Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.mft
File:                     VR9YpoyP5pILLvCsbpCi0_NYinY.mft (raw, json)
Hash identifier:          XGuZMbiNdza0JD3rJWngwOqGi3I585PoMEVGBpc8uiI=
Subject key identifier:   1B:30:11:ED:E6:7B:98:AF:53:DA:9D:13:E5:73:D4:43:6F:0E:59:22
Authority key identifier: 55:1F:58:A6:8C:8F:E6:92:0B:2E:F0:AC:6E:90:A2:D3:F3:58:8A:76
Certificate issuer:       /CN=A9160856/serialNumber=551F58A68C8FE6920B2EF0AC6E90A2D3F3588A76
Certificate serial:       10EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9YpoyP5pILLvCsbpCi0_NYinY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.mft
Manifest number:          10C1
Signing time:             Sat 04 Apr 2026 17:14:48 +0000
Manifest this update:     Sat 04 Apr 2026 17:14:48 +0000
Manifest next update:     Sat 11 Apr 2026 17:14:48 +0000
Files and hashes:         1: VR9YpoyP5pILLvCsbpCi0_NYinY.crl (hash: BxqzFxxNqb9NiXr3ewc3Mf638vSbVUeNtyFYIFmIch4=)
                          2: 5318EFAC6BAE11EBA5B87E56C4F9AE02.roa (hash: MC3ya+Rx2sZxtMRFWTDYtgp6jSYXay2r0LuhyZ274v0=)
                          3: E973A832656511EC85A7CA2CC4F9AE02.roa (hash: IumZ0R6VefcLEzWyHuLFXez1Y/5ve09Aewbd5wOI538=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.crl
                          rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9YpoyP5pILLvCsbpCi0_NYinY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 17:14:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4331 (0x10eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160856, serialNumber=551F58A68C8FE6920B2EF0AC6E90A2D3F3588A76
        Validity
            Not Before: Apr  4 17:14:48 2026 GMT
            Not After : Apr 11 17:14:48 2026 GMT
        Subject: CN=69d14708-2619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:10:94:00:38:fb:78:88:8a:db:e6:ff:e1:5f:
                    4a:d6:8b:31:89:d3:7f:73:ec:b3:14:d3:08:c3:98:
                    c9:37:68:20:fb:89:10:4d:d9:63:2b:f8:16:b5:39:
                    dc:68:d0:d0:19:9e:9b:a5:a5:14:b8:b7:3f:ed:ee:
                    b4:2e:e9:93:f6:cd:1c:96:d1:7d:6a:ba:91:e0:37:
                    80:48:28:fc:02:94:c0:e8:f1:6f:5d:1a:38:7b:b5:
                    ac:40:0d:3a:ea:3a:fc:2e:98:d8:ff:ed:61:0a:e6:
                    08:1e:6d:45:a5:fa:b3:98:5e:90:67:19:93:99:da:
                    36:98:72:11:5e:b4:8a:0a:e0:59:a4:b7:99:2f:34:
                    78:74:23:1b:38:59:3d:08:a5:30:5b:88:41:a3:24:
                    ce:51:38:04:ff:df:a2:6e:aa:bb:5a:dd:97:5a:31:
                    eb:26:a1:63:33:ea:f2:e5:00:3c:e2:30:5a:cc:f2:
                    bf:c8:9c:f2:ea:b9:dc:0e:3e:b6:66:12:13:66:4e:
                    d2:0e:51:8a:7b:03:67:a2:0e:7b:6f:f0:ee:fb:fa:
                    ec:ca:bc:a8:84:6d:8c:6f:dc:de:3d:6d:39:28:cd:
                    e0:28:c2:61:06:1a:db:05:60:c5:4a:73:7f:d7:ba:
                    83:86:08:f7:ca:a2:df:b6:ba:b8:4b:d3:34:e2:97:
                    24:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:30:11:ED:E6:7B:98:AF:53:DA:9D:13:E5:73:D4:43:6F:0E:59:22
            X509v3 Authority Key Identifier:
                keyid:55:1F:58:A6:8C:8F:E6:92:0B:2E:F0:AC:6E:90:A2:D3:F3:58:8A:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9YpoyP5pILLvCsbpCi0_NYinY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:97:d2:1c:d5:3a:f8:c6:b0:d8:fd:b3:d6:61:4d:78:98:a8:
         9f:5a:9a:33:6b:73:9d:46:7f:cc:8b:68:5c:44:66:ae:b0:a4:
         3d:56:52:3e:d1:27:c4:e6:cb:b2:8c:1b:3f:41:8b:6e:bb:a4:
         b6:c7:7d:8e:2b:37:e4:14:4e:78:20:83:3f:95:73:90:b3:fa:
         88:37:f2:b2:39:61:8a:aa:2a:27:1f:0b:8d:73:2c:99:cf:19:
         e9:24:59:6d:c0:31:8d:b0:84:53:50:75:6c:39:7f:50:03:6b:
         76:9f:50:cc:19:bc:97:38:9b:b4:68:56:de:7a:d1:30:06:40:
         e5:63:47:e5:f5:13:c3:f8:04:b5:1c:86:ff:65:97:93:e8:b3:
         76:75:70:ee:75:82:b6:2f:3c:11:fd:5a:c6:1d:61:6f:4d:a3:
         cb:be:04:e8:37:c5:5e:87:72:6f:a4:ba:e2:36:cf:f8:d9:6a:
         02:93:99:0b:f8:b5:be:71:df:0b:8d:37:43:df:1a:dc:44:f7:
         01:99:96:19:7b:0f:77:13:c3:b9:85:8b:e8:0a:4c:1d:21:4c:
         cf:7f:dd:51:89:4b:6a:18:60:96:ad:be:a3:b3:48:bc:9d:db:
         92:37:5e:af:14:27:b5:d0:45:7a:50:57:7d:74:64:18:2d:85:
         80:1a:bf:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:00:08 2026 by rpki-client