Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft
File:                     VNOpVcw0GoQYFajN6hkK6lEC384.mft (raw, json)
Hash identifier:          cSjSMeowJXbiFd5a4aiQfjfLlssPBSGf8pI9y9qfsgA=
Subject key identifier:   F0:6E:D3:5E:80:7F:44:E9:8E:86:9F:06:6E:AE:E4:90:B1:23:AB:23
Authority key identifier: 54:D3:A9:55:CC:34:1A:84:18:15:A8:CD:EA:19:0A:EA:51:02:DF:CE
Certificate issuer:       /CN=A91C1FAC/serialNumber=54D3A955CC341A841815A8CDEA190AEA5102DFCE
Certificate serial:       0CD3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft
Manifest number:          0CCC
Signing time:             Sat 28 Feb 2026 18:27:35 +0000
Manifest this update:     Sat 28 Feb 2026 18:27:34 +0000
Manifest next update:     Sat 07 Mar 2026 18:27:34 +0000
Files and hashes:         1: VNOpVcw0GoQYFajN6hkK6lEC384.crl (hash: BbxIiktl0Dw2jdVwt9iEiFFhAQdlwjtvNo0uUOCnigE=)
                          2: 86B7FE9005FF11EAB499A845C4F9AE02.roa (hash: MoMl/DlQY62DjxtHrGyaIblAP24xLixngcq1DFl3W2Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.crl
                          rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 18:27:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3283 (0xcd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1FAC, serialNumber=54D3A955CC341A841815A8CDEA190AEA5102DFCE
        Validity
            Not Before: Feb 28 18:27:34 2026 GMT
            Not After : Mar  7 18:27:34 2026 GMT
        Subject: CN=69a33397-6593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7f:0b:b7:6d:16:8c:49:05:43:56:92:21:9b:
                    34:a6:03:8b:f1:d7:76:71:7a:a0:1e:4d:54:dd:d0:
                    8f:3e:80:2d:4b:a4:23:39:cb:aa:f6:4e:7d:82:49:
                    6e:31:ab:ce:e8:f6:f0:db:11:5b:9f:29:42:b7:39:
                    61:fd:25:35:d8:14:9e:ab:b6:9c:e9:0a:0f:25:77:
                    d9:3d:ac:6b:13:74:86:32:54:b8:19:25:2b:53:0f:
                    50:6a:e2:91:59:a6:3a:99:de:98:55:e3:50:2f:68:
                    82:76:c7:5a:9f:82:7a:dd:6b:b5:9a:7c:5c:5a:66:
                    ed:1e:17:02:3a:05:50:ba:a7:d8:e7:cc:8e:db:ac:
                    32:f7:75:09:e7:c1:b1:66:4c:72:9a:62:70:f1:da:
                    89:58:85:9b:86:29:f8:a8:07:d7:92:72:de:8d:7a:
                    8d:44:27:6c:d5:37:ca:57:84:02:78:ea:67:2c:68:
                    55:70:10:7a:29:c7:68:20:9e:e0:78:33:a1:c0:b7:
                    10:ac:f9:15:ff:45:f1:fa:2f:8d:a8:04:8a:d3:04:
                    e2:fd:b2:7b:0d:ba:d9:70:3e:99:1f:b5:ea:8c:27:
                    41:c3:4e:78:a6:d6:3d:8a:9c:50:4f:db:3f:c8:ea:
                    5f:6f:b0:c4:33:53:1e:b4:6c:66:19:c8:27:35:b4:
                    53:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:6E:D3:5E:80:7F:44:E9:8E:86:9F:06:6E:AE:E4:90:B1:23:AB:23
