Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.mft
File:                     vpuQTrdssFxgw-LDeeL6SJoOF3I.mft (raw, json)
Hash identifier:          nTReLcqyfBeN5attS1n2x0+nCf1TZNvtBo0D/lSh+bA=
Subject key identifier:   D5:79:C4:61:F9:20:EC:E4:7F:FD:9A:00:46:FE:BD:77:E4:F2:6D:99
Authority key identifier: BE:9B:90:4E:B7:6C:B0:5C:60:C3:E2:C3:79:E2:FA:48:9A:0E:17:72
Certificate issuer:       /CN=A91E5832/serialNumber=BE9B904EB76CB05C60C3E2C379E2FA489A0E1772
Certificate serial:       EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpuQTrdssFxgw-LDeeL6SJoOF3I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.mft
Manifest number:          E3
Signing time:             Wed 25 Mar 2026 05:43:28 +0000
Manifest this update:     Wed 25 Mar 2026 05:43:28 +0000
Manifest next update:     Wed 01 Apr 2026 05:43:28 +0000
Files and hashes:         1: vpuQTrdssFxgw-LDeeL6SJoOF3I.crl (hash: nCYSQroWDIcThueF5HjbgXrZ6+YZCp+lFqKlkFJBcp8=)
                          2: A9C0AECED0BA11EFB7A6B027C4F9AE02.roa (hash: NUBIPTzmLE7ei0rq8siWB1jNLIe1jHWLzPPD5tPj2mA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.crl
                          rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpuQTrdssFxgw-LDeeL6SJoOF3I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:43:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 235 (0xeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5832, serialNumber=BE9B904EB76CB05C60C3E2C379E2FA489A0E1772
        Validity
            Not Before: Mar 25 05:43:28 2026 GMT
            Not After : Apr  1 05:43:28 2026 GMT
        Subject: CN=69c37600-860b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:40:ab:3a:79:9c:2b:2f:ec:5b:90:d6:77:12:
                    72:6f:f6:4d:d1:1c:cf:ac:93:6a:3e:49:81:a0:74:
                    b3:cc:5a:2d:9a:91:4b:d3:74:23:ad:67:da:ef:53:
                    a5:c6:90:c1:76:d4:22:3c:f7:c2:c1:3c:b3:67:2f:
                    3e:09:8c:12:bc:a2:b6:8c:c4:ce:e7:2d:2a:c5:60:
                    88:ae:8c:50:c4:7c:b4:b8:42:b1:16:85:9f:e0:b2:
                    f6:fe:9a:63:25:27:96:d9:90:b2:fe:1a:07:1f:c5:
                    25:a9:61:35:c9:ce:81:16:0b:90:b9:92:ad:7a:5c:
                    a0:dd:24:51:d0:f1:23:5e:84:3d:4d:c3:7f:46:76:
                    74:18:fc:54:47:01:16:d1:87:8d:57:b1:c3:f8:68:
                    40:46:2e:3a:28:67:10:00:fd:de:66:26:9b:43:90:
                    b5:10:87:84:f2:1d:79:8a:73:1b:66:ff:4f:fb:59:
                    a0:5e:52:d7:61:58:7b:45:44:33:bd:62:ee:ad:75:
                    53:b8:92:b9:9a:6f:d5:72:3d:1a:f1:68:6b:23:d6:
                    2a:42:4d:c3:80:be:5f:dc:ce:a7:e9:b4:8b:c7:46:
                    b9:98:af:0f:9d:99:57:e0:b7:8f:cc:8d:b5:2a:b1:
                    44:cd:55:3d:e4:f7:19:ea:45:de:04:3e:4e:df:19:
                    38:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:79:C4:61:F9:20:EC:E4:7F:FD:9A:00:46:FE:BD:77:E4:F2:6D:99
            X509v3 Authority Key Identifier:
                keyid:BE:9B:90:4E:B7:6C:B0:5C:60:C3:E2:C3:79:E2:FA:48:9A:0E:17:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpuQTrdssFxgw-LDeeL6SJoOF3I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:00:5c:c1:e5:8f:51:32:cc:e8:66:c3:d6:9d:f9:a7:24:06:
         dc:81:54:d0:80:d2:a4:2b:9d:a4:3d:3a:d4:93:eb:a2:de:c1:
         b2:cb:9d:1f:d0:66:f6:e1:17:16:f9:c0:d9:90:73:30:70:7b:
         66:63:43:65:82:42:35:40:e1:a4:8c:ad:6f:96:c8:a0:62:73:
         96:fb:9d:ae:b2:3a:8c:f4:b3:66:3b:de:2c:5f:08:cc:6b:91:
         7e:70:d2:01:56:7e:ec:fa:7a:9e:ab:62:75:9b:04:d4:ea:4f:
         b1:c0:2d:54:e5:00:6a:ad:d7:28:5c:f6:cd:5a:86:3c:d3:6a:
         5e:f9:28:f1:12:92:0a:4c:b2:98:b9:c0:2a:6c:62:dc:98:0a:
         5f:c8:99:80:e7:9f:64:cd:ad:5b:3a:50:31:5d:fd:73:ee:5a:
         2f:0c:7c:99:26:a5:4a:5d:8b:a4:3b:b2:60:15:ee:7b:02:12:
         4b:2f:d8:42:fb:06:2f:95:00:7e:ec:7e:85:00:7b:4b:f4:d2:
         3d:bc:a1:6f:61:4b:e2:f4:d5:7c:0f:c6:4b:63:df:e1:da:d1:
         ea:e8:ab:24:70:b1:2e:a5:d9:c4:16:14:26:63:c5:41:7e:4a:
         53:79:86:09:29:53:b2:23:b8:fe:be:87:83:0b:b2:bc:0b:18:
         49:39:b6:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:46:18 2026 by rpki-client