Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.mft
File:                     VVzqN0EM0oazHxoArfYlPUzgUjI.mft (raw, json)
Hash identifier:          BmhUrmCX5lI3T7rpInKFfTIK480TmHqWgTosx8DPfJk=
Subject key identifier:   1D:55:2D:D9:63:D8:D3:28:AF:C8:89:48:E3:09:0A:C3:2E:F9:A0:2A
Authority key identifier: 55:5C:EA:37:41:0C:D2:86:B3:1F:1A:00:AD:F6:25:3D:4C:E0:52:32
Certificate issuer:       /CN=A9137522/serialNumber=555CEA37410CD286B31F1A00ADF6253D4CE05232
Certificate serial:       3536
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVzqN0EM0oazHxoArfYlPUzgUjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.mft
Manifest number:          352E
Signing time:             Thu 16 Apr 2026 15:00:32 +0000
Manifest this update:     Thu 16 Apr 2026 15:00:32 +0000
Manifest next update:     Thu 23 Apr 2026 15:00:32 +0000
Files and hashes:         1: VVzqN0EM0oazHxoArfYlPUzgUjI.crl (hash: QE693tmG59ZNWGZ6jMZ4sSiljVzhcybfegmW1YDI2a4=)
                          2: FF9802D6FE3911EBBCE1485DC4F9AE02.roa (hash: Zqu39Uw0HncOG5VI+5Ts7HDsov6x0MYg0Iq+gNjyWCk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.crl
                          rsync://rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVzqN0EM0oazHxoArfYlPUzgUjI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 15:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13622 (0x3536)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137522, serialNumber=555CEA37410CD286B31F1A00ADF6253D4CE05232
        Validity
            Not Before: Apr 16 15:00:32 2026 GMT
            Not After : Apr 23 15:00:32 2026 GMT
        Subject: CN=69e0f990-da7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:98:45:9c:a9:f5:94:88:86:55:7a:74:e1:39:
                    85:e8:42:94:57:f6:b5:9c:01:be:0a:e1:8f:b7:fa:
                    4f:b1:43:b7:bb:6d:73:49:f0:f9:e6:5f:22:a9:85:
                    be:a4:b4:9f:ba:cb:a3:d5:cb:63:19:86:b1:ed:63:
                    1c:01:9b:97:f4:63:1f:6c:18:fc:61:55:97:bd:4c:
                    b9:68:f1:06:c7:b6:db:9b:62:dc:7d:c9:15:01:04:
                    50:4f:10:8d:8d:d3:4e:1d:f4:f2:1f:86:3a:45:28:
                    0a:89:57:60:e1:a3:ac:d0:a7:5f:3c:39:73:dd:17:
                    7e:36:06:7f:c9:d9:8c:e1:08:c6:74:e7:af:db:fa:
                    1f:f6:0a:4e:47:08:cb:71:f4:af:aa:4f:fd:a4:d0:
                    1e:f7:5d:ea:fa:2e:a2:aa:90:c4:d2:b5:7d:e5:37:
                    0f:2d:f9:dd:4b:c8:ef:9c:39:af:c3:7a:f1:10:1a:
                    ce:66:83:17:16:cb:dd:78:f4:e7:32:2f:a1:0b:22:
                    b2:61:ab:cb:71:71:ef:63:e9:7f:f0:5c:ce:8a:05:
                    bf:f1:4c:65:24:67:f6:1c:db:03:71:dc:ec:4a:41:
                    b0:d7:02:94:92:1f:d9:46:d4:cc:53:6a:24:49:47:
                    7e:ba:b4:d0:53:79:d6:79:3c:1a:63:39:87:1b:af:
                    bc:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:55:2D:D9:63:D8:D3:28:AF:C8:89:48:E3:09:0A:C3:2E:F9:A0:2A
            X509v3 Authority Key Identifier:
                keyid:55:5C:EA:37:41:0C:D2:86:B3:1F:1A:00:AD:F6:25:3D:4C:E0:52:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVzqN0EM0oazHxoArfYlPUzgUjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:84:16:a1:20:bb:93:c8:05:82:0f:3d:82:87:30:ba:d6:19:
         d5:21:af:f7:c1:f4:9f:98:5a:b4:11:10:27:cd:36:fa:e4:1b:
         17:5a:64:aa:eb:c4:88:a1:02:bf:7a:df:ff:cd:70:39:0a:10:
         ee:f6:27:bf:4d:ce:12:1e:f9:e3:a5:7b:e4:e8:3f:44:d8:54:
         57:07:94:6e:be:4c:8e:d8:03:3e:ec:8f:9b:54:18:bb:81:68:
         f2:b8:7f:15:ba:b3:84:13:99:bb:34:95:e8:0d:aa:e6:91:38:
         43:bb:63:4a:01:83:52:c4:08:bf:64:54:f6:21:0b:68:c3:a7:
         3f:dc:ea:74:48:e5:7a:d0:a5:d5:ff:42:82:68:8e:d8:d5:6d:
         29:f7:ac:97:c3:0b:d3:84:f0:24:05:0b:92:9f:d4:a4:24:b6:
         1c:0a:c1:c1:b1:28:c9:3b:6f:26:a2:c8:7e:6b:ab:f2:46:8e:
         c2:eb:cf:a5:b2:e3:ae:87:05:b1:80:3c:8f:8b:2e:7a:7c:0c:
         af:68:2a:4e:90:ca:23:75:6b:95:51:a9:37:14:e0:f1:51:4b:
         89:e1:ce:58:c9:0a:bc:4f:92:53:b4:95:43:88:a5:71:79:e8:
         f8:21:c3:ac:f4:8a:30:59:ee:69:e5:fe:93:b1:49:aa:c4:72:
         d1:75:8e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:47:45 2026 by rpki-client