Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft
File:                     VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft (raw, json)
Hash identifier:          G8XZwS/Y9kqXsn0sthxlTJlfxjqBl094fY9KuV2yS9A=
Subject key identifier:   ED:25:05:FB:4C:0E:72:3F:52:FB:EC:65:DD:A2:27:F9:A6:38:D0:14
Authority key identifier: 54:58:3C:29:BB:FB:50:09:DB:9C:C0:56:14:F6:3D:62:BC:B7:7C:39
Certificate issuer:       /CN=A9195AA2/serialNumber=54583C29BBFB5009DB9CC05614F63D62BCB77C39
Certificate serial:       0CE0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft
Manifest number:          155C
Signing time:             Thu 16 Apr 2026 18:12:49 +0000
Manifest this update:     Thu 16 Apr 2026 18:12:48 +0000
Manifest next update:     Thu 23 Apr 2026 18:12:48 +0000
Files and hashes:         1: VFg8Kbv7UAnbnMBWFPY9Yry3fDk.crl (hash: 8uCmFGLGmNblopiFrGJuoFZULx4cZTNdFZ4UUxA+MIo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.crl
                          rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 18:12:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3296 (0xce0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9195AA2, serialNumber=54583C29BBFB5009DB9CC05614F63D62BCB77C39
        Validity
            Not Before: Apr 16 18:12:48 2026 GMT
            Not After : Apr 23 18:12:48 2026 GMT
        Subject: CN=69e126a1-e0b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b4:69:ff:34:14:80:c5:01:6d:9d:d3:45:4f:
                    df:1b:36:b9:9d:75:49:6f:92:81:46:a5:cd:6e:40:
                    bb:95:b7:87:c3:a4:86:dd:72:b2:29:91:03:2d:28:
                    ee:9b:79:dc:59:49:91:18:cb:bb:87:33:1a:eb:9e:
                    f2:90:b1:bb:f3:c3:41:04:e2:5a:52:b6:98:35:e0:
                    17:29:1c:9e:0c:c8:c1:38:4e:88:61:ae:b4:60:6f:
                    35:70:41:c7:ad:b3:1d:67:cc:d4:76:31:a6:0e:93:
                    4a:4c:c0:92:86:c5:bf:c2:ab:74:28:af:e3:69:6f:
                    d2:5a:95:cc:d3:1a:af:39:cb:d5:1f:fa:cf:f3:f6:
                    0b:2e:ee:4c:c2:97:a1:88:3b:7a:4d:a6:8d:fb:01:
                    3a:31:2f:75:e8:01:be:f4:79:a2:fa:9b:2d:37:cd:
                    39:93:87:88:9e:83:aa:3f:20:71:24:37:00:80:a6:
                    06:fe:c3:af:37:aa:35:8e:b4:ff:62:96:ae:e8:e5:
                    0c:3e:03:75:e0:e5:ff:da:f6:c2:e6:f1:b2:db:67:
                    46:d0:d2:89:67:04:11:98:37:5e:eb:44:29:17:c0:
                    2b:9c:0c:46:c1:b7:95:62:1b:7c:71:55:64:18:91:
                    a0:65:e3:8c:67:2e:bd:1b:05:a8:cb:a3:af:21:32:
                    19:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:25:05:FB:4C:0E:72:3F:52:FB:EC:65:DD:A2:27:F9:A6:38:D0:14
            X509v3 Authority Key Identifier:
                keyid:54:58:3C:29:BB:FB:50:09:DB:9C:C0:56:14:F6:3D:62:BC:B7:7C:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:a7:60:da:7c:62:40:8c:e3:dd:33:39:9d:fe:75:1c:6a:a2:
         25:ad:72:09:3e:0b:73:bc:68:37:c2:90:e4:df:35:13:90:74:
         c5:2d:9d:16:00:f2:3b:61:16:74:8e:1c:b4:57:9a:ea:ec:7a:
         07:51:ef:6e:5e:4e:ce:ed:05:10:f1:2b:e4:17:cd:f5:bb:a6:
         09:53:43:6c:5c:6c:eb:fa:c5:cb:c3:cc:b8:f9:ac:0b:bf:45:
         dd:c5:0a:3e:c6:9c:79:c6:87:64:e0:6f:ee:cd:3d:4f:fd:cb:
         a4:51:cb:29:c0:fb:34:b1:7f:a2:59:85:b1:63:f8:43:2b:44:
         0b:a1:c9:ec:9a:47:7f:15:5c:83:17:e3:1b:7c:44:5f:81:c7:
         9f:7a:b7:a9:b6:09:44:03:f4:10:58:09:2d:50:70:13:d3:14:
         ba:72:e2:1f:3a:64:80:63:cc:54:8c:3e:67:7d:87:4d:ea:10:
         32:9b:9e:cd:91:03:dc:33:8f:1b:5e:bf:2f:62:f0:23:b8:0b:
         83:21:ec:3f:ba:bc:e3:5e:a7:c2:27:ee:c0:2e:9d:11:49:6a:
         cb:15:c0:46:5d:a5:8e:f6:d7:a0:ac:76:de:19:73:76:87:0a:
         cf:9e:75:bd:38:19:9d:8a:ca:a8:71:88:d5:69:ab:0b:f2:f3:
         35:a9:ba:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:46:15 2026 by rpki-client