Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.mft
File:                     VJJGIQXOsFLbqdrou2NfBfd3Fh0.mft (raw, json)
Hash identifier:          otEfEkdFzrTjClHWxmIFt77w2YJFYHuoU403g7TdWp8=
Subject key identifier:   09:F2:11:C3:9D:84:3F:83:4B:12:F7:BE:9B:E2:6E:CD:C4:88:FB:43
Authority key identifier: 54:92:46:21:05:CE:B0:52:DB:A9:DA:E8:BB:63:5F:05:F7:77:16:1D
Certificate issuer:       /CN=A912F62D/serialNumber=5492462105CEB052DBA9DAE8BB635F05F777161D
Certificate serial:       DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJJGIQXOsFLbqdrou2NfBfd3Fh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.mft
Manifest number:          D8
Signing time:             Sun 05 Apr 2026 06:03:20 +0000
Manifest this update:     Sun 05 Apr 2026 06:03:19 +0000
Manifest next update:     Sun 12 Apr 2026 06:03:19 +0000
Files and hashes:         1: VJJGIQXOsFLbqdrou2NfBfd3Fh0.crl (hash: ckBjDvUL3vdAgw/FPokN0KkqONyiyieYEJQPAUn7doI=)
                          2: 6DAFB1EAEA7E11EF93A91726C4F9AE02.roa (hash: bvcgffhWxjS/n7QVMktlVU8p36FL7wCiksDPf357oO4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.crl
                          rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJJGIQXOsFLbqdrou2NfBfd3Fh0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 06:03:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 220 (0xdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F62D, serialNumber=5492462105CEB052DBA9DAE8BB635F05F777161D
        Validity
            Not Before: Apr  5 06:03:19 2026 GMT
            Not After : Apr 12 06:03:19 2026 GMT
        Subject: CN=69d1fb27-e88d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e3:1c:b2:b3:d7:70:73:de:09:10:19:0d:37:
                    85:f9:67:8a:a7:74:f4:ce:55:a7:6c:51:df:87:32:
                    e2:04:b7:b9:7c:d8:30:42:5a:b2:8c:10:75:b0:47:
                    27:20:bd:94:3a:78:f2:77:01:17:26:44:46:70:0e:
                    54:5b:39:f6:46:4c:44:d7:9c:15:ca:f7:e4:83:34:
                    e4:6f:43:ce:52:82:14:34:2f:58:15:56:fb:3a:31:
                    bb:4c:60:72:cf:47:7a:e0:c9:40:40:b4:ef:72:3d:
                    b5:97:bb:14:f7:2b:94:8d:bc:21:3e:2c:26:84:d0:
                    29:6b:49:ff:18:be:23:61:d5:2e:15:62:e4:75:b8:
                    4e:2a:4f:47:44:7d:5b:b4:59:20:de:7f:3e:75:ff:
                    e0:b6:4e:4a:2b:4d:33:35:57:61:15:e2:85:10:ca:
                    f3:32:e1:c8:b0:17:1d:63:2e:6d:d8:86:6c:69:e3:
                    00:23:75:56:51:73:c3:86:b4:ca:32:13:d8:e5:a7:
                    36:b5:4f:c6:d7:fb:90:ff:06:af:63:1c:59:54:fb:
                    14:6e:88:f0:0d:a1:e4:f1:23:ec:04:e4:58:f4:c4:
                    bb:ba:77:e2:ca:8d:68:b2:27:c1:d3:d6:df:eb:e6:
                    0a:b6:be:47:a7:a7:fa:ce:25:95:27:e3:f3:04:9d:
                    f1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:F2:11:C3:9D:84:3F:83:4B:12:F7:BE:9B:E2:6E:CD:C4:88:FB:43
            X509v3 Authority Key Identifier:
                keyid:54:92:46:21:05:CE:B0:52:DB:A9:DA:E8:BB:63:5F:05:F7:77:16:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJJGIQXOsFLbqdrou2NfBfd3Fh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:49:00:18:0f:88:39:56:72:c7:08:ba:a3:03:21:2d:fa:c2:
         98:28:6f:5c:f2:f6:f5:68:c2:99:16:24:be:c0:bc:91:0a:3e:
         93:a9:d1:79:c3:70:98:7c:59:e7:86:ad:e5:95:76:30:07:9e:
         f8:a9:5c:2a:f5:aa:30:ef:fa:cc:a7:e5:8b:e9:7d:75:0b:8d:
         12:28:5d:22:77:55:b1:01:cb:9a:58:f7:93:9d:95:24:e6:87:
         99:0e:a5:76:2b:df:c0:c3:65:9f:bb:5a:6b:27:1c:2b:bc:3f:
         d0:b6:ad:01:05:cc:50:42:1d:72:be:3a:54:ee:59:6f:29:0b:
         da:79:06:93:4e:12:19:6b:f2:62:ee:86:10:6c:74:2f:18:a7:
         fc:21:5a:37:cf:07:9c:a0:00:56:4c:3b:d3:f4:cf:df:28:6b:
         4e:91:55:b4:0b:e3:34:46:ca:07:1b:61:50:f5:a8:c5:6c:68:
         05:7e:c9:e1:76:ce:a7:8a:06:9d:97:92:fd:4e:57:a1:06:7f:
         e1:30:8a:b9:c3:f5:38:dc:01:9c:3d:cd:76:f4:a8:8f:ea:e2:
         96:ff:c8:21:e2:0e:8d:d7:44:62:7f:c1:2d:e8:db:1c:8a:ab:
         5b:ca:53:aa:df:5c:f8:f4:d4:f3:1b:62:34:68:8b:03:88:2c:
         b4:f8:0a:1e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkY2MkQxMTAvBgNVBAUTKDU0OTI0NjIxMDVDRUIwNTJEQkE5REFFOEJCNjM1RjA1
Rjc3NzE2MUQwHhcNMjYwNDA1MDYwMzE5WhcNMjYwNDEyMDYwMzE5WjAYMRYwFAYD
VQQDEw02OWQxZmIyNy1lODhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApeMcsrPXcHPeCRAZDTeF+WeKp3T0zlWnbFHfhzLiBLe5fNgwQlqyjBB1sEcn
IL2UOnjydwEXJkRGcA5UWzn2RkxE15wVyvfkgzTkb0POUoIUNC9YFVb7OjG7TGBy
z0d64MlAQLTvcj21l7sU9yuUjbwhPiwmhNApa0n/GL4jYdUuFWLkdbhOKk9HRH1b
tFkg3n8+df/gtk5KK00zNVdhFeKFEMrzMuHIsBcdYy5t2IZsaeMAI3VWUXPDhrTK
MhPY5ac2tU/G1/uQ/wavYxxZVPsUbojwDaHk8SPsBORY9MS7unfiyo1osifB09bf
6+YKtr5Hp6f6ziWVJ+PzBJ3xPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAnyEcOd
hD+DSxL3vpvibs3EiPtDMB8GA1UdIwQYMBaAFFSSRiEFzrBS26na6LtjXwX3dxYd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjYyRC8yREE1N0MzQ0VB
NzAxMUVGODE1NEMzNkJDNEY5QUUwMi9WSkpHSVFYT3NGTGJxZHJvdTJOZkJmZDNG
aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZKSkdJUVhPc0ZMYnFkcm91Mk5mQmZkM0ZoMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RjYyRC8yREE1N0MzQ0VBNzAxMUVGODE1NEMzNkJDNEY5QUUwMi9WSkpHSVFYT3NG
TGJxZHJvdTJOZkJmZDNGaDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWkkAGA+IOVZyxwi6owMhLfrCmChvXPL29WjCmRYkvsC8kQo+k6nRecNwmHxZ
54at5ZV2MAee+KlcKvWqMO/6zKfli+l9dQuNEihdIndVsQHLmlj3k52VJOaHmQ6l
divfwMNln7taayccK7w/0LatAQXMUEIdcr46VO5ZbykL2nkGk04SGWvyYu6GEGx0
Lxin/CFaN88HnKAAVkw70/TP3yhrTpFVtAvjNEbKBxthUPWoxWxoBX7J4XbOp4oG
nZeS/U5XoQZ/4TCKucP1ONwBnD3NdvSoj+rilv/IIeIOjddEYn/BLejbHIqrW8pT
qt9c+PTU8xtiNGiLA4gstPgKHg==
-----END CERTIFICATE-----
Generated at Sun Apr 5 19:40:15 2026 by rpki-client