Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A995E/2E7AF298FA6211EF95555C0EC4F9AE02/VuOUrxtay4_0gsjGAmn-oOTEJ74.mft
File:                     VuOUrxtay4_0gsjGAmn-oOTEJ74.mft (raw, json)
Hash identifier:          bVXQVdDvg+DLB+/00SBbyseJQUDSibmpCPmOphbEgKU=
Subject key identifier:   33:FC:21:47:3E:44:63:A2:79:B0:68:00:77:E3:15:74:07:DC:8A:59
Authority key identifier: 56:E3:94:AF:1B:5A:CB:8F:F4:82:C8:C6:02:69:FE:A0:E4:C4:27:BE
Certificate issuer:       /CN=A91A995E/serialNumber=56E394AF1B5ACB8FF482C8C60269FEA0E4C427BE
Certificate serial:       DB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VuOUrxtay4_0gsjGAmn-oOTEJ74.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A995E/2E7AF298FA6211EF95555C0EC4F9AE02/VuOUrxtay4_0gsjGAmn-oOTEJ74.mft
Manifest number:          D7
Signing time:             Fri 17 Apr 2026 06:25:13 +0000
Manifest this update:     Fri 17 Apr 2026 06:25:13 +0000
Manifest next update:     Fri 24 Apr 2026 06:25:13 +0000
Files and hashes:         1: VuOUrxtay4_0gsjGAmn-oOTEJ74.crl (hash: z9S6QBByzzUepFZQ5lTS2YnEfEXGCAUsuKyQZv8r41w=)
                          2: 3E41E766FA6411EFB8C12C50C4F9AE02.roa (hash: QwSj57WxC7TB25I/8HX7ku8jZUCgQ6cEZ8ddjhtIf0I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A995E/2E7AF298FA6211EF95555C0EC4F9AE02/VuOUrxtay4_0gsjGAmn-oOTEJ74.crl
                          rsync://rpki.apnic.net/member_repository/A91A995E/2E7AF298FA6211EF95555C0EC4F9AE02/VuOUrxtay4_0gsjGAmn-oOTEJ74.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VuOUrxtay4_0gsjGAmn-oOTEJ74.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 219 (0xdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A995E, serialNumber=56E394AF1B5ACB8FF482C8C60269FEA0E4C427BE
        Validity
            Not Before: Apr 17 06:25:13 2026 GMT
            Not After : Apr 24 06:25:13 2026 GMT
        Subject: CN=69e1d249-6bcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:50:e0:81:d1:e4:79:4a:ea:b1:f2:87:01:c4:
                    31:a1:3c:d8:24:8e:4c:68:b8:99:c3:63:7b:da:1b:
                    dc:2d:4d:50:f8:9d:b3:6b:8d:40:77:b5:fc:d6:30:
                    cc:55:59:39:d5:5a:78:0c:08:24:31:5f:e7:3c:f0:
                    3c:f0:d3:89:28:ae:c2:60:70:33:87:77:32:1a:d1:
                    02:08:c9:11:1b:4f:08:6d:a2:47:84:35:77:91:a0:
                    3a:c0:a1:fd:f7:d4:42:1c:ff:6c:07:5a:e5:20:96:
                    56:da:29:da:41:11:a0:93:89:b0:19:8c:7a:c7:aa:
                    77:c8:1e:98:29:1d:59:e9:eb:35:8d:13:36:78:e3:
                    6c:b5:05:58:5b:a9:e4:ad:0f:e8:e4:85:b7:99:0b:
                    49:c3:6b:d1:39:b4:96:80:34:64:18:ae:05:b6:89:
                    7d:e6:00:a9:dd:10:f3:15:47:36:49:4d:7a:89:aa:
                    31:c0:2a:f2:cb:0e:06:26:a0:fa:d0:c9:2c:b2:b0:
                    ff:a9:84:15:57:0a:0e:c2:af:5c:02:43:1e:3e:dc:
                    74:a5:cf:ea:17:9f:2b:fb:91:aa:fe:e7:eb:62:51:
                    61:23:07:20:b9:3d:46:ad:b6:c6:d5:9f:86:7c:b1:
                    cc:3f:da:50:29:77:9a:b5:41:c8:3c:0d:60:36:a3:
                    6e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:FC:21:47:3E:44:63:A2:79:B0:68:00:77:E3:15:74:07:DC:8A:59
