f5:f4:52:06:ba:15:53:5b:0b:15:5c:be:8c:89:
         4b:fa:ae:40:51:3e:55:92:d6:59:59:f2:25:54:af:93:89:2d:
         a0:58:1c:e9:36:a7:25:7a:93:5f:94:e8:9a:e4:51:55:29:83:
         2e:71:9f:57:bd:af:35:51:1d:8d:16:84:54:63:62:72:61:e5:
         f0:dd:5f:f2:04:cc:4f:cc:41:2b:a6:a3:e3:74:e5:a5:ab:00:
         77:c7:3d:b7:fc:a5:be:98:d7:58:f0:07:9a:ce:a5:98:fe:5c:
         6f:89:7a:1f:ac:7d:1f:f8:e0:63:7f:f7:89:40:8e:19:6c:06:
         17:c3:7d:54:a4:9a:e1:42:29:85:c4:3f:2e:66:a5:e5:94:a3:
         ea:81:13:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:27:58 2026 by rpki-client