Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130626/310572EAAF0911E9AF7C4444C4F9AE02/VM1oEInn9JVSuuxWoHax7PJe_gY.mft
File:                     VM1oEInn9JVSuuxWoHax7PJe_gY.mft (raw, json)
Hash identifier:          LCdeXdpbh7Lb+AG4tti8KYbDiVdm9MMOa1MEXdoSacc=
Subject key identifier:   29:8C:27:C0:8A:91:71:BD:00:24:38:D9:F5:85:3E:76:FC:59:39:72
Authority key identifier: 54:CD:68:10:89:E7:F4:95:52:BA:EC:56:A0:76:B1:EC:F2:5E:FE:06
Certificate issuer:       /CN=A9130626/serialNumber=54CD681089E7F49552BAEC56A076B1ECF25EFE06
Certificate serial:       09FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VM1oEInn9JVSuuxWoHax7PJe_gY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130626/310572EAAF0911E9AF7C4444C4F9AE02/VM1oEInn9JVSuuxWoHax7PJe_gY.mft
Manifest number:          1871
Signing time:             Mon 02 Mar 2026 00:42:11 +0000
Manifest this update:     Mon 02 Mar 2026 00:42:09 +0000
Manifest next update:     Mon 09 Mar 2026 00:42:09 +0000
Files and hashes:         1: VM1oEInn9JVSuuxWoHax7PJe_gY.crl (hash: rbCv5bATEQPL1ggKpp0UyATgwVIlChOzIIpz64/33ug=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130626/310572EAAF0911E9AF7C4444C4F9AE02/VM1oEInn9JVSuuxWoHax7PJe_gY.crl
                          rsync://rpki.apnic.net/member_repository/A9130626/310572EAAF0911E9AF7C4444C4F9AE02/VM1oEInn9JVSuuxWoHax7PJe_gY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VM1oEInn9JVSuuxWoHax7PJe_gY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:42:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2558 (0x9fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130626, serialNumber=54CD681089E7F49552BAEC56A076B1ECF25EFE06
        Validity
            Not Before: Mar  2 00:42:09 2026 GMT
            Not After : Mar  9 00:42:09 2026 GMT
        Subject: CN=69a4dce2-045a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ff:99:f9:b8:d7:cd:04:ba:d5:f3:9f:94:8a:
                    dc:6a:cc:fc:8c:f8:57:94:00:fb:3c:66:e0:7e:f5:
                    81:d5:40:ee:53:32:f5:35:2f:0e:65:cd:90:a3:64:
                    94:25:f5:3f:3e:e7:a2:bb:92:91:57:97:23:71:a6:
                    81:85:5e:92:91:04:80:57:46:48:9e:98:a4:0d:3b:
                    3d:33:cb:32:01:5e:01:d1:a2:89:e4:5a:b0:34:55:
                    b8:bf:3c:fa:6c:9a:6d:84:6f:79:dd:38:85:5e:20:
                    01:bc:70:84:26:0d:40:92:ca:2d:74:10:2f:e2:c8:
                    35:09:3d:41:01:7a:7d:6e:87:74:02:ff:24:55:35:
                    8c:79:b5:61:06:06:fa:e8:5e:89:45:be:99:6f:b8:
                    51:fb:b9:19:c0:2f:4a:40:1e:bd:cd:3c:8b:3b:4a:
                    ca:52:73:42:bb:66:56:66:f8:59:98:7e:9f:8b:75:
                    3e:a3:3c:e7:15:5f:0d:4b:8e:eb:b5:93:0a:42:c7:
                    83:03:f6:74:7a:a4:33:6b:43:08:bc:da:32:7c:92:
                    43:f0:c6:0f:dd:79:84:d4:af:03:9a:bb:2c:30:c9:
                    9c:b6:d6:11:79:25:5d:3b:91:2f:6e:eb:12:51:c2:
                    e8:e4:7b:90:d7:57:eb:2d:71:62:29:09:13:91:ab:
                    b4:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:8C:27:C0:8A:91:71:BD:00:24:38:D9:F5:85:3E:76:FC:59:39:72
