Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft
File:                     Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft (raw, json)
Hash identifier:          Tkp/Fna2o7WQr1PyCmtLe4M38SmRmF87vOL44YfuZH8=
Subject key identifier:   41:54:CD:20:B1:47:85:47:C0:E9:04:80:35:4D:29:7D:4A:0A:FD:86
Authority key identifier: 56:7F:9A:B2:B2:C7:96:92:68:5C:03:05:5A:F9:69:E6:0B:66:B8:00
Certificate issuer:       /CN=A91ADB98/serialNumber=567F9AB2B2C79692685C03055AF969E60B66B800
Certificate serial:       02A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vn-asrLHlpJoXAMFWvlp5gtmuAA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft
Manifest number:          028F
Signing time:             Sun 01 Mar 2026 23:47:12 +0000
Manifest this update:     Sun 01 Mar 2026 23:47:10 +0000
Manifest next update:     Sun 08 Mar 2026 23:47:10 +0000
Files and hashes:         1: Vn-asrLHlpJoXAMFWvlp5gtmuAA.crl (hash: GBCfhHfgleuKXZLCREtUxf95clI1OBzBrk37iXfDCbU=)
                          2: 310AEC7A5B7C11EDAAFAB831C4F9AE02.roa (hash: s6hQH/XUcOEn8mr++TJ3GkI04opViNwePvL4KgonitQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.crl
                          rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vn-asrLHlpJoXAMFWvlp5gtmuAA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:47:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 673 (0x2a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADB98, serialNumber=567F9AB2B2C79692685C03055AF969E60B66B800
        Validity
            Not Before: Mar  1 23:47:10 2026 GMT
            Not After : Mar  8 23:47:10 2026 GMT
        Subject: CN=69a4d000-6ef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:88:93:79:7b:58:15:12:b9:28:a5:aa:a9:43:
                    2d:dd:aa:7d:42:99:34:c5:60:d9:cc:3f:0d:35:9f:
                    4a:49:67:89:93:c5:34:01:a0:f6:9b:28:94:3e:09:
                    b6:88:cf:26:14:3c:78:a0:d2:68:21:0f:bf:2f:f7:
                    32:b5:fe:4b:ff:06:35:15:48:ab:26:9e:9f:d7:32:
                    13:d4:c7:57:10:0e:c2:2b:ba:a0:1b:82:57:a9:b5:
                    9b:a9:23:3d:e1:7d:4e:b1:f8:93:29:ea:db:3d:e5:
                    00:1b:aa:61:e9:1a:56:b7:ee:89:57:10:a3:c6:ed:
                    af:4d:dc:cc:9e:82:7d:ef:8a:e2:3c:21:73:ae:d4:
                    1a:0b:22:4a:5c:1e:84:af:9d:76:89:e0:9b:f2:8e:
                    95:c6:53:8f:6b:93:ce:70:ad:d2:70:e8:7c:5e:d9:
                    71:5f:0e:dc:35:8f:8f:71:27:bb:d4:99:34:3b:1d:
                    36:02:ab:d5:20:97:53:79:20:9a:54:22:13:1e:3b:
                    ee:46:4c:2e:92:1f:ae:ee:f4:42:2d:0e:4e:0e:0a:
                    1b:dd:04:8b:fc:a4:22:e0:67:53:65:1d:ee:fe:41:
                    2a:98:2a:69:bc:0b:80:3e:b2:26:a7:8f:7b:d5:8d:
                    01:60:d5:a7:84:66:c2:34:4d:6b:c0:9e:a1:63:4f:
                    0e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:54:CD:20:B1:47:85:47:C0:E9:04:80:35:4D:29:7D:4A:0A:FD:86
