Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.mft
File:                     VTcR8u_pSETEP3dtRRAYwGSXLJo.mft (raw, json)
Hash identifier:          lUnjvejhRUpxGm8OYzMMie6lrPbYkqcQcx9uXdpOcNU=
Subject key identifier:   A6:D7:25:29:E6:1F:14:06:10:7A:3A:B0:5C:4C:52:FE:E1:4E:6F:6A
Authority key identifier: 55:37:11:F2:EF:E9:48:44:C4:3F:77:6D:45:10:18:C0:64:97:2C:9A
Certificate issuer:       /CN=A911AAB5/serialNumber=553711F2EFE94844C43F776D451018C064972C9A
Certificate serial:       0CC0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTcR8u_pSETEP3dtRRAYwGSXLJo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.mft
Manifest number:          0CB4
Signing time:             Thu 16 Apr 2026 18:24:18 +0000
Manifest this update:     Thu 16 Apr 2026 18:24:18 +0000
Manifest next update:     Thu 23 Apr 2026 18:24:18 +0000
Files and hashes:         1: VTcR8u_pSETEP3dtRRAYwGSXLJo.crl (hash: 1GzQyKjSHc6IPHHKYDc0yhFRL2XrSm9ZgrCCbsxQysY=)
                          2: 65EE26547A8711ECBA5D244DC4F9AE02.roa (hash: A+pMpuuxK+69eAMmv7UHhfa7LiNDLirKYwDV1gOEsKs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.crl
                          rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTcR8u_pSETEP3dtRRAYwGSXLJo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 18:24:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3264 (0xcc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911AAB5, serialNumber=553711F2EFE94844C43F776D451018C064972C9A
        Validity
            Not Before: Apr 16 18:24:18 2026 GMT
            Not After : Apr 23 18:24:18 2026 GMT
        Subject: CN=69e12952-e253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7d:89:dc:bf:7d:4f:6b:67:29:32:16:3a:f5:
                    5c:a2:c7:0e:ac:05:21:dd:74:d8:61:75:a5:6c:f6:
                    6d:c2:bc:28:5a:94:cf:f9:33:7b:e0:bf:17:ad:0e:
                    1a:bc:98:d7:a0:d2:a6:ae:65:47:fb:74:e0:06:a1:
                    bf:6c:ce:31:12:ac:37:1e:84:cd:58:dc:10:06:bb:
                    fe:18:8d:dd:9b:70:56:17:17:ab:4d:b9:c0:6f:ce:
                    b6:12:b0:b2:4e:3a:27:b3:6d:1a:12:0f:c4:a8:38:
                    a8:18:44:82:87:85:77:e5:55:81:60:d3:cf:b4:2e:
                    a9:a4:86:fc:a2:17:fb:5f:58:e8:27:0a:2f:0d:f3:
                    f7:9f:2e:14:49:4b:3a:66:80:8b:47:96:02:ca:cc:
                    d3:2a:21:f7:40:ef:c4:6e:d9:e9:b1:08:2d:22:bf:
                    f6:ce:1d:88:3c:0a:a7:62:e3:30:fe:b5:3b:54:6e:
                    ff:ce:3d:bf:de:bb:18:8b:0f:cb:77:13:19:e6:46:
                    33:85:ef:5d:90:07:a9:f0:00:55:37:42:5b:7a:7c:
                    04:bc:55:64:75:22:fb:a2:de:7d:07:f2:89:af:70:
                    2e:b5:e7:cd:16:ee:07:ac:7f:97:6a:8d:f9:3a:e4:
                    b3:46:c6:20:7e:20:b0:1b:b1:ad:0b:63:91:f1:bd:
