Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft
File:                     VTOnxXv02x5Tj5534LSGi4-QxYI.mft (raw, json)
Hash identifier:          JzAMTKGPIsnQ/jrAkVHWNEYsXwMWDc0S+dhXO99d1mc=
Subject key identifier:   AD:D8:90:7A:E7:7B:D1:89:E8:A6:26:1B:08:C9:ED:13:82:C3:61:5E
Authority key identifier: 55:33:A7:C5:7B:F4:DB:1E:53:8F:9E:77:E0:B4:86:8B:8F:90:C5:82
Certificate issuer:       /CN=A91276FA/serialNumber=5533A7C57BF4DB1E538F9E77E0B4868B8F90C582
Certificate serial:       013A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft
Manifest number:          0126
Signing time:             Fri 17 Apr 2026 05:24:57 +0000
Manifest this update:     Fri 17 Apr 2026 05:24:56 +0000
Manifest next update:     Fri 24 Apr 2026 05:24:56 +0000
Files and hashes:         1: VTOnxXv02x5Tj5534LSGi4-QxYI.crl (hash: +aIFyz28UeU/H7iA3tvkdUCMYCh5UvyzinuuxGtocOQ=)
                          2: 5D8DFB5684CA11EF9F92574DC4F9AE02.roa (hash: ui+QIvOSSm4JsqVWIgvAnE+tPuj6skIC4z/Y5KBBL/w=)
                          3: 7EC9705C84CA11EFA41F8D4DC4F9AE02.roa (hash: VkfTGGoNVUsbEcJxM7s1vcrxda5Fy3LpRVjxl0XTbMI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.crl
                          rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 314 (0x13a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91276FA, serialNumber=5533A7C57BF4DB1E538F9E77E0B4868B8F90C582
        Validity
            Not Before: Apr 17 05:24:56 2026 GMT
            Not After : Apr 24 05:24:56 2026 GMT
        Subject: CN=69e1c429-a2c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:db:46:20:d9:80:19:93:c4:98:4c:b3:b2:8e:
                    92:9b:b4:53:0c:c4:1c:ed:43:f9:b7:f0:67:64:49:
                    7b:7f:9b:11:76:31:7a:11:2d:c6:22:0c:3e:77:db:
                    33:b9:c4:09:b8:03:95:28:9e:d9:65:aa:26:97:90:
                    ab:8c:bb:a6:ef:c4:a6:7a:77:30:06:ae:e4:66:b6:
                    94:b2:f6:36:7a:79:2e:0d:44:34:9f:59:5d:1a:ec:
                    58:1d:b6:61:27:40:45:90:8a:a7:4a:3a:10:61:1e:
                    98:8d:fd:a7:dc:a7:e8:ee:d1:cd:44:bd:5a:ba:b7:
                    ff:2b:4f:da:b2:78:34:4c:ee:38:fb:98:27:aa:ca:
                    8d:bc:e4:81:0e:12:f2:9d:8f:87:1f:e9:87:de:5f:
                    82:9f:2c:cc:38:41:b4:a1:b0:a0:af:34:65:a4:a2:
                    be:ba:f6:f1:e3:83:32:52:24:e0:c2:10:e0:d8:b3:
                    aa:a9:83:c3:86:43:8a:90:e0:0a:c3:c7:da:81:8e:
                    cf:6d:d8:54:d7:fd:96:fe:ae:4d:14:16:63:d9:b5:
                    31:64:47:a3:70:63:20:21:48:74:aa:0c:b6:ff:02:
                    50:90:98:ab:d6:71:80:b1:92:c6:65:12:ac:82:08:
                    2e:90:6b:00:ce:d7:8c:3d:a6:7c:ee:f3:b9:ad:98:
                    b3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:D8:90:7A:E7:7B:D1:89:E8:A6:26:1B:08:C9:ED:13:82:C3:61:5E
            X509v3 Authority Key Identifier:
                keyid:55:33:A7:C5:7B:F4:DB:1E:53:8F:9E:77:E0:B4:86:8B:8F:90:C5:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:56:ca:85:5f:f3:06:2a:1c:96:9b:f7:5c:1b:2f:c5:be:cd:
         c2:6a:64:b0:c2:f1:f7:bb:9b:f5:91:db:88:94:df:6c:69:ac:
         4a:c1:e4:13:ff:64:84:d1:f9:89:ff:07:14:ca:b1:a5:43:2f:
         86:80:5d:92:cd:c2:a3:2d:5d:78:8d:f9:92:5a:d8:ab:37:06:
         b6:c8:10:28:43:09:15:d4:50:b5:15:47:b5:13:9b:20:b6:78:
         0f:60:e6:89:3c:49:8a:0b:56:1f:d2:db:61:bb:02:dd:61:19:
         c7:64:7c:ea:08:d6:f3:98:3e:65:c9:84:b8:a8:23:23:4a:ca:
         e0:c0:5e:00:c6:fe:21:65:b9:cb:aa:34:d7:40:73:26:ed:29:
         fb:d1:8d:99:dd:bc:11:69:7e:dc:70:df:0d:84:ba:44:fe:ca:
         4b:16:76:60:00:03:b5:da:8f:7d:6a:de:86:0d:78:6e:44:00:
         f4:fb:40:a9:56:0c:4a:e4:d4:36:e4:a6:89:de:6e:d6:af:2f:
         cc:52:a2:7a:e9:b5:53:0b:88:9a:7c:7d:fd:e1:12:af:96:d0:
         46:ab:43:21:db:ef:6c:5a:9a:26:92:6d:48:0d:a7:56:24:cd:
         01:6e:14:38:fc:99:00:01:28:a8:fc:ff:82:5f:25:55:69:fb:
         a8:07:ac:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:09:37 2026 by rpki-client