Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft
File:                     VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft (raw, json)
Hash identifier:          40jfWDdu1N06qC5DkSq1Of8vpubkZINPybcjQZV4NdY=
Subject key identifier:   EA:F8:3A:57:BE:EE:34:72:34:8F:DF:59:DB:25:EB:86:4B:8D:97:96
Authority key identifier: 56:79:0B:8C:95:07:D9:D4:F3:90:09:50:D3:29:E2:75:74:77:67:AC
Certificate issuer:       /CN=A91203DF/serialNumber=56790B8C9507D9D4F3900950D329E275747767AC
Certificate serial:       0E3C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft
Manifest number:          0E2B
Signing time:             Thu 16 Apr 2026 17:45:00 +0000
Manifest this update:     Thu 16 Apr 2026 17:44:59 +0000
Manifest next update:     Thu 23 Apr 2026 17:44:59 +0000
Files and hashes:         1: VnkLjJUH2dTzkAlQ0ynidXR3Z6w.crl (hash: oygwUQbXFaOWIv4PYJoy4JJ0KhoWyPUwlvDVt3ph+iA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.crl
                          rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 17:44:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3644 (0xe3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91203DF, serialNumber=56790B8C9507D9D4F3900950D329E275747767AC
        Validity
            Not Before: Apr 16 17:44:59 2026 GMT
            Not After : Apr 23 17:44:59 2026 GMT
        Subject: CN=69e1201b-6e07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c5:d0:77:02:d7:0d:2a:97:05:5a:3a:a9:9f:
                    23:99:75:67:78:0a:a3:a9:77:f4:cd:d0:b0:bb:79:
                    e5:ae:d1:26:55:e0:42:fb:3f:73:27:4c:13:0e:cc:
                    b8:17:8f:ea:16:3c:ab:19:ee:37:38:6f:47:11:39:
                    50:b7:b5:a2:a0:92:78:10:a7:01:74:36:ac:e7:24:
                    0d:5a:dd:96:aa:80:5a:4b:2a:84:cf:a1:0b:37:13:
                    64:9d:6c:90:75:19:7d:e7:04:0b:e0:7c:a1:76:c8:
                    5e:fa:14:65:f0:b1:af:9c:06:71:f5:64:56:5d:ef:
                    82:74:0a:7e:7b:f9:a5:94:de:ca:a3:71:cb:d5:42:
                    82:e3:ba:fc:e5:13:07:dc:75:19:1a:6f:22:ba:da:
                    eb:eb:ac:8a:08:23:c3:59:60:f8:b7:21:a5:fb:1c:
                    1f:05:c6:2b:13:f2:8a:0d:58:80:c5:06:74:0a:26:
                    70:b2:ff:ba:3e:33:20:42:54:a8:c1:22:16:77:b0:
                    39:76:ea:c2:c7:33:c4:c9:dd:dd:d3:24:b9:53:cb:
                    a1:11:a4:60:0a:aa:c7:50:fc:8f:40:86:a9:ac:c6:
                    fb:2a:e9:46:c7:f7:df:27:61:bc:ef:58:f1:43:7a:
                    ca:7f:0d:52:86:8d:5b:f1:1f:c6:a3:38:2c:9f:8d:
                    e7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F8:3A:57:BE:EE:34:72:34:8F:DF:59:DB:25:EB:86:4B:8D:97:96
