Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.mft
File:                     vphUuYSZNmQ-DUAVo7N7XkSErVo.mft (raw, json)
Hash identifier:          7KbnE1ChWKvNL+4116vti5AeG5mPVYQm3VKbrFsODfg=
Subject key identifier:   9A:FB:91:0B:46:C8:58:DA:4D:27:E1:34:48:B1:44:C9:73:E3:BA:2A
Authority key identifier: BE:98:54:B9:84:99:36:64:3E:0D:40:15:A3:B3:7B:5E:44:84:AD:5A
Certificate issuer:       /CN=A9123D19/serialNumber=BE9854B9849936643E0D4015A3B37B5E4484AD5A
Certificate serial:       2A72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vphUuYSZNmQ-DUAVo7N7XkSErVo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.mft
Manifest number:          2A5B
Signing time:             Sat 04 Apr 2026 15:32:01 +0000
Manifest this update:     Sat 04 Apr 2026 15:32:01 +0000
Manifest next update:     Sat 11 Apr 2026 15:32:01 +0000
Files and hashes:         1: vphUuYSZNmQ-DUAVo7N7XkSErVo.crl (hash: b3GQzOC7Iu9eIPWiLdATv5l2hvHbC7YJoDTZg32yyPM=)
                          2: 73E0191A967811EA92E45A27C4F9AE02.roa (hash: mpjVMZqgsEDLte7km/wxxa0aijeYSHyV/D4q8GjzrZc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.crl
                          rsync://rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vphUuYSZNmQ-DUAVo7N7XkSErVo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 15:32:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10866 (0x2a72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123D19, serialNumber=BE9854B9849936643E0D4015A3B37B5E4484AD5A
        Validity
            Not Before: Apr  4 15:32:01 2026 GMT
            Not After : Apr 11 15:32:01 2026 GMT
        Subject: CN=69d12ef1-f79f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:0f:4e:c2:0b:94:1f:69:c9:22:1f:7a:48:8e:
                    ab:c7:42:89:4f:55:fc:79:42:db:1e:58:65:12:ef:
                    07:76:7e:33:c5:3b:a2:fb:96:00:6d:24:78:7f:9d:
                    de:c3:98:45:15:60:37:c2:5b:80:ec:94:61:38:d2:
                    74:cc:e5:b5:6c:eb:81:01:7c:6b:ab:f8:c2:df:98:
                    d9:b7:67:ea:42:b4:28:83:49:00:99:37:54:65:e5:
                    ca:82:a0:a0:a4:50:0f:43:c9:39:68:96:79:71:46:
                    b7:e4:d7:4f:16:07:c4:93:c8:22:84:e5:fc:df:04:
                    5a:a2:68:fd:23:13:1e:b0:38:4f:82:dc:4f:b6:a4:
                    4b:29:18:0f:3c:e9:f3:72:67:62:7e:ed:8d:2f:b1:
                    d3:2e:9a:08:0b:b5:6b:f5:ee:87:97:3e:15:55:4f:
                    fc:25:db:c2:0e:0d:12:d2:af:db:56:30:28:ea:f2:
                    cf:c7:39:33:f6:1a:5c:b0:5e:c1:82:6f:4c:4a:7c:
                    fd:85:95:d6:4d:90:c9:d3:57:ee:a2:6d:24:e8:f5:
                    35:c5:f3:7e:a3:41:d5:fd:80:0c:91:b1:61:48:e5:
                    a2:79:5f:ee:27:49:d3:85:06:c5:f7:7d:60:2e:39:
                    c2:7d:40:da:b7:be:25:b6:1f:ae:d3:27:3c:eb:e1:
                    ca:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:FB:91:0B:46:C8:58:DA:4D:27:E1:34:48:B1:44:C9:73:E3:BA:2A
            X509v3 Authority Key Identifier:
                keyid:BE:98:54:B9:84:99:36:64:3E:0D:40:15:A3:B3:7B:5E:44:84:AD:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vphUuYSZNmQ-DUAVo7N7XkSErVo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:d2:1b:ec:9c:d8:8e:f6:4f:ee:12:98:4b:e9:60:8b:8d:ad:
         4e:e6:66:58:77:55:e0:94:0b:c2:d7:f4:7a:52:03:ad:c8:91:
         4d:0a:15:25:6c:49:49:56:11:33:78:36:26:bc:62:c5:0e:84:
         b7:9c:5c:1d:ad:bc:bd:50:fa:de:ea:60:8a:43:84:59:9b:bc:
         a2:d9:71:88:f9:d4:2d:bb:11:65:b5:54:d7:fe:c4:04:61:60:
         53:8f:13:7b:3e:5f:b0:46:20:15:d4:05:ec:bc:49:40:fa:ca:
         68:1e:18:63:a0:8e:65:1d:5b:db:5c:b0:ae:40:b3:7f:0d:69:
         8e:53:94:40:30:53:88:cd:0f:e2:29:10:84:07:12:14:56:a1:
         6c:d3:c8:81:c5:e1:70:0b:36:1a:6b:ff:44:b6:94:cb:bd:f8:
         ca:64:4b:cb:82:f3:85:a2:ce:b1:e1:6a:73:37:8d:7f:a9:28:
         a2:d4:c3:2e:2f:20:fe:b6:51:67:83:e1:41:26:46:d0:e8:6e:
         1c:3f:3b:3d:4e:c3:bd:7e:6b:d2:2c:e3:66:c5:eb:2d:49:2d:
         5b:fc:45:de:5d:b0:a6:19:f9:a5:cf:7f:25:af:45:b6:2c:a3:
         ce:45:82:08:9e:d4:ee:5b:6b:0c:cd:75:34:ad:e4:30:46:26:
         82:fb:7c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:39:43 2026 by rpki-client