Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft
File:                     vvMhsD2CRd537IDdAzG_uo0IWdg.mft (raw, json)
Hash identifier:          4xg6kj6LVm2jbvEzwpnOPE6NCTEiaR8/mgZWc8GzrAw=
Subject key identifier:   D6:99:A6:1D:AA:C2:EB:8F:C2:F5:5E:A6:63:79:EA:57:30:BB:7F:7D
Authority key identifier: BE:F3:21:B0:3D:82:45:DE:77:EC:80:DD:03:31:BF:BA:8D:08:59:D8
Certificate issuer:       /CN=A91EE8AC/serialNumber=BEF321B03D8245DE77EC80DD0331BFBA8D0859D8
Certificate serial:       0184
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft
Manifest number:          03E4
Signing time:             Wed 25 Mar 2026 01:33:08 +0000
Manifest this update:     Wed 25 Mar 2026 01:33:07 +0000
Manifest next update:     Wed 01 Apr 2026 01:33:07 +0000
Files and hashes:         1: vvMhsD2CRd537IDdAzG_uo0IWdg.crl (hash: ViaTIJtW+nqiyWHQ0Ic38yjmhEEXObyh5nhx0iHQVUg=)
                          2: 5F3C0F26EAEF11EE8CCDB375C4F9AE02.roa (hash: iqq89iXsMkjAcx6f+H8qgQsfKuzOgvixAUFvX+cUdpk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.crl
                          rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:33:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 388 (0x184)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE8AC, serialNumber=BEF321B03D8245DE77EC80DD0331BFBA8D0859D8
        Validity
            Not Before: Mar 25 01:33:07 2026 GMT
            Not After : Apr  1 01:33:07 2026 GMT
        Subject: CN=69c33b54-aa32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:67:1c:96:2d:36:b8:d2:f0:6a:4f:8d:66:ab:
                    23:ed:f2:b2:19:15:83:99:bf:ce:d3:fa:e9:11:de:
                    ae:71:f8:18:01:91:a6:4d:93:17:b2:66:0b:d4:00:
                    1d:9d:52:ae:e5:ea:49:5a:a3:8f:1d:02:40:67:35:
                    72:09:1b:b6:7a:6d:9a:ae:7f:7b:89:e7:0b:9f:15:
                    c6:0c:de:e3:f0:94:3a:98:0a:7a:1e:07:83:d5:16:
                    b9:b9:33:6b:e8:ec:92:ba:0f:fd:65:9e:3d:c1:ca:
                    f1:52:87:88:35:8b:d3:03:5e:b1:d5:6c:1f:9d:c8:
                    83:36:1f:b0:14:53:a2:c2:cc:5d:e3:f5:cd:8f:29:
                    6d:d7:c7:5b:f7:13:7e:26:3c:f8:6d:83:ed:20:d9:
                    2a:61:59:b8:2d:14:4b:46:9c:e2:e5:14:02:ee:55:
                    52:a6:bc:19:0c:4e:23:14:c2:a6:80:b2:67:27:b2:
                    44:97:7c:be:2d:ff:5d:77:2c:3b:14:3e:a8:bb:1f:
                    8e:ea:a3:f5:c8:0a:5d:f9:5e:fb:57:07:f4:de:89:
                    4a:fc:97:92:5c:f7:0e:17:0f:9c:5a:a4:64:aa:14:
                    d5:87:09:96:82:30:87:1d:48:b9:51:73:fb:52:38:
                    96:1c:28:d6:1c:93:a6:15:05:5d:ae:03:3e:d9:83:
                    9d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:99:A6:1D:AA:C2:EB:8F:C2:F5:5E:A6:63:79:EA:57:30:BB:7F:7D
            X509v3 Authority Key Identifier:
                keyid:BE:F3:21:B0:3D:82:45:DE:77:EC:80:DD:03:31:BF:BA:8D:08:59:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:f0:ea:41:f4:7d:8b:09:df:09:88:c0:8b:62:3c:6b:51:79:
         74:67:85:87:5b:cc:2f:ae:4b:d6:64:09:b7:c3:19:9d:96:e2:
         6a:da:c3:a3:72:07:cd:92:74:8b:b9:8c:bd:5e:05:bd:78:f2:
         bd:35:41:34:cc:0e:a5:55:d0:f4:47:ef:21:98:76:48:fe:c6:
         28:a3:e1:6d:4a:10:f9:a7:0b:c6:6b:68:26:5e:c3:93:5c:6d:
         b2:61:08:85:4a:fe:0d:d7:62:0a:71:75:aa:7e:ac:9c:e1:4d:
         7a:af:2c:6c:32:4f:59:eb:bd:a5:62:a9:92:27:e7:31:20:f9:
         bf:ab:f7:cb:39:ef:d2:ef:96:b6:0a:10:79:0f:43:96:1e:28:
         fd:eb:6c:b3:63:67:fa:4d:92:d0:71:69:f9:7b:26:86:20:1b:
         67:ab:c7:6d:e2:fd:b3:81:d6:5f:90:bf:da:91:fa:a2:31:bc:
         c3:71:56:7b:0f:63:8b:94:e4:a9:eb:79:ba:ea:56:f7:53:dd:
         ae:cd:67:44:61:64:81:35:11:9a:13:8e:a4:cf:03:8c:51:d8:
         4c:74:95:82:15:40:4d:06:76:1a:10:f5:ab:a8:e1:4c:77:07:
         88:76:58:51:32:2d:11:78:b8:f4:80:b0:78:7c:21:f2:69:2f:
         cd:f7:07:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:32:10 2026 by rpki-client