Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft
File:                     VzWraqwyeVRCT5_oyoUzQpnde8I.mft (raw, json)
Hash identifier:          q7IxgY4F0rw3F1UxBpwR26GnRZZuAwqbnfaxFHRDxiY=
Subject key identifier:   37:D8:8D:A1:B3:AC:D0:C8:9B:3C:55:F2:42:DD:48:58:2F:2A:20:32
Authority key identifier: 57:35:AB:6A:AC:32:79:54:42:4F:9F:E8:CA:85:33:42:99:DD:7B:C2
Certificate issuer:       /CN=A91CE392/serialNumber=5735AB6AAC327954424F9FE8CA85334299DD7BC2
Certificate serial:       0FEE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft
Manifest number:          0FE0
Signing time:             Mon 02 Mar 2026 17:28:37 +0000
Manifest this update:     Mon 02 Mar 2026 17:28:36 +0000
Manifest next update:     Mon 09 Mar 2026 17:28:36 +0000
Files and hashes:         1: VzWraqwyeVRCT5_oyoUzQpnde8I.crl (hash: 5Z4Kd8gYDcfIxTTZSezZrveB/cLJHFykU/pKMLc0mV4=)
                          2: F27C04B8779E11E997C0204AC4F9AE02.roa (hash: gcXkSl5BDm7BPmptXZao6xrfNU8xKrBthGWtRyIpA9Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.crl
                          rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 17:28:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4078 (0xfee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE392, serialNumber=5735AB6AAC327954424F9FE8CA85334299DD7BC2
        Validity
            Not Before: Mar  2 17:28:36 2026 GMT
            Not After : Mar  9 17:28:36 2026 GMT
        Subject: CN=69a5c8c5-e1cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:7a:04:30:75:87:e2:8b:59:fd:18:f0:53:c4:
                    9e:e7:b3:4f:c2:68:85:40:f7:7e:c7:b1:6a:b0:ba:
                    9e:94:a7:ed:1f:f9:92:9e:33:3c:a9:c6:ae:e3:c1:
                    18:c0:ba:f9:89:f7:7f:fc:a3:85:e1:6c:a8:e6:f3:
                    89:4b:bd:20:8f:17:7b:39:e2:9b:b8:3b:83:4e:63:
                    80:77:32:40:bb:c7:87:95:6b:21:30:3b:8b:9e:99:
                    56:fd:a2:e4:2f:46:85:ca:c2:40:c5:a1:c5:f8:60:
                    83:f0:7b:43:38:54:35:1b:ae:9c:c4:43:09:5f:3f:
                    ff:ef:8a:d2:0f:ae:0a:00:dc:14:12:35:a0:b5:12:
                    d1:20:18:c9:6d:dc:54:88:8a:9c:f3:61:56:7f:68:
                    54:c2:03:d8:d2:4f:31:ca:1b:3f:70:d7:c6:b8:ed:
                    1b:ea:a0:27:48:e6:d6:9a:11:59:26:5f:a6:3a:ea:
                    2f:24:d7:cf:93:ab:bf:33:75:4e:51:96:81:70:c9:
                    58:d3:cb:85:66:ea:26:02:45:c1:c9:4b:93:34:12:
                    2f:00:e3:d9:8e:64:07:75:41:b4:67:fb:71:26:c4:
                    ac:0c:2e:3a:d7:30:1e:b6:5b:c0:8d:96:6c:83:4e:
                    79:d6:9d:f9:42:06:55:cb:83:d7:bf:41:0d:71:7b:
                    e8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:D8:8D:A1:B3:AC:D0:C8:9B:3C:55:F2:42:DD:48:58:2F:2A:20:32
            X509v3 Authority Key Identifier:
                keyid:57:35:AB:6A:AC:32:79:54:42:4F:9F:E8:CA:85:33:42:99:DD:7B:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:68:56:70:9d:60:fe:9a:64:f3:be:f9:b6:be:b4:16:42:b6:
         03:eb:4b:7a:8c:54:9d:dd:8c:8d:fe:9e:5a:a0:18:86:86:0b:
         13:f5:8c:4d:49:43:ee:dc:bf:9b:08:dd:36:cf:ff:9e:80:8d:
         6b:ac:a4:f5:37:f1:18:33:a0:6f:96:75:ca:b7:3d:dc:6b:a4:
         a2:db:34:fb:03:05:18:2d:73:f4:a0:6f:ac:d2:90:51:37:00:
         66:60:89:b6:ec:9f:1d:56:88:b9:c8:de:85:34:52:c3:89:f1:
         80:df:df:33:8a:f7:8b:bd:8b:93:0b:6f:ce:4e:b8:12:52:a5:
         96:c2:09:1a:da:b8:5c:7b:0d:49:89:47:71:f0:9c:af:9c:82:
         38:c4:fc:b7:21:c8:b5:83:c5:00:47:6b:89:36:93:ea:74:90:
         ca:05:8c:05:a9:44:5c:f1:dd:0f:e7:22:98:9e:d5:24:00:eb:
         49:33:3c:72:7c:40:59:5b:f0:a4:58:e5:aa:1d:74:4a:a4:1b:
         cc:f9:e3:fa:f8:75:12:d6:4e:7a:d0:cc:4b:30:cd:0a:d3:e6:
         93:ce:5c:85:77:5a:68:40:bc:bb:81:00:e9:32:cd:bd:34:87:
         02:cb:dd:6e:b2:ca:0a:e5:a4:2e:02:73:48:c3:3d:79:fc:24:
         90:0b:20:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 04:07:33 2026 by rpki-client