Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.mft
File:                     Vyfu6NouLMefq6Da0ZyISCvRWdw.mft (raw, json)
Hash identifier:          KvT7PSb8eiZWJIA4p2QDZcUMFhTbz+O2YdoNb/1LvmU=
Subject key identifier:   7D:33:30:45:8A:B6:DA:0B:8B:33:F7:4B:36:54:92:B8:1F:10:B4:C5
Authority key identifier: 57:27:EE:E8:DA:2E:2C:C7:9F:AB:A0:DA:D1:9C:88:48:2B:D1:59:DC
Certificate issuer:       /CN=A9125C3D/serialNumber=5727EEE8DA2E2CC79FABA0DAD19C88482BD159DC
Certificate serial:       042E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vyfu6NouLMefq6Da0ZyISCvRWdw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.mft
Manifest number:          0427
Signing time:             Sun 05 Apr 2026 00:09:21 +0000
Manifest this update:     Sun 05 Apr 2026 00:09:20 +0000
Manifest next update:     Sun 12 Apr 2026 00:09:20 +0000
Files and hashes:         1: Vyfu6NouLMefq6Da0ZyISCvRWdw.crl (hash: aDhXY47qhoW3EV1PLfAEFpJ5lHeXZ5jan8EiuPxXv0c=)
                          2: D66E75F0A5CF11EC94CFB734C4F9AE02.roa (hash: RbE+f7qfAHX4BzABpAaum6gSbLxyMymRSWSxEfeXg6A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.crl
                          rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vyfu6NouLMefq6Da0ZyISCvRWdw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 00:09:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1070 (0x42e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125C3D, serialNumber=5727EEE8DA2E2CC79FABA0DAD19C88482BD159DC
        Validity
            Not Before: Apr  5 00:09:20 2026 GMT
            Not After : Apr 12 00:09:20 2026 GMT
        Subject: CN=69d1a831-bbcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:42:bd:d0:c7:6b:60:7b:12:ad:f0:77:07:d5:
                    b1:25:ab:4f:fd:5b:cb:30:27:17:fa:11:55:fb:22:
                    3e:86:83:da:0b:4c:0b:da:48:d9:dc:67:64:76:e2:
                    c7:a8:84:fc:b6:25:de:11:69:ac:22:4f:61:9c:e0:
                    bc:b3:a1:5b:45:e0:8d:20:8e:9b:e2:4a:08:bd:7f:
                    cf:45:1d:01:8d:23:54:06:04:21:a6:35:15:77:45:
                    c8:4a:7f:e2:ff:0c:52:f6:a6:93:04:7a:74:54:2a:
                    e8:27:1e:33:aa:f6:79:1f:3a:0d:12:ed:78:de:29:
                    aa:89:69:47:ba:94:ee:ac:8d:19:05:3d:2e:2c:12:
                    53:9b:fe:ce:05:2a:c5:b6:6e:ea:3c:7e:5b:7d:08:
                    ad:94:1f:5f:71:f1:4e:fc:8d:64:b4:66:dd:77:89:
                    fe:c5:15:52:e8:f7:26:1e:97:d4:21:e3:ec:aa:d8:
                    8a:62:b9:c3:99:af:d1:b0:5d:bb:84:e4:b1:65:bb:
                    d9:be:47:93:8a:44:60:f7:8e:55:e9:40:28:36:35:
                    96:0b:5d:dc:69:d6:a0:34:80:33:65:0f:ce:51:59:
                    f4:8a:c2:4d:3b:8e:12:42:d4:d9:1a:5a:5b:65:38:
                    40:fe:97:bb:f1:67:61:28:eb:29:87:a9:f1:cd:75:
                    85:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:33:30:45:8A:B6:DA:0B:8B:33:F7:4B:36:54:92:B8:1F:10:B4:C5
            X509v3 Authority Key Identifier:
                keyid:57:27:EE:E8:DA:2E:2C:C7:9F:AB:A0:DA:D1:9C:88:48:2B:D1:59:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vyfu6NouLMefq6Da0ZyISCvRWdw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:32:00:52:54:f7:9e:dd:4f:82:73:c3:93:25:ef:15:46:0e:
         f2:93:aa:43:45:32:8c:c2:88:bf:fa:3c:83:dc:98:ff:91:1b:
         94:81:3c:a2:e4:ad:ba:18:a0:87:ab:c8:3b:f1:1c:da:80:83:
         fc:33:e1:cc:d9:56:cc:75:5e:39:b8:93:cb:42:9c:db:7e:11:
         c8:69:17:7c:48:53:d1:5c:17:af:dc:9b:07:b5:2c:70:f7:f7:
         c9:c0:33:08:58:bb:ac:5d:5d:ea:2a:5c:41:90:e8:9d:43:d3:
         ee:b6:45:a1:64:3b:81:b0:7b:98:48:ab:60:82:69:1c:17:af:
         c2:29:96:bc:e4:c6:5a:10:f7:41:aa:31:f7:1d:28:1b:9e:03:
         f1:c9:84:ce:8e:1f:8b:a3:18:ec:9a:e2:66:a2:05:08:4f:89:
         d2:3f:91:9d:69:3a:e5:50:1b:52:75:e4:b4:80:3f:5d:e8:56:
         3a:44:29:ff:9a:24:26:6f:53:25:9d:e0:f4:6b:bd:f1:6e:89:
         0f:0e:15:90:fd:54:2a:64:77:ff:51:52:20:54:fb:af:7a:2b:
         2a:34:9c:0d:44:eb:75:19:f3:e7:c0:e3:fa:9b:e8:9b:75:9f:
         1a:3c:ad:43:06:93:f4:4d:b9:39:14:8b:16:57:8b:09:a4:66:
         b2:58:8d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:38:38 2026 by rpki-client