            X509v3 Authority Key Identifier:
                keyid:54:D3:A9:55:CC:34:1A:84:18:15:A8:CD:EA:19:0A:EA:51:02:DF:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:d2:69:dd:ad:f9:d6:1c:db:1f:3b:d7:de:66:84:c2:1b:f8:
         24:eb:33:f3:7d:8d:60:85:2c:52:51:80:37:b2:c7:aa:22:7c:
         ec:d8:74:47:f4:cd:18:3d:62:e6:1a:23:63:b5:cf:4b:a7:6a:
         a4:1d:cb:16:06:c8:98:fe:fe:9a:66:26:20:2d:e1:fd:4a:92:
         32:e2:37:d5:87:2e:4f:54:36:ac:53:e5:c4:75:e7:00:a4:a1:
         64:e5:fa:ee:91:ab:d0:76:92:57:bb:ac:ab:5d:32:ce:5c:27:
         36:9d:46:e2:a3:ae:ad:8b:99:b3:6e:8d:ff:eb:17:2d:69:96:
         3e:d6:e2:13:82:8b:90:28:03:f4:02:b4:86:c9:b8:9e:69:ec:
         0f:dd:10:05:0e:6a:45:7b:1f:03:7c:a9:c5:74:5f:44:a9:d4:
         f9:64:1d:d4:ac:95:8d:e5:3d:ce:c9:37:ae:32:29:1a:b9:45:
         5f:ed:67:9a:57:8e:12:33:05:87:b1:60:26:ba:ee:e8:e8:87:
         f1:da:e4:8c:59:f8:81:e3:4e:82:71:43:3e:30:c8:59:80:14:
         62:e7:e8:1c:9e:67:54:e2:9e:94:06:e1:60:0f:1a:64:b8:40:
         77:9d:6d:32:02:69:40:0e:0a:bd:2a:15:34:02:e2:36:d0:f1:
         19:50:b4:c6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDNMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzFGQUMxMTAvBgNVBAUTKDU0RDNBOTU1Q0MzNDFBODQxODE1QThDREVBMTkwQUVB
NTEwMkRGQ0UwHhcNMjYwMjI4MTgyNzM0WhcNMjYwMzA3MTgyNzM0WjAYMRYwFAYD
VQQDDA02OWEzMzM5Ny02NTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1H8Lt20WjEkFQ1aSIZs0pgOL8dd2cXqgHk1U3dCPPoAtS6QjOcuq9k59gklu
MavO6Pbw2xFbnylCtzlh/SU12BSeq7ac6QoPJXfZPaxrE3SGMlS4GSUrUw9QauKR
WaY6md6YVeNQL2iCdsdan4J63Wu1mnxcWmbtHhcCOgVQuqfY58yO26wy93UJ58Gx
ZkxymmJw8dqJWIWbhin4qAfXknLejXqNRCds1TfKV4QCeOpnLGhVcBB6KcdoIJ7g
eDOhwLcQrPkV/0Xx+i+NqASK0wTi/bJ7DbrZcD6ZH7XqjCdBw054ptY9ipxQT9s/
yOpfb7DEM1MetGxmGcgnNbRTYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPBu016A
f0TpjoafBm6u5JCxI6sjMB8GA1UdIwQYMBaAFFTTqVXMNBqEGBWozeoZCupRAt/O
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUZBQy82ODE5QkY0MjA1
RkUxMUVBODc2M0MyNDNDNEY5QUUwMi9WTk9wVmN3MEdvUVlGYWpONmhrSzZsRUMz
ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZOT3BWY3cwR29RWUZhak42aGtLNmxFQzM4NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MUZBQy82ODE5QkY0MjA1RkUxMUVBODc2M0MyNDNDNEY5QUUwMi9WTk9wVmN3MEdv
UVlGYWpONmhrSzZsRUMzODQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAF9Jp3a351hzbHzvX3maEwhv4JOsz832NYIUsUlGAN7LHqiJ87Nh0R/TNGD1i
5hojY7XPS6dqpB3LFgbImP7+mmYmIC3h/UqSMuI31YcuT1Q2rFPlxHXnAKShZOX6
7pGr0HaSV7usq10yzlwnNp1G4qOurYuZs26N/+sXLWmWPtbiE4KLkCgD9AK0hsm4
nmnsD90QBQ5qRXsfA3ypxXRfRKnU+WQd1KyVjeU9zsk3rjIpGrlFX+1nmleOEjMF
h7FgJrru6OiH8drkjFn4geNOgnFDPjDIWYAUYufoHJ5nVOKelAbhYA8aZLhAd51t
MgJpQA4KvSoVNALiNtDxGVC0xg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:10:52 2026 by rpki-client