            X509v3 Authority Key Identifier:
                keyid:56:E3:94:AF:1B:5A:CB:8F:F4:82:C8:C6:02:69:FE:A0:E4:C4:27:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A995E/2E7AF298FA6211EF95555C0EC4F9AE02/VuOUrxtay4_0gsjGAmn-oOTEJ74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VuOUrxtay4_0gsjGAmn-oOTEJ74.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A995E/2E7AF298FA6211EF95555C0EC4F9AE02/VuOUrxtay4_0gsjGAmn-oOTEJ74.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:b2:20:29:68:00:b5:fc:80:04:dd:86:85:dd:c7:82:eb:0b:
         98:99:f0:39:2e:90:03:04:47:12:45:9f:d1:c1:6b:a0:de:19:
         e7:e9:2f:2f:bc:01:09:26:15:e6:6f:d5:74:f5:16:23:9d:d9:
         87:6e:aa:7f:93:ca:77:b0:7b:45:a3:b0:53:24:e2:c6:93:db:
         86:b8:72:eb:d9:8e:d7:8b:b7:d0:8d:61:bb:cc:64:85:2b:40:
         a2:ef:f1:bf:17:43:f5:ed:02:01:5b:98:1a:8a:89:42:7d:ab:
         a5:f4:10:92:27:05:42:82:cb:ab:1c:65:67:4d:f2:1a:47:ea:
         ed:06:1d:79:49:4f:94:81:44:32:ef:47:76:f3:63:68:5e:9c:
         99:a8:f9:2d:6d:44:8b:8a:04:31:b2:99:78:02:03:97:64:03:
         9c:8d:9f:bb:60:ed:e7:12:d4:36:16:52:81:0a:b8:f0:fa:38:
         2f:e7:85:06:15:d4:bd:1d:d0:49:dd:24:e8:33:b5:ae:16:3e:
         80:fd:a9:a6:27:f3:da:18:8f:11:f2:eb:eb:be:e0:e4:52:7a:
         c6:e1:83:e4:b8:40:aa:10:61:1f:1a:02:f6:f8:e3:2c:a6:69:
         e1:10:d1:c3:71:74:61:e1:f3:a2:fe:31:3f:f9:4e:b1:b9:b1:
         f6:ac:38:5b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICANswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTk5NUUxMTAvBgNVBAUTKDU2RTM5NEFGMUI1QUNCOEZGNDgyQzhDNjAyNjlGRUEw
RTRDNDI3QkUwHhcNMjYwNDE3MDYyNTEzWhcNMjYwNDI0MDYyNTEzWjAYMRYwFAYD
VQQDEw02OWUxZDI0OS02YmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwVDggdHkeUrqsfKHAcQxoTzYJI5MaLiZw2N72hvcLU1Q+J2za41Ad7X81jDM
VVk51Vp4DAgkMV/nPPA88NOJKK7CYHAzh3cyGtECCMkRG08IbaJHhDV3kaA6wKH9
99RCHP9sB1rlIJZW2inaQRGgk4mwGYx6x6p3yB6YKR1Z6es1jRM2eONstQVYW6nk
rQ/o5IW3mQtJw2vRObSWgDRkGK4Ftol95gCp3RDzFUc2SU16iaoxwCryyw4GJqD6
0MkssrD/qYQVVwoOwq9cAkMePtx0pc/qF58r+5Gq/ufrYlFhIwcguT1GrbbG1Z+G
fLHMP9pQKXeatUHIPA1gNqNuQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDP8IUc+
RGOiebBoAHfjFXQH3IpZMB8GA1UdIwQYMBaAFFbjlK8bWsuP9ILIxgJp/qDkxCe+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTk1RS8yRTdBRjI5OEZB
NjIxMUVGOTU1NTVDMEVDNEY5QUUwMi9WdU9Vcnh0YXk0XzBnc2pHQW1uLW9PVEVK
NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1Z1T1VyeHRheTRfMGdzakdBbW4tb09URUo3NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OTk1RS8yRTdBRjI5OEZBNjIxMUVGOTU1NTVDMEVDNEY5QUUwMi9WdU9Vcnh0YXk0
XzBnc2pHQW1uLW9PVEVKNzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMrIgKWgAtfyABN2Ghd3HgusLmJnwOS6QAwRHEkWf0cFroN4Z5+kvL7wBCSYV
5m/VdPUWI53Zh26qf5PKd7B7RaOwUyTixpPbhrhy69mO14u30I1hu8xkhStAou/x
vxdD9e0CAVuYGoqJQn2rpfQQkicFQoLLqxxlZ03yGkfq7QYdeUlPlIFEMu9HdvNj
aF6cmaj5LW1Ei4oEMbKZeAIDl2QDnI2fu2Dt5xLUNhZSgQq48Po4L+eFBhXUvR3Q
Sd0k6DO1rhY+gP2ppifz2hiPEfLr677g5FJ6xuGD5LhAqhBhHxoC9vjjLKZp4RDR
w3F0YeHzov4xP/lOsbmx9qw4Ww==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:17:47 2026 by rpki-client