Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.mft
File:                     2Vzl-zaRXD2M2xDbhkpMcZM82kE.mft (raw, json)
Hash identifier:          ZhFEeQtVW+YT4/Qa7EkPC08lmeImAq7Xr5w6vN+0YXo=
Subject key identifier:   92:85:A5:D2:9F:42:57:6E:63:47:80:21:7F:C8:48:BF:F4:FD:BD:D2
Authority key identifier: D9:5C:E5:FB:36:91:5C:3D:8C:DB:10:DB:86:4A:4C:71:93:3C:DA:41
Certificate issuer:       /CN=A91795CA/serialNumber=D95CE5FB36915C3D8CDB10DB864A4C71933CDA41
Certificate serial:       0720
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Vzl-zaRXD2M2xDbhkpMcZM82kE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.mft
Manifest number:          0715
Signing time:             Thu 16 Apr 2026 21:54:18 +0000
Manifest this update:     Thu 16 Apr 2026 21:54:17 +0000
Manifest next update:     Thu 23 Apr 2026 21:54:17 +0000
Files and hashes:         1: 2Vzl-zaRXD2M2xDbhkpMcZM82kE.crl (hash: Ojaz07K2SaRHdtVO02bbotGlxkxchcvzNj3knnnAOhY=)
                          2: 0BEE202087BA11EBBBA56067C4F9AE02.roa (hash: kfNHjmM4llhwfmGMMRHrrJHm+acq8kgyjCe1MOK7NGQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.crl
                          rsync://rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Vzl-zaRXD2M2xDbhkpMcZM82kE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:54:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1824 (0x720)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91795CA, serialNumber=D95CE5FB36915C3D8CDB10DB864A4C71933CDA41
        Validity
            Not Before: Apr 16 21:54:17 2026 GMT
            Not After : Apr 23 21:54:17 2026 GMT
        Subject: CN=69e15a8a-5b5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fa:0f:fa:fc:a9:70:5d:d6:30:5e:72:94:b9:
                    18:69:2d:e1:24:ad:36:f6:45:11:fa:f5:b3:10:43:
                    59:a7:36:8f:00:fa:bb:84:51:2c:a4:b1:5e:da:60:
                    cc:cf:b1:cc:62:8d:e3:f2:57:cd:dc:59:a0:e6:12:
                    5a:ee:41:e4:6c:22:07:2a:52:24:78:24:3e:52:fa:
                    5b:ce:b3:7f:f6:6f:48:d3:10:7c:ad:30:39:3c:90:
                    a8:a9:0f:4e:1e:67:20:a5:15:c4:70:62:29:2b:ec:
                    86:92:6f:96:31:e7:5e:76:76:56:6f:ca:a1:f4:54:
                    9e:02:a9:fc:8d:60:75:fd:b6:c8:54:7c:93:ed:03:
                    0a:f3:5e:5e:5e:ae:69:df:d3:ff:20:b3:ea:d6:35:
                    0f:33:26:9b:d3:78:d4:f7:d3:b0:a9:13:b5:5f:5b:
                    fe:da:41:57:ff:fa:ec:ea:8f:00:3f:60:c0:f5:81:
                    92:fe:29:d9:fd:8a:1d:2d:53:10:7f:91:6e:4b:c5:
                    c1:2f:25:ad:9f:36:ce:6a:86:26:52:b1:03:47:75:
                    37:5d:09:db:a1:35:d6:b1:d6:94:b1:18:ca:94:11:
                    b3:5d:61:40:ee:1b:f6:66:d9:c1:15:81:ff:1f:80:
                    c7:4e:89:c7:2f:c6:a8:aa:fc:ec:f2:81:2e:a3:c0:
                    e1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:85:A5:D2:9F:42:57:6E:63:47:80:21:7F:C8:48:BF:F4:FD:BD:D2