            X509v3 Authority Key Identifier:
                keyid:56:79:0B:8C:95:07:D9:D4:F3:90:09:50:D3:29:E2:75:74:77:67:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:7e:b1:9b:06:4e:34:ba:8b:a4:c4:fc:87:57:88:1f:1f:04:
         b6:53:ee:b3:5a:b2:1e:b9:f0:48:e5:00:c2:27:4e:de:37:c7:
         31:89:b0:f4:9a:a5:b6:64:7b:97:c3:0e:4d:e5:b4:25:84:64:
         9b:ed:db:a4:3e:d5:94:ca:7c:a3:58:e5:f9:1c:ff:51:2c:11:
         fd:4e:1b:b2:48:0f:eb:d1:2c:a4:a9:35:af:00:d0:e0:70:bc:
         1b:f0:e9:c6:18:72:89:ff:88:b8:84:c4:da:af:b0:94:18:8b:
         43:ab:09:81:68:58:2d:dc:22:90:c0:a6:a4:63:c4:90:09:dc:
         9a:73:47:9b:df:63:d5:e2:1b:eb:e2:b9:c1:e0:2d:52:88:02:
         c3:ba:e3:a0:79:04:fb:11:0e:77:68:50:78:b2:30:02:da:ba:
         9f:a5:22:73:df:8a:2b:0d:d9:70:f3:07:02:08:fc:49:35:9c:
         df:cd:4b:46:02:2a:9f:7d:b4:7a:84:a2:f3:29:a8:89:f1:54:
         c9:b2:80:19:bd:97:6e:65:e4:7c:b0:8e:52:5f:63:dd:71:90:
         65:c6:ad:10:92:c1:07:0a:41:b5:a7:4c:8a:f7:61:ee:9b:7e:
         8d:c2:d4:e2:3e:f9:ae:62:fb:2f:0e:e6:9a:28:26:84:1d:c3:
         80:6f:00:a4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjAzREYxMTAvBgNVBAUTKDU2NzkwQjhDOTUwN0Q5RDRGMzkwMDk1MEQzMjlFMjc1
NzQ3NzY3QUMwHhcNMjYwNDE2MTc0NDU5WhcNMjYwNDIzMTc0NDU5WjAYMRYwFAYD
VQQDEw02OWUxMjAxYi02ZTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkcXQdwLXDSqXBVo6qZ8jmXVneAqjqXf0zdCwu3nlrtEmVeBC+z9zJ0wTDsy4
F4/qFjyrGe43OG9HETlQt7WioJJ4EKcBdDas5yQNWt2WqoBaSyqEz6ELNxNknWyQ
dRl95wQL4Hyhdshe+hRl8LGvnAZx9WRWXe+CdAp+e/mllN7Ko3HL1UKC47r85RMH
3HUZGm8iutrr66yKCCPDWWD4tyGl+xwfBcYrE/KKDViAxQZ0CiZwsv+6PjMgQlSo
wSIWd7A5durCxzPEyd3d0yS5U8uhEaRgCqrHUPyPQIaprMb7KulGx/ffJ2G871jx
Q3rKfw1Sho1b8R/Gozgsn43nLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOr4Ole+
7jRyNI/fWdsl64ZLjZeWMB8GA1UdIwQYMBaAFFZ5C4yVB9nU85AJUNMp4nV0d2es
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDNERi85MjczOTdCNENB
MzQxMUU5OTY4MzdFNTZDNEY5QUUwMi9WbmtMakpVSDJkVHprQWxRMHluaWRYUjNa
NncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Zua0xqSlVIMmRUemtBbFEweW5pZFhSM1o2dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MDNERi85MjczOTdCNENBMzQxMUU5OTY4MzdFNTZDNEY5QUUwMi9WbmtMakpVSDJk
VHprQWxRMHluaWRYUjNaNncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJX6xmwZONLqLpMT8h1eIHx8EtlPus1qyHrnwSOUAwidO3jfHMYmw9JqltmR7
l8MOTeW0JYRkm+3bpD7VlMp8o1jl+Rz/USwR/U4bskgP69EspKk1rwDQ4HC8G/Dp
xhhyif+IuITE2q+wlBiLQ6sJgWhYLdwikMCmpGPEkAncmnNHm99j1eIb6+K5weAt
UogCw7rjoHkE+xEOd2hQeLIwAtq6n6Uic9+KKw3ZcPMHAgj8STWc381LRgIqn320
eoSi8ymoifFUybKAGb2XbmXkfLCOUl9j3XGQZcatEJLBBwpBtadMivdh7pt+jcLU
4j75rmL7Lw7mmigmhB3DgG8ApA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:43:15 2026 by rpki-client