            X509v3 Authority Key Identifier:
                keyid:56:7F:9A:B2:B2:C7:96:92:68:5C:03:05:5A:F9:69:E6:0B:66:B8:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vn-asrLHlpJoXAMFWvlp5gtmuAA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:c5:cd:1b:cc:5c:59:0d:6c:60:ac:18:e8:c1:46:e1:82:fe:
         0b:6d:48:2d:90:d2:0c:55:cf:9a:d6:ce:99:2b:07:89:35:28:
         fd:a1:a9:ef:1a:c5:2e:e8:2f:b7:6a:47:36:e0:e9:be:80:fa:
         03:a9:bb:51:02:17:4d:6c:ac:74:67:b1:3c:b2:62:94:4d:12:
         cf:29:1f:56:6e:db:a1:48:02:0b:cd:a3:b9:29:ea:cd:67:a7:
         cb:d3:a0:bb:85:c5:51:e3:46:f7:24:4b:ee:21:13:ee:57:3f:
         4f:7e:0c:0b:56:1c:78:f4:15:51:f4:35:31:b4:24:c3:10:aa:
         14:46:b2:a4:22:86:43:86:67:f9:7a:84:11:69:a6:16:da:b4:
         59:f3:51:e0:2c:21:77:c3:cb:b7:62:48:73:1c:c6:91:58:30:
         c6:1b:6e:c7:25:ee:b2:87:f1:03:3e:c0:45:9b:e6:dd:57:1c:
         33:a3:6b:47:01:b8:9b:df:cb:71:45:21:83:fb:68:a6:f0:49:
         a1:41:c1:9e:a8:c8:de:3f:fe:e3:3a:ca:34:12:81:df:f7:96:
         50:f9:c3:27:df:58:69:b1:14:90:b4:5e:3a:dc:91:ea:12:ee:
         73:ab:ae:5e:78:96:90:79:95:25:2f:ef:ba:aa:46:a1:6b:d3:
         86:54:d2:2a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAqEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QURCOTgxMTAvBgNVBAUTKDU2N0Y5QUIyQjJDNzk2OTI2ODVDMDMwNTVBRjk2OUU2
MEI2NkI4MDAwHhcNMjYwMzAxMjM0NzEwWhcNMjYwMzA4MjM0NzEwWjAYMRYwFAYD
VQQDEw02OWE0ZDAwMC02ZWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs4iTeXtYFRK5KKWqqUMt3ap9Qpk0xWDZzD8NNZ9KSWeJk8U0AaD2myiUPgm2
iM8mFDx4oNJoIQ+/L/cytf5L/wY1FUirJp6f1zIT1MdXEA7CK7qgG4JXqbWbqSM9
4X1OsfiTKerbPeUAG6ph6RpWt+6JVxCjxu2vTdzMnoJ974riPCFzrtQaCyJKXB6E
r512ieCb8o6VxlOPa5POcK3ScOh8XtlxXw7cNY+PcSe71Jk0Ox02AqvVIJdTeSCa
VCITHjvuRkwukh+u7vRCLQ5ODgob3QSL/KQi4GdTZR3u/kEqmCppvAuAPrImp497
1Y0BYNWnhGbCNE1rwJ6hY08OJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEFUzSCx
R4VHwOkEgDVNKX1KCv2GMB8GA1UdIwQYMBaAFFZ/mrKyx5aSaFwDBVr5aeYLZrgA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREI5OC9FMkRBODUxODQ5
MjExMUVEQUJENTlDNTNDNEY5QUUwMi9Wbi1hc3JMSGxwSm9YQU1GV3ZscDVndG11
QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZuLWFzckxIbHBKb1hBTUZXdmxwNWd0bXVBQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
REI5OC9FMkRBODUxODQ5MjExMUVEQUJENTlDNTNDNEY5QUUwMi9Wbi1hc3JMSGxw
Sm9YQU1GV3ZscDVndG11QUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAO8XNG8xcWQ1sYKwY6MFG4YL+C21ILZDSDFXPmtbOmSsHiTUo/aGp7xrFLugv
t2pHNuDpvoD6A6m7UQIXTWysdGexPLJilE0SzykfVm7boUgCC82juSnqzWeny9Og
u4XFUeNG9yRL7iET7lc/T34MC1YcePQVUfQ1MbQkwxCqFEaypCKGQ4Zn+XqEEWmm
Ftq0WfNR4Cwhd8PLt2JIcxzGkVgwxhtuxyXusofxAz7ARZvm3VccM6NrRwG4m9/L
cUUhg/topvBJoUHBnqjI3j/+4zrKNBKB3/eWUPnDJ99YabEUkLReOtyR6hLuc6uu
XniWkHmVJS/vuqpGoWvThlTSKg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:58:15 2026 by rpki-client