Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916537A/9F817BB6276A11F1A891B17FC2833773/VqcyG_yMPsLpkWD6MztPVMGClGo.mft
File:                     VqcyG_yMPsLpkWD6MztPVMGClGo.mft (raw, json)
Hash identifier:          LUG7zEB/whuXcVfbvidg0eXvbnqAEJ7ZgFHubAhI4Ms=
Subject key identifier:   1C:4B:44:22:EC:26:4F:83:72:37:36:BD:4A:5D:C0:30:73:21:93:DF
Authority key identifier: 56:A7:32:1B:FC:8C:3E:C2:E9:91:60:FA:33:3B:4F:54:C1:82:94:6A
Certificate issuer:       /CN=A916537A/serialNumber=56A7321BFC8C3EC2E99160FA333B4F54C182946A
Certificate serial:       11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqcyG_yMPsLpkWD6MztPVMGClGo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916537A/9F817BB6276A11F1A891B17FC2833773/VqcyG_yMPsLpkWD6MztPVMGClGo.mft
Manifest number:          10
Signing time:             Fri 17 Apr 2026 08:49:06 +0000
Manifest this update:     Fri 17 Apr 2026 08:49:06 +0000
Manifest next update:     Fri 24 Apr 2026 08:49:06 +0000
Files and hashes:         1: VqcyG_yMPsLpkWD6MztPVMGClGo.crl (hash: RJFtrXE5a8/vLV5dHUjvPYE9wc/YrqHdfqgkLq7vKg0=)
                          2: 955C204027D911F183CCD80FA7833773.roa (hash: tYXGyBLXGMJ9TEdThJmPAhWV7Kw3QjVCE7lJviid3as=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916537A/9F817BB6276A11F1A891B17FC2833773/VqcyG_yMPsLpkWD6MztPVMGClGo.crl
                          rsync://rpki.apnic.net/member_repository/A916537A/9F817BB6276A11F1A891B17FC2833773/VqcyG_yMPsLpkWD6MztPVMGClGo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqcyG_yMPsLpkWD6MztPVMGClGo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:49:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916537A, serialNumber=56A7321BFC8C3EC2E99160FA333B4F54C182946A
        Validity
            Not Before: Apr 17 08:49:06 2026 GMT
            Not After : Apr 24 08:49:06 2026 GMT
        Subject: CN=69e1f402-8d25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4b:1d:af:e3:3c:d7:57:98:32:f5:42:63:08:
                    4e:24:3c:5f:09:85:32:15:59:27:ab:09:73:89:2e:
                    e5:1f:64:70:9f:e1:ce:de:f6:c0:b2:79:3e:7e:c5:
                    2d:29:b3:4a:ed:f0:0d:f4:48:28:dd:ca:b9:c4:a1:
                    97:db:ff:78:ea:7d:35:ef:31:19:f6:9b:24:d4:4e:
                    48:bf:31:7e:2e:fe:4d:82:86:5b:c3:a6:bd:0e:2e:
                    03:6a:13:1b:52:af:2c:92:a3:63:64:28:c8:72:5e:
                    1d:16:4d:80:42:7d:80:c3:1f:cc:10:0d:84:f6:c2:
                    af:96:e5:52:d8:73:74:31:4a:a8:23:42:f0:4f:f7:
                    1a:c1:a0:78:94:b2:ea:e2:86:e2:77:61:ac:be:e8:
                    ac:c3:8d:7c:40:1b:f9:fa:86:87:a2:51:c6:5e:a8:
                    b5:b5:07:da:e3:fe:17:4a:62:ad:8f:02:c6:84:e2:
                    d9:71:bc:8d:1d:8b:b4:67:d3:39:5e:30:b4:7b:04:
                    29:f7:91:a4:bf:21:29:6d:3d:b2:7c:8c:be:7e:7e:
                    c4:cf:7d:04:0c:81:ee:91:ae:00:70:4d:94:c4:7c:
                    51:90:11:79:5a:81:10:a1:da:dc:65:57:57:68:d1:
                    37:f1:41:fb:1a:82:fc:8d:4c:e3:41:21:b2:cb:55:
                    5b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:4B:44:22:EC:26:4F:83:72:37:36:BD:4A:5D:C0:30:73:21:93:DF
            X509v3 Authority Key Identifier:
                keyid:56:A7:32:1B:FC:8C:3E:C2:E9:91:60:FA:33:3B:4F:54:C1:82:94:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916537A/9F817BB6276A11F1A891B17FC2833773/VqcyG_yMPsLpkWD6MztPVMGClGo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqcyG_yMPsLpkWD6MztPVMGClGo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916537A/9F817BB6276A11F1A891B17FC2833773/VqcyG_yMPsLpkWD6MztPVMGClGo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:8d:68:66:1e:99:0f:ed:ae:ad:74:1e:5b:23:8c:56:a7:7f:
         32:b7:d4:e7:8c:ff:9a:a3:27:59:34:17:9b:5d:2c:68:1b:7f:
         96:e0:23:d1:d3:a7:e1:a1:bc:3b:61:ea:db:92:97:0e:34:9f:
         70:7b:12:ef:3e:1c:e8:df:e5:f4:23:5a:6f:85:85:2b:c9:fc:
         51:cd:ab:e7:92:c7:61:d2:39:d2:36:89:78:0d:a3:70:2c:61:
         f5:8a:a8:d7:d0:b7:68:14:0d:d5:0f:c7:ee:cb:19:f5:b6:15:
         4e:ba:81:a5:f5:c6:64:e0:fb:c6:ca:a9:a7:48:4d:ec:ff:9e:
         3b:d1:84:b3:17:ae:58:8b:65:2d:2b:ee:6e:62:03:45:a7:3b:
         1b:44:62:a4:90:fa:cd:1c:d5:f1:20:86:42:09:e9:90:00:1d:
         08:69:e7:10:7a:f1:0a:df:56:ed:0a:f9:7a:7f:71:b2:be:c0:
         02:86:d3:e7:f1:34:cc:c6:63:39:42:67:d8:c2:ff:8c:5e:0a:
         20:c9:6a:54:52:00:2b:58:9b:88:57:01:05:42:20:62:0a:75:
         a8:90:d5:4c:70:f1:f0:18:0c:56:a5:6e:8b:53:38:eb:47:e0:
         34:f4:d8:2c:cc:c5:c3:74:bf:a9:bf:42:b6:00:69:03:ef:b3:
         cb:52:d1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:55:03 2026 by rpki-client