Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7AC5/A3EB5C00C0D511EA908C0178C4F9AE02/vz-8DaluLlE6qliBLGlLzQe43Xc.mft
File:                     vz-8DaluLlE6qliBLGlLzQe43Xc.mft (raw, json)
Hash identifier:          UQz472JXr+KVM4fJiAof47CPs5id27J/TkFrUq23HBE=
Subject key identifier:   99:C8:D1:41:73:DA:A6:D5:97:70:11:46:D4:BF:DF:61:10:B7:32:A5
Authority key identifier: BF:3F:BC:0D:A9:6E:2E:51:3A:AA:58:81:2C:69:4B:CD:07:B8:DD:77
Certificate issuer:       /CN=A91C7AC5/serialNumber=BF3FBC0DA96E2E513AAA58812C694BCD07B8DD77
Certificate serial:       092D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vz-8DaluLlE6qliBLGlLzQe43Xc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7AC5/A3EB5C00C0D511EA908C0178C4F9AE02/vz-8DaluLlE6qliBLGlLzQe43Xc.mft
Manifest number:          091A
Signing time:             Mon 02 Mar 2026 00:57:48 +0000
Manifest this update:     Mon 02 Mar 2026 00:57:46 +0000
Manifest next update:     Mon 09 Mar 2026 00:57:46 +0000
Files and hashes:         1: vz-8DaluLlE6qliBLGlLzQe43Xc.crl (hash: QGS3xtmRIZdSbeMpVXfg///DOuFs0mdCS4u9gLNEJeM=)
                          2: 5BC42F286E9F11EC90A66E2BC4F9AE02.roa (hash: Ra6aDzkRJ9CvQ2Xe9bv2r/5IA66OVXcErWzz8l4k4Jo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7AC5/A3EB5C00C0D511EA908C0178C4F9AE02/vz-8DaluLlE6qliBLGlLzQe43Xc.crl
                          rsync://rpki.apnic.net/member_repository/A91C7AC5/A3EB5C00C0D511EA908C0178C4F9AE02/vz-8DaluLlE6qliBLGlLzQe43Xc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vz-8DaluLlE6qliBLGlLzQe43Xc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:57:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2349 (0x92d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7AC5, serialNumber=BF3FBC0DA96E2E513AAA58812C694BCD07B8DD77
        Validity
            Not Before: Mar  2 00:57:46 2026 GMT
            Not After : Mar  9 00:57:46 2026 GMT
        Subject: CN=69a4e08b-9dc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3d:a1:5c:95:16:56:29:96:13:78:de:79:ae:
                    31:19:66:4f:a4:3d:93:b3:c6:cc:27:af:e9:80:aa:
                    4e:08:13:f3:a6:72:f3:f4:d8:5d:27:47:5e:f8:ec:
                    17:9e:e9:06:c9:24:80:c6:4e:6f:5c:bb:db:be:d4:
                    7c:a7:3a:b2:8f:c2:ff:84:e8:8c:a4:6e:1e:b1:18:
                    6c:60:29:9c:70:2d:4a:73:cc:12:2e:e3:71:f6:1c:
                    40:9d:fe:a0:9c:72:39:e2:70:90:97:40:1f:92:f8:
                    a3:25:db:0c:30:ba:62:4f:51:e6:69:e4:70:ad:7f:
                    0b:36:12:8f:54:1d:e1:d8:66:34:ac:d2:2e:7e:9d:
                    2c:9e:3c:a3:82:74:73:ae:dd:6b:63:5c:5a:1f:f8:
                    9e:0b:e1:a5:f8:00:71:75:29:23:1d:f4:ce:d4:9f:
                    ef:35:34:b5:3d:68:7b:47:aa:5a:e4:c1:87:99:85:
                    51:32:85:a8:67:8a:37:9d:15:7f:c7:63:58:d7:d5:
                    2c:df:46:1b:d5:01:24:22:af:d0:67:be:5e:e7:65:
                    94:33:09:b8:62:cc:9f:7e:dd:2f:4e:2c:73:2e:d3:
                    7d:26:39:f9:18:a9:86:55:32:71:c7:7a:70:6d:af:
                    5b:8e:02:ff:37:6c:3b:20:b2:3f:39:5d:f5:53:95:
                    6c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:C8:D1:41:73:DA:A6:D5:97:70:11:46:D4:BF:DF:61:10:B7:32:A5
            X509v3 Authority Key Identifier:
                keyid:BF:3F:BC:0D:A9:6E:2E:51:3A:AA:58:81:2C:69:4B:CD:07:B8:DD:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7AC5/A3EB5C00C0D511EA908C0178C4F9AE02/vz-8DaluLlE6qliBLGlLzQe43Xc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vz-8DaluLlE6qliBLGlLzQe43Xc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7AC5/A3EB5C00C0D511EA908C0178C4F9AE02/vz-8DaluLlE6qliBLGlLzQe43Xc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:e1:27:62:a7:9e:5a:4e:c3:ea:cf:05:75:f7:17:f7:a1:96:
         0f:c7:ef:c8:4b:21:22:a5:e7:11:00:4b:2f:71:30:34:06:ff:
         b5:83:ed:80:51:c0:a0:8a:b1:fd:90:5d:a3:2a:12:86:29:77:
         10:05:e4:7d:84:f2:ac:3b:ba:e5:78:df:f4:35:ad:18:b9:42:
         6c:54:35:bc:d9:0e:f4:c8:a6:0c:b3:cb:4e:b6:4f:ef:8a:64:
         c1:29:b4:17:2a:16:fe:46:dc:93:7d:ea:c0:11:82:03:e1:7d:
         c7:bc:23:df:ab:fd:52:b3:3e:1d:91:78:54:b2:39:9b:f7:2d:
         1d:60:30:ac:03:af:4b:52:fd:6f:6e:20:a9:d1:90:12:b0:50:
         be:1f:07:3f:a8:14:27:e6:a3:30:23:90:63:1a:92:51:f8:2e:
         0f:50:35:d1:3b:af:0e:47:1e:28:70:35:62:0d:00:3f:d9:72:
         1e:6b:37:24:c2:3a:11:5c:4d:77:d9:96:d2:5e:87:e1:e3:45:
         b4:97:36:6a:6c:5a:ba:00:2a:b6:a4:3d:c6:f9:81:76:f0:74:
         4d:d4:57:35:6a:81:b2:88:5d:ca:5c:94:ba:bc:76:3e:62:9f:
         26:6b:72:0f:36:6c:0a:96:50:df:b4:fc:20:c5:43:cd:0c:db:
         76:86:6a:7e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzdBQzUxMTAvBgNVBAUTKEJGM0ZCQzBEQTk2RTJFNTEzQUFBNTg4MTJDNjk0QkNE
MDdCOERENzcwHhcNMjYwMzAyMDA1NzQ2WhcNMjYwMzA5MDA1NzQ2WjAYMRYwFAYD
VQQDEw02OWE0ZTA4Yi05ZGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmj2hXJUWVimWE3jeea4xGWZPpD2Ts8bMJ6/pgKpOCBPzpnLz9NhdJ0de+OwX
nukGySSAxk5vXLvbvtR8pzqyj8L/hOiMpG4esRhsYCmccC1Kc8wSLuNx9hxAnf6g
nHI54nCQl0AfkvijJdsMMLpiT1HmaeRwrX8LNhKPVB3h2GY0rNIufp0snjyjgnRz
rt1rY1xaH/ieC+Gl+ABxdSkjHfTO1J/vNTS1PWh7R6pa5MGHmYVRMoWoZ4o3nRV/
x2NY19Us30Yb1QEkIq/QZ75e52WUMwm4Ysyfft0vTixzLtN9Jjn5GKmGVTJxx3pw
ba9bjgL/N2w7ILI/OV31U5Vs0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJnI0UFz
2qbVl3ARRtS/32EQtzKlMB8GA1UdIwQYMBaAFL8/vA2pbi5ROqpYgSxpS80HuN13
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0FDNS9BM0VCNUMwMEMw
RDUxMUVBOTA4QzAxNzhDNEY5QUUwMi92ei04RGFsdUxsRTZxbGlCTEdsTHpRZTQz
WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Z6LThEYWx1TGxFNnFsaUJMR2xMelFlNDNYYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
N0FDNS9BM0VCNUMwMEMwRDUxMUVBOTA4QzAxNzhDNEY5QUUwMi92ei04RGFsdUxs
RTZxbGlCTEdsTHpRZTQzWGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAl+EnYqeeWk7D6s8FdfcX96GWD8fvyEshIqXnEQBLL3EwNAb/tYPtgFHAoIqx
/ZBdoyoShil3EAXkfYTyrDu65Xjf9DWtGLlCbFQ1vNkO9MimDLPLTrZP74pkwSm0
FyoW/kbck33qwBGCA+F9x7wj36v9UrM+HZF4VLI5m/ctHWAwrAOvS1L9b24gqdGQ
ErBQvh8HP6gUJ+ajMCOQYxqSUfguD1A10TuvDkceKHA1Yg0AP9lyHms3JMI6EVxN
d9mW0l6H4eNFtJc2amxaugAqtqQ9xvmBdvB0TdRXNWqBsohdylyUurx2PmKfJmty
DzZsCpZQ37T8IMVDzQzbdoZqfg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:13:57 2026 by rpki-client