Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft
File:                     VCRPZF3qDVCWaFgNE46CUnn7Vng.mft (raw, json)
Hash identifier:          k2mIFt+hwLk/CH4pANiyQuYfLLRsRAzxgfAw3JwQg0w=
Subject key identifier:   AB:FD:D9:A0:B0:76:80:45:22:35:5C:DD:8C:50:BA:6E:32:D6:98:72
Authority key identifier: 54:24:4F:64:5D:EA:0D:50:96:68:58:0D:13:8E:82:52:79:FB:56:78
Certificate issuer:       /CN=A91B624E/serialNumber=54244F645DEA0D509668580D138E825279FB5678
Certificate serial:       0DB4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCRPZF3qDVCWaFgNE46CUnn7Vng.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft
Manifest number:          0DA9
Signing time:             Thu 16 Apr 2026 17:50:56 +0000
Manifest this update:     Thu 16 Apr 2026 17:50:56 +0000
Manifest next update:     Thu 23 Apr 2026 17:50:56 +0000
Files and hashes:         1: VCRPZF3qDVCWaFgNE46CUnn7Vng.crl (hash: v+fzz5WhmGG6CLt38fxtRcILdTCmssQOJ8RognQIhoc=)
                          2: 690390E80FAA11EB8B893F1EC4F9AE02.roa (hash: e/Pn5qPd83tgfAM5gG7LPu5WMIBT6NEqspZed3qdjbs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.crl
                          rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCRPZF3qDVCWaFgNE46CUnn7Vng.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 17:50:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3508 (0xdb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B624E, serialNumber=54244F645DEA0D509668580D138E825279FB5678
        Validity
            Not Before: Apr 16 17:50:56 2026 GMT
            Not After : Apr 23 17:50:56 2026 GMT
        Subject: CN=69e12180-8d28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9b:4f:b8:3e:23:1e:12:6f:77:ec:d4:73:e2:
                    1c:75:a7:89:3f:00:a9:43:0e:3d:6b:6d:d3:1a:e0:
                    54:9e:c5:3b:3e:87:55:6d:ce:30:db:bd:78:8b:fd:
                    24:d5:e0:26:e7:20:79:1f:9e:a0:49:d4:73:e2:52:
                    51:17:19:c7:90:c6:d4:c8:d7:1c:8d:7a:81:bc:a9:
                    18:87:b3:c6:cd:61:5b:60:ef:39:a3:4c:f5:9d:20:
                    b8:24:09:91:87:0b:33:0f:be:38:69:02:a3:28:e7:
                    39:0b:38:4c:ac:52:70:79:0d:84:8c:0c:2a:91:c3:
                    5d:9b:de:30:9d:57:31:0e:df:a9:31:2f:68:59:c2:
                    88:9f:41:d2:24:46:fc:68:a3:5d:22:48:c2:91:9d:
                    dc:21:d9:08:7b:68:94:c6:32:6b:a8:3b:f3:a3:f5:
                    c4:a8:ac:8b:57:d2:a5:39:f6:82:dd:17:c0:f9:9a:
                    91:b7:74:fc:94:e2:64:8e:d8:b0:2f:29:fa:a9:40:
                    57:0d:c5:dc:d4:fe:81:b4:50:21:4e:66:2f:98:e7:
                    51:9d:71:96:dd:46:a4:f3:4d:89:9d:37:4e:5d:f3:
                    5c:ad:b1:ca:58:cb:e1:4c:d9:61:17:44:81:59:a6:
                    5d:b4:6b:4d:e8:a0:0e:db:86:7e:61:60:3e:86:7e:
                    91:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:FD:D9:A0:B0:76:80:45:22:35:5C:DD:8C:50:BA:6E:32:D6:98:72
            X509v3 Authority Key Identifier:
                keyid:54:24:4F:64:5D:EA:0D:50:96:68:58:0D:13:8E:82:52:79:FB:56:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCRPZF3qDVCWaFgNE46CUnn7Vng.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:93:ab:0a:2c:85:41:c5:d1:b9:6a:50:0a:c6:64:fa:0e:91:
         39:33:b9:41:bd:7c:57:52:29:ae:10:ce:84:a1:9b:d2:4b:fe:
         af:d3:33:ac:a4:3b:3c:9a:a0:94:58:49:39:bc:6b:96:af:91:
         f9:e2:10:f8:42:3a:35:97:de:a8:c6:e0:4b:0b:e7:70:3f:b4:
         df:b7:d5:85:5b:0a:8f:27:c0:b1:22:4a:b7:c7:22:27:88:e6:
         ea:fa:2c:56:2c:05:17:a7:40:97:08:9b:cd:d7:cb:db:44:82:
         1e:56:25:0c:85:2c:1b:78:ac:59:41:da:20:0e:11:d6:eb:2a:
         ed:d6:04:0f:d0:fe:34:35:7e:b7:b6:94:6e:48:94:73:ad:ab:
         ef:83:12:9a:7b:50:13:69:06:a1:ad:3c:3d:3d:a3:d6:0c:3c:
         d3:19:c3:ce:74:0d:af:68:df:fb:ea:d3:36:2f:3b:25:b5:03:
         95:8b:09:9a:13:58:52:74:01:ef:0e:b8:cf:7a:a7:1d:81:47:
         4e:8e:0e:4f:b1:ca:fd:c1:94:e5:a4:ec:58:4a:76:e8:fc:9d:
         c9:4f:ef:26:d0:8c:9a:9a:4a:d9:ff:ae:8b:ea:36:fc:6b:7f:
         a2:f6:a4:d4:e9:e4:69:19:42:6c:c7:b4:ec:4b:f1:e2:67:71:
         fd:12:fe:b5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjYyNEUxMTAvBgNVBAUTKDU0MjQ0RjY0NURFQTBENTA5NjY4NTgwRDEzOEU4MjUy
NzlGQjU2NzgwHhcNMjYwNDE2MTc1MDU2WhcNMjYwNDIzMTc1MDU2WjAYMRYwFAYD
VQQDEw02OWUxMjE4MC04ZDI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzptPuD4jHhJvd+zUc+IcdaeJPwCpQw49a23TGuBUnsU7PodVbc4w2714i/0k
1eAm5yB5H56gSdRz4lJRFxnHkMbUyNccjXqBvKkYh7PGzWFbYO85o0z1nSC4JAmR
hwszD744aQKjKOc5CzhMrFJweQ2EjAwqkcNdm94wnVcxDt+pMS9oWcKIn0HSJEb8
aKNdIkjCkZ3cIdkIe2iUxjJrqDvzo/XEqKyLV9KlOfaC3RfA+ZqRt3T8lOJkjtiw
Lyn6qUBXDcXc1P6BtFAhTmYvmOdRnXGW3Uak802JnTdOXfNcrbHKWMvhTNlhF0SB
WaZdtGtN6KAO24Z+YWA+hn6RHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKv92aCw
doBFIjVc3YxQum4y1phyMB8GA1UdIwQYMBaAFFQkT2Rd6g1QlmhYDROOglJ5+1Z4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjI0RS9CRDk1QzM4RUUw
M0UxMUU5QjJCOURBMTFDNEY5QUUwMi9WQ1JQWkYzcURWQ1dhRmdORTQ2Q1VubjdW
bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZDUlBaRjNxRFZDV2FGZ05FNDZDVW5uN1ZuZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NjI0RS9CRDk1QzM4RUUwM0UxMUU5QjJCOURBMTFDNEY5QUUwMi9WQ1JQWkYzcURW
Q1dhRmdORTQ2Q1VubjdWbmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAT5OrCiyFQcXRuWpQCsZk+g6ROTO5Qb18V1IprhDOhKGb0kv+r9MzrKQ7PJqg
lFhJObxrlq+R+eIQ+EI6NZfeqMbgSwvncD+037fVhVsKjyfAsSJKt8ciJ4jm6vos
ViwFF6dAlwibzdfL20SCHlYlDIUsG3isWUHaIA4R1usq7dYED9D+NDV+t7aUbkiU
c62r74MSmntQE2kGoa08PT2j1gw80xnDznQNr2jf++rTNi87JbUDlYsJmhNYUnQB
7w64z3qnHYFHTo4OT7HK/cGU5aTsWEp26PydyU/vJtCMmppK2f+ui+o2/Gt/ovak
1OnkaRlCbMe07Evx4mdx/RL+tQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:18:49 2026 by rpki-client