Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.mft
File:                     VR9YpoyP5pILLvCsbpCi0_NYinY.mft (raw, json)
Hash identifier:          lOUWDAip9O/0V9oyLDfuhnqLEoCCJ16ylM6y+xxVem0=
Subject key identifier:   77:D1:93:82:BF:53:F5:19:B8:81:DA:25:6D:6F:B1:5B:75:28:2E:56
Authority key identifier: 55:1F:58:A6:8C:8F:E6:92:0B:2E:F0:AC:6E:90:A2:D3:F3:58:8A:76
Certificate issuer:       /CN=A9160856/serialNumber=551F58A68C8FE6920B2EF0AC6E90A2D3F3588A76
Certificate serial:       10F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9YpoyP5pILLvCsbpCi0_NYinY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.mft
Manifest number:          10C7
Signing time:             Thu 16 Apr 2026 17:17:04 +0000
Manifest this update:     Thu 16 Apr 2026 17:17:03 +0000
Manifest next update:     Thu 23 Apr 2026 17:17:03 +0000
Files and hashes:         1: VR9YpoyP5pILLvCsbpCi0_NYinY.crl (hash: ObBHpLXFLtGemlgiuu5itICv8L91NBapxxR8gJAdLys=)
                          2: 5318EFAC6BAE11EBA5B87E56C4F9AE02.roa (hash: MC3ya+Rx2sZxtMRFWTDYtgp6jSYXay2r0LuhyZ274v0=)
                          3: E973A832656511EC85A7CA2CC4F9AE02.roa (hash: IumZ0R6VefcLEzWyHuLFXez1Y/5ve09Aewbd5wOI538=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.crl
                          rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9YpoyP5pILLvCsbpCi0_NYinY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 17:17:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4337 (0x10f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160856, serialNumber=551F58A68C8FE6920B2EF0AC6E90A2D3F3588A76
        Validity
            Not Before: Apr 16 17:17:03 2026 GMT
            Not After : Apr 23 17:17:03 2026 GMT
        Subject: CN=69e1198f-52d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:29:50:2a:d1:57:91:3b:c5:ae:01:10:ab:a7:
                    bd:19:9a:69:bb:c7:33:58:83:85:a0:cb:c2:74:5d:
                    28:64:1c:64:24:11:56:e8:ba:73:75:41:4f:83:26:
                    c7:87:66:6f:0a:1a:d2:a9:1e:e6:a6:52:3a:6d:8b:
                    b2:26:ce:14:47:6c:18:8f:43:4e:77:e5:f9:b8:84:
                    41:bb:bc:8f:4e:7b:44:4f:a8:36:fa:7a:18:64:4b:
                    78:ad:8d:9e:b3:1f:00:f9:e2:58:02:dd:bf:0c:cd:
                    03:3a:34:1a:c8:ad:2a:5e:02:8a:87:78:20:3d:fc:
                    fc:79:f9:20:ed:0b:67:d7:98:46:0b:1d:76:29:9b:
                    32:ec:eb:b4:f2:53:b9:c7:7c:7d:d9:14:5e:4c:9e:
                    fd:7b:48:4e:eb:76:4c:6e:29:a2:3d:7c:fd:41:81:
                    e4:7b:3d:03:54:41:64:cc:6c:fb:24:8a:01:ae:53:
                    81:9e:b6:81:b8:89:c0:06:8b:29:f8:f6:11:5d:5e:
                    50:c3:0c:6c:94:e7:f3:b4:f0:90:c1:dd:8f:c4:3c:
                    95:29:95:82:27:39:04:a5:c7:ba:98:cf:cf:98:21:
                    04:8f:c4:17:fe:d2:3a:4f:36:f6:a6:e7:d6:7b:2b:
                    6b:26:4f:71:90:8b:5f:d7:d3:46:5a:24:17:94:9e:
                    5b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:D1:93:82:BF:53:F5:19:B8:81:DA:25:6D:6F:B1:5B:75:28:2E:56
            X509v3 Authority Key Identifier:
                keyid:55:1F:58:A6:8C:8F:E6:92:0B:2E:F0:AC:6E:90:A2:D3:F3:58:8A:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9YpoyP5pILLvCsbpCi0_NYinY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:fe:7a:b6:e0:fd:8f:d5:41:c1:2e:a8:3a:e6:48:80:fe:2b:
         c2:d0:85:ba:f1:0e:3e:7a:14:20:38:53:b8:98:b1:ed:46:ea:
         0c:77:99:e6:cb:9e:c0:88:c1:71:10:c3:85:32:32:cb:e0:c5:
         42:b4:c9:95:dd:d7:f9:aa:11:e8:9b:4d:43:6a:74:db:b7:fa:
         cf:98:77:eb:40:3d:fa:eb:85:a6:d0:54:00:92:9e:16:f1:18:
         0b:6e:bd:ea:0a:a2:a8:6d:06:bb:41:f2:96:9d:97:bf:8c:43:
         64:89:2c:40:09:6e:41:39:6d:97:62:9b:97:2f:c5:75:2f:ea:
         32:04:38:75:e8:2b:83:a8:9e:33:89:18:7e:96:00:6b:34:51:
         74:be:e8:11:3d:3b:c0:5a:9e:7e:65:44:a3:c4:45:11:7c:b8:
         5c:c7:0d:0d:9b:8c:d6:22:df:99:99:ee:e4:c7:95:aa:90:ec:
         3c:fd:11:2a:2a:58:e4:2e:fa:f7:aa:22:8f:c0:73:a7:cd:7b:
         d8:8b:b8:76:1a:0c:6b:96:b6:5d:31:8f:53:6e:9a:70:ee:b2:
         4f:bc:c0:54:99:c6:c5:a1:06:73:e4:3b:7d:45:20:48:6e:50:
         66:ec:66:fb:ed:5b:e0:31:d1:df:14:07:84:4b:3c:d2:6a:c4:
         31:c4:62:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:37:59 2026 by rpki-client