            X509v3 Authority Key Identifier:
                keyid:D9:5C:E5:FB:36:91:5C:3D:8C:DB:10:DB:86:4A:4C:71:93:3C:DA:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Vzl-zaRXD2M2xDbhkpMcZM82kE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:fc:ea:ee:0f:cd:60:6d:c9:bd:01:52:97:83:11:23:6b:c2:
         33:0c:d6:a8:4c:9a:89:d7:ba:39:b2:9c:7a:a5:cf:2f:15:d0:
         23:8a:27:61:78:17:8d:1f:83:de:3c:8f:fd:46:75:79:74:f0:
         4b:9b:2f:31:16:83:8b:bd:f7:c6:07:b2:9f:1d:e7:da:d9:22:
         f4:ba:75:a7:d0:c4:ca:fe:c4:d8:5a:1c:59:1f:c7:a8:73:fb:
         dd:89:c9:4c:d7:9f:13:b8:d2:4c:26:b2:d5:5b:a9:25:2f:d4:
         6e:fd:7c:d8:09:68:5f:56:f1:92:9a:94:a9:c9:34:1c:df:1d:
         d3:98:e2:c5:5a:3c:77:4a:13:02:39:8a:9f:05:4e:fc:18:c9:
         68:d6:a7:a0:c3:bb:3e:b6:fc:4b:ed:3b:a4:12:48:31:f0:a5:
         1c:8f:80:61:d5:a1:af:a8:7d:31:3c:71:c3:03:42:ee:cc:32:
         87:81:32:58:53:50:73:28:e7:d4:0e:82:d7:de:60:fa:a1:9c:
         48:fb:b2:7c:88:4e:4c:34:6e:44:29:b3:47:8a:d9:63:e9:51:
         8b:c0:1c:88:53:aa:99:c0:dd:c9:eb:f2:e7:b3:56:6a:e4:51:
         e3:da:c6:a5:dd:95:49:6a:c8:6a:fd:ed:c0:aa:6f:55:96:40:
         db:c4:00:0c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICByAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Nzk1Q0ExMTAvBgNVBAUTKEQ5NUNFNUZCMzY5MTVDM0Q4Q0RCMTBEQjg2NEE0Qzcx
OTMzQ0RBNDEwHhcNMjYwNDE2MjE1NDE3WhcNMjYwNDIzMjE1NDE3WjAYMRYwFAYD
VQQDEw02OWUxNWE4YS01YjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvfoP+vypcF3WMF5ylLkYaS3hJK029kUR+vWzEENZpzaPAPq7hFEspLFe2mDM
z7HMYo3j8lfN3Fmg5hJa7kHkbCIHKlIkeCQ+UvpbzrN/9m9I0xB8rTA5PJCoqQ9O
HmcgpRXEcGIpK+yGkm+WMedednZWb8qh9FSeAqn8jWB1/bbIVHyT7QMK815eXq5p
39P/ILPq1jUPMyab03jU99OwqRO1X1v+2kFX//rs6o8AP2DA9YGS/inZ/YodLVMQ
f5FuS8XBLyWtnzbOaoYmUrEDR3U3XQnboTXWsdaUsRjKlBGzXWFA7hv2ZtnBFYH/
H4DHTonHL8aoqvzs8oEuo8DhPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJKFpdKf
QlduY0eAIX/ISL/0/b3SMB8GA1UdIwQYMBaAFNlc5fs2kVw9jNsQ24ZKTHGTPNpB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTVDQS9GMzY0M0IxMDgz
MDUxMUVCOTcxODlCMzlDNEY5QUUwMi8yVnpsLXphUlhEMk0yeERiaGtwTWNaTTgy
a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJWemwtemFSWEQyTTJ4RGJoa3BNY1pNODJrRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
OTVDQS9GMzY0M0IxMDgzMDUxMUVCOTcxODlCMzlDNEY5QUUwMi8yVnpsLXphUlhE
Mk0yeERiaGtwTWNaTTgya0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYfzq7g/NYG3JvQFSl4MRI2vCMwzWqEyaide6ObKceqXPLxXQI4onYXgXjR+D
3jyP/UZ1eXTwS5svMRaDi733xgeynx3n2tki9Lp1p9DEyv7E2FocWR/HqHP73YnJ
TNefE7jSTCay1VupJS/Ubv182AloX1bxkpqUqck0HN8d05jixVo8d0oTAjmKnwVO
/BjJaNanoMO7Prb8S+07pBJIMfClHI+AYdWhr6h9MTxxwwNC7swyh4EyWFNQcyjn
1A6C195g+qGcSPuyfIhOTDRuRCmzR4rZY+lRi8AciFOqmcDdyevy57NWauRR49rG
pd2VSWrIav3twKpvVZZA28QADA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:35:23 2026 by rpki-client