Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/VZ9R7Isljn6QYp2FYuHblWvA_zc.mft
File:                     VZ9R7Isljn6QYp2FYuHblWvA_zc.mft (raw, json)
Hash identifier:          yhVgWAHo6c7+4kR264aBGvuUpTxOzm12oicmCzIXaKE=
Subject key identifier:   3E:08:F4:18:D7:F3:EC:3B:82:82:15:A6:BE:A5:4F:38:22:2A:2A:EF
Authority key identifier: 55:9F:51:EC:8B:25:8E:7E:90:62:9D:85:62:E1:DB:95:6B:C0:FF:37
Certificate issuer:       /CN=A916FEAF/serialNumber=559F51EC8B258E7E90629D8562E1DB956BC0FF37
Certificate serial:       0A09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZ9R7Isljn6QYp2FYuHblWvA_zc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/VZ9R7Isljn6QYp2FYuHblWvA_zc.mft
Manifest number:          0A01
Signing time:             Thu 16 Apr 2026 19:44:30 +0000
Manifest this update:     Thu 16 Apr 2026 19:44:30 +0000
Manifest next update:     Thu 23 Apr 2026 19:44:30 +0000
Files and hashes:         1: VZ9R7Isljn6QYp2FYuHblWvA_zc.crl (hash: 390BDGVbedOUg4KuN5mcL2b4xcuUV8MTctEwRjWik34=)
                          2: 8247E286967711EA81018623C4F9AE02.roa (hash: l4wuDPIwpO8fQTq9MLbpvYw6B3I+KqMVorZszpwdAAg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/VZ9R7Isljn6QYp2FYuHblWvA_zc.crl
                          rsync://rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/VZ9R7Isljn6QYp2FYuHblWvA_zc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZ9R7Isljn6QYp2FYuHblWvA_zc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:44:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2569 (0xa09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916FEAF, serialNumber=559F51EC8B258E7E90629D8562E1DB956BC0FF37
        Validity
            Not Before: Apr 16 19:44:30 2026 GMT
            Not After : Apr 23 19:44:30 2026 GMT
        Subject: CN=69e13c1e-83a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:06:ee:cb:de:ca:20:f9:61:1b:6a:66:0a:54:
                    0e:d2:b7:21:aa:51:7a:e2:c4:fd:dc:f1:96:41:7e:
                    7f:ea:99:2e:81:1c:fb:1c:ef:a8:b2:be:7f:82:ee:
                    88:47:2a:13:28:c1:44:70:64:96:9e:27:10:c0:e4:
                    b7:8a:1c:d0:cf:01:3e:25:ef:ad:ea:ff:56:10:e4:
                    c4:47:fd:6c:00:04:ed:41:e1:9e:c8:b8:ca:15:6f:
                    bc:53:7a:2e:ba:1a:a6:ac:ff:82:52:09:16:e2:6d:
                    94:2c:4a:7f:75:c4:0d:82:1b:d3:96:09:74:dc:6b:
                    0f:09:22:d2:13:4e:96:07:a7:50:6b:43:a7:c4:53:
                    0f:21:97:70:2a:59:88:81:cb:80:d1:f1:92:6a:24:
                    56:6e:21:8c:71:95:75:ad:2c:f4:bf:8c:4f:e3:bc:
                    48:0a:e7:4d:a8:47:43:93:3c:c6:28:9f:04:96:7b:
                    39:e8:68:76:b7:65:a4:a9:c1:93:9b:50:98:11:9d:
                    69:46:0f:e0:b0:fa:fc:e5:9f:71:04:48:75:3c:f6:
                    19:52:09:e9:22:91:a5:54:b4:60:5a:8e:ad:d2:cc:
                    53:6b:c8:2a:29:74:ec:92:c8:37:24:4e:51:11:c4:
                    ea:90:10:ea:a0:14:a5:cf:6e:b4:05:77:06:23:6d:
                    0e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:08:F4:18:D7:F3:EC:3B:82:82:15:A6:BE:A5:4F:38:22:2A:2A:EF
            X509v3 Authority Key Identifier:
                keyid:55:9F:51:EC:8B:25:8E:7E:90:62:9D:85:62:E1:DB:95:6B:C0:FF:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/VZ9R7Isljn6QYp2FYuHblWvA_zc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZ9R7Isljn6QYp2FYuHblWvA_zc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/VZ9R7Isljn6QYp2FYuHblWvA_zc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:47:ca:ab:7f:a9:89:92:10:22:74:a9:3d:7a:c5:55:6d:5e:
         32:be:d4:54:1d:2e:b1:a7:2d:23:ad:3d:c0:51:22:df:43:38:
         f1:eb:53:08:e9:a0:d7:d2:ba:d2:c0:7e:53:8a:43:78:84:39:
         4e:98:dc:e8:39:00:e6:36:c7:11:2b:e0:3d:6a:33:a0:70:8a:
         ef:71:e7:18:8b:bf:b0:ec:69:97:56:45:6c:f6:38:97:97:41:
         50:b1:99:cd:56:43:83:3a:db:1b:d7:ef:92:d9:62:91:57:4c:
         0c:4e:3a:74:eb:36:8d:0d:16:a6:fd:a5:23:87:ac:83:2e:ac:
         2d:d6:18:c8:4c:eb:b1:d4:40:a3:a3:85:22:99:f9:1a:b4:ea:
         1f:d6:c8:6e:db:6b:19:0a:82:60:f3:9a:1b:f7:e1:cf:e2:9e:
         6f:f7:ab:cb:af:da:60:48:4e:ed:ea:c0:57:a5:9d:3f:58:69:
         59:91:e7:9b:65:f2:00:fb:c3:0b:57:bf:e9:0f:be:52:04:d9:
         51:a1:34:2e:af:1a:77:2e:6b:16:4a:0b:dd:14:a5:14:53:94:
         fb:22:8c:8f:9d:19:cf:9b:a6:b9:27:b1:fa:ba:bd:02:d4:4f:
         ee:70:e8:35:51:12:4b:97:53:80:67:7e:80:09:32:c9:b4:7a:
         fc:7f:cf:88
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkZFQUYxMTAvBgNVBAUTKDU1OUY1MUVDOEIyNThFN0U5MDYyOUQ4NTYyRTFEQjk1
NkJDMEZGMzcwHhcNMjYwNDE2MTk0NDMwWhcNMjYwNDIzMTk0NDMwWjAYMRYwFAYD
VQQDEw02OWUxM2MxZS04M2E3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+Qbuy97KIPlhG2pmClQO0rchqlF64sT93PGWQX5/6pkugRz7HO+osr5/gu6I
RyoTKMFEcGSWnicQwOS3ihzQzwE+Je+t6v9WEOTER/1sAATtQeGeyLjKFW+8U3ou
uhqmrP+CUgkW4m2ULEp/dcQNghvTlgl03GsPCSLSE06WB6dQa0OnxFMPIZdwKlmI
gcuA0fGSaiRWbiGMcZV1rSz0v4xP47xICudNqEdDkzzGKJ8Elns56Gh2t2WkqcGT
m1CYEZ1pRg/gsPr85Z9xBEh1PPYZUgnpIpGlVLRgWo6t0sxTa8gqKXTsksg3JE5R
EcTqkBDqoBSlz260BXcGI20OEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD4I9BjX
8+w7goIVpr6lTzgiKirvMB8GA1UdIwQYMBaAFFWfUeyLJY5+kGKdhWLh25VrwP83
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RkVBRi9ERDYwRDRBNDk2
NzUxMUVBODYwMjJBMUVDNEY5QUUwMi9WWjlSN0lzbGpuNlFZcDJGWXVIYmxXdkFf
emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZaOVI3SXNsam42UVlwMkZZdUhibFd2QV96Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RkVBRi9ERDYwRDRBNDk2NzUxMUVBODYwMjJBMUVDNEY5QUUwMi9WWjlSN0lzbGpu
NlFZcDJGWXVIYmxXdkFfemMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeUfKq3+piZIQInSpPXrFVW1eMr7UVB0usactI609wFEi30M48etTCOmg19K6
0sB+U4pDeIQ5Tpjc6DkA5jbHESvgPWozoHCK73HnGIu/sOxpl1ZFbPY4l5dBULGZ
zVZDgzrbG9fvktlikVdMDE46dOs2jQ0Wpv2lI4esgy6sLdYYyEzrsdRAo6OFIpn5
GrTqH9bIbttrGQqCYPOaG/fhz+Keb/ery6/aYEhO7erAV6WdP1hpWZHnm2XyAPvD
C1e/6Q++UgTZUaE0Lq8ady5rFkoL3RSlFFOU+yKMj50Zz5umuSex+rq9AtRP7nDo
NVESS5dTgGd+gAkyybR6/H/PiA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:56:10 2026 by rpki-client