Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/VZ9R7Isljn6QYp2FYuHblWvA_zc.mft
File:                     VZ9R7Isljn6QYp2FYuHblWvA_zc.mft (raw, json)
Hash identifier:          twaeSFsha7zKb7ybybgQMHTKQByCu4bFCi5rX4qvmrk=
Subject key identifier:   09:6B:B2:4F:14:1A:70:6C:0A:70:E4:F7:0A:51:6F:C1:92:00:84:E5
Authority key identifier: 55:9F:51:EC:8B:25:8E:7E:90:62:9D:85:62:E1:DB:95:6B:C0:FF:37
Certificate issuer:       /CN=A916FEAF/serialNumber=559F51EC8B258E7E90629D8562E1DB956BC0FF37
Certificate serial:       0A00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZ9R7Isljn6QYp2FYuHblWvA_zc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/VZ9R7Isljn6QYp2FYuHblWvA_zc.mft
Manifest number:          09F9
Signing time:             Sat 04 Apr 2026 19:38:48 +0000
Manifest this update:     Sat 04 Apr 2026 19:38:48 +0000
Manifest next update:     Sat 11 Apr 2026 19:38:48 +0000
Files and hashes:         1: VZ9R7Isljn6QYp2FYuHblWvA_zc.crl (hash: 8OMkY7jGMgqqO0fO1vAt8yh7tjTbq6YsL3hCoPiGtxU=)
                          2: 8247E286967711EA81018623C4F9AE02.roa (hash: f2/mJ1LxB5o7hViq0t9MkIEroZMeuy9biGGVy/h03I0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/VZ9R7Isljn6QYp2FYuHblWvA_zc.crl
                          rsync://rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/VZ9R7Isljn6QYp2FYuHblWvA_zc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZ9R7Isljn6QYp2FYuHblWvA_zc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 19:38:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2560 (0xa00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916FEAF, serialNumber=559F51EC8B258E7E90629D8562E1DB956BC0FF37
        Validity
            Not Before: Apr  4 19:38:48 2026 GMT
            Not After : Apr 11 19:38:48 2026 GMT
        Subject: CN=69d168c8-cf79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c6:b5:83:c7:d1:28:1d:b4:a7:ec:06:fd:68:
                    1f:41:96:15:e5:24:80:8a:80:a8:41:9f:c3:37:a8:
                    94:40:3d:3b:95:fc:81:bf:9d:99:6f:89:6e:ef:d1:
                    38:92:65:06:7c:3a:42:7b:62:d3:4a:32:82:ef:d1:
                    ca:1d:16:67:83:8c:bd:4b:75:69:6e:46:66:dd:c9:
                    a8:b8:9a:f4:55:7b:1b:74:a4:04:79:2b:b7:63:1a:
                    2d:f7:f2:b0:28:a1:5f:df:22:87:7e:98:83:d1:d5:
                    de:d7:6f:dc:6d:fa:65:a4:fc:e9:aa:dd:8e:f0:46:
                    06:ac:f9:f6:b0:d2:8c:24:dd:c9:b6:bf:ba:61:62:
                    32:55:da:27:fa:66:1b:0d:fc:8f:ee:1d:28:74:a7:
                    5d:71:f5:c4:a4:6a:80:39:03:d7:b7:55:c7:50:de:
                    ac:52:8f:69:14:18:a9:04:5d:3f:98:98:0f:73:6a:
                    fa:36:3c:2d:4e:e3:59:d8:87:da:2f:ca:df:f8:07:
                    31:b0:73:93:b2:4e:0b:78:d4:ce:53:d2:06:30:40:
                    87:23:85:96:0b:40:7a:bb:1c:5a:17:b3:09:57:db:
                    f6:8c:6e:c3:ea:fd:31:a9:6c:7e:bb:c9:47:d7:36:
                    ca:dc:dc:fb:94:fa:fd:7e:b9:f1:75:1f:e1:4d:2e:
                    d5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:6B:B2:4F:14:