                    56:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:D7:25:29:E6:1F:14:06:10:7A:3A:B0:5C:4C:52:FE:E1:4E:6F:6A
            X509v3 Authority Key Identifier:
                keyid:55:37:11:F2:EF:E9:48:44:C4:3F:77:6D:45:10:18:C0:64:97:2C:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTcR8u_pSETEP3dtRRAYwGSXLJo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:ac:91:34:d1:45:41:43:8e:03:3a:87:85:ec:58:df:03:2f:
         a2:12:95:43:f8:33:68:b5:03:0f:49:9e:fe:33:26:9c:bc:52:
         93:37:bb:92:c1:47:0b:2f:09:47:7c:c9:0f:24:e8:32:08:3b:
         a5:38:07:17:6c:0d:1e:dd:05:b3:6a:1c:d0:17:cb:12:53:1e:
         10:a1:c3:0d:a0:f0:86:93:19:d2:75:d9:a8:4f:89:4d:e5:f2:
         ba:e3:45:09:b6:48:3e:b7:bd:b1:c4:37:ea:60:0d:d1:27:00:
         f7:d2:f5:69:a8:14:20:16:4e:6f:e1:f4:81:91:42:8e:50:5d:
         a1:7f:3b:a6:51:bc:b5:68:eb:ed:46:a2:b5:03:29:04:3f:ab:
         ce:6c:f6:11:cc:a0:9e:ea:0a:bd:a5:14:51:20:15:c1:ef:25:
         60:22:d0:2a:c8:1c:17:bd:78:d4:a2:64:e8:75:b2:21:1a:23:
         c3:d5:73:8c:47:23:66:cd:d9:ee:81:8a:3a:98:f4:35:d2:23:
         d9:07:8c:00:ad:0d:20:4b:cf:db:c6:45:b6:93:0a:29:6f:e8:
         34:2e:47:80:d3:d2:be:f4:2a:ba:7d:07:e4:8e:48:f9:31:49:
         66:bf:64:f9:dd:1a:9c:17:c1:83:e6:29:9d:87:ca:8c:48:eb:
         e1:3a:78:ef
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUFBQjUxMTAvBgNVBAUTKDU1MzcxMUYyRUZFOTQ4NDRDNDNGNzc2RDQ1MTAxOEMw
NjQ5NzJDOUEwHhcNMjYwNDE2MTgyNDE4WhcNMjYwNDIzMTgyNDE4WjAYMRYwFAYD
VQQDEw02OWUxMjk1Mi1lMjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoH2J3L99T2tnKTIWOvVcoscOrAUh3XTYYXWlbPZtwrwoWpTP+TN74L8XrQ4a
vJjXoNKmrmVH+3TgBqG/bM4xEqw3HoTNWNwQBrv+GI3dm3BWFxerTbnAb862ErCy
Tjons20aEg/EqDioGESCh4V35VWBYNPPtC6ppIb8ohf7X1joJwovDfP3ny4USUs6
ZoCLR5YCyszTKiH3QO/EbtnpsQgtIr/2zh2IPAqnYuMw/rU7VG7/zj2/3rsYiw/L
dxMZ5kYzhe9dkAep8ABVN0JbenwEvFVkdSL7ot59B/KJr3AutefNFu4HrH+Xao35
OuSzRsYgfiCwG7GtC2OR8b1WeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKbXJSnm
HxQGEHo6sFxMUv7hTm9qMB8GA1UdIwQYMBaAFFU3EfLv6UhExD93bUUQGMBklyya
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUFCNS9BM0JERTdBMDEw
RjYxMUVBOTEwM0I2MUJDNEY5QUUwMi9WVGNSOHVfcFNFVEVQM2R0UlJBWXdHU1hM
Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZUY1I4dV9wU0VURVAzZHRSUkFZd0dTWExKby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QUFCNS9BM0JERTdBMDEwRjYxMUVBOTEwM0I2MUJDNEY5QUUwMi9WVGNSOHVfcFNF
VEVQM2R0UlJBWXdHU1hMSm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlqyRNNFFQUOOAzqHhexY3wMvohKVQ/gzaLUDD0me/jMmnLxSkze7ksFHCy8J
R3zJDyToMgg7pTgHF2wNHt0Fs2oc0BfLElMeEKHDDaDwhpMZ0nXZqE+JTeXyuuNF
CbZIPre9scQ36mAN0ScA99L1aagUIBZOb+H0gZFCjlBdoX87plG8tWjr7UaitQMp
BD+rzmz2EcygnuoKvaUUUSAVwe8lYCLQKsgcF7141KJk6HWyIRojw9VzjEcjZs3Z
7oGKOpj0NdIj2QeMAK0NIEvP28ZFtpMKKW/oNC5HgNPSvvQqun0H5I5I+TFJZr9k
+d0anBfBg+YpnYfKjEjr4Tp47w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:51:35 2026 by rpki-client