            X509v3 Authority Key Identifier:
                keyid:54:CD:68:10:89:E7:F4:95:52:BA:EC:56:A0:76:B1:EC:F2:5E:FE:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130626/310572EAAF0911E9AF7C4444C4F9AE02/VM1oEInn9JVSuuxWoHax7PJe_gY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VM1oEInn9JVSuuxWoHax7PJe_gY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130626/310572EAAF0911E9AF7C4444C4F9AE02/VM1oEInn9JVSuuxWoHax7PJe_gY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:74:e9:92:0c:c5:3c:f5:53:4b:41:87:ca:f8:fa:71:da:a8:
         99:7b:ee:94:96:4b:bf:73:e4:41:3c:d5:18:b2:90:91:f4:fd:
         83:bf:be:11:df:48:36:f0:58:65:46:59:98:30:7c:29:0f:38:
         d8:d9:19:f6:9f:f0:5e:c1:a4:07:49:a1:4a:da:df:26:fc:4b:
         69:e2:be:ff:d8:eb:7f:67:11:1b:c2:9f:b3:62:ce:b4:18:30:
         1e:86:5b:e3:63:ba:b3:cb:fd:f7:1d:a8:5a:4e:03:ab:aa:40:
         86:d2:ce:eb:01:0a:3f:19:1b:61:64:8f:74:6e:6d:87:26:3c:
         17:b3:04:d0:ff:14:17:51:fd:da:5c:2b:1f:8c:5e:09:b6:1b:
         90:bb:86:69:b9:e6:cb:63:ca:f9:cf:52:17:4b:18:37:fb:f2:
         6b:f7:62:6d:36:c3:25:37:7e:94:da:5e:f2:97:96:c4:76:fc:
         ca:ac:6d:69:79:28:9c:04:c6:6e:7b:55:56:61:80:83:e1:d5:
         2f:99:cf:53:e5:c8:52:c1:42:25:86:ab:e7:55:fd:11:d8:7e:
         fd:0d:3c:64:c3:be:b9:c8:e2:a0:66:d1:b7:c4:11:dc:c1:98:
         e6:8c:2d:d2:50:60:e9:b5:a6:8c:17:00:c2:c1:c3:72:41:bf:
         be:b6:9c:0d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzA2MjYxMTAvBgNVBAUTKDU0Q0Q2ODEwODlFN0Y0OTU1MkJBRUM1NkEwNzZCMUVD
RjI1RUZFMDYwHhcNMjYwMzAyMDA0MjA5WhcNMjYwMzA5MDA0MjA5WjAYMRYwFAYD
VQQDEw02OWE0ZGNlMi0wNDVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtf+Z+bjXzQS61fOflIrcasz8jPhXlAD7PGbgfvWB1UDuUzL1NS8OZc2Qo2SU
JfU/Pueiu5KRV5cjcaaBhV6SkQSAV0ZInpikDTs9M8syAV4B0aKJ5FqwNFW4vzz6
bJpthG953TiFXiABvHCEJg1AksotdBAv4sg1CT1BAXp9bod0Av8kVTWMebVhBgb6
6F6JRb6Zb7hR+7kZwC9KQB69zTyLO0rKUnNCu2ZWZvhZmH6fi3U+ozznFV8NS47r
tZMKQseDA/Z0eqQza0MIvNoyfJJD8MYP3XmE1K8DmrssMMmcttYReSVdO5EvbusS
UcLo5HuQ11frLXFiKQkTkau0ewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCmMJ8CK
kXG9ACQ42fWFPnb8WTlyMB8GA1UdIwQYMBaAFFTNaBCJ5/SVUrrsVqB2sezyXv4G
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDYyNi8zMTA1NzJFQUFG
MDkxMUU5QUY3QzQ0NDRDNEY5QUUwMi9WTTFvRUlubjlKVlN1dXhXb0hheDdQSmVf
Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZNMW9FSW5uOUpWU3V1eFdvSGF4N1BKZV9nWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MDYyNi8zMTA1NzJFQUFGMDkxMUU5QUY3QzQ0NDRDNEY5QUUwMi9WTTFvRUlubjlK
VlN1dXhXb0hheDdQSmVfZ1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHnTpkgzFPPVTS0GHyvj6cdqomXvulJZLv3PkQTzVGLKQkfT9g7++Ed9INvBY
ZUZZmDB8KQ842NkZ9p/wXsGkB0mhStrfJvxLaeK+/9jrf2cRG8Kfs2LOtBgwHoZb
42O6s8v99x2oWk4Dq6pAhtLO6wEKPxkbYWSPdG5thyY8F7ME0P8UF1H92lwrH4xe
CbYbkLuGabnmy2PK+c9SF0sYN/vya/dibTbDJTd+lNpe8peWxHb8yqxtaXkonATG
bntVVmGAg+HVL5nPU+XIUsFCJYar51X9Edh+/Q08ZMO+ucjioGbRt8QR3MGY5owt
0lBg6bWmjBcAwsHDckG/vracDQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:39:26 2026 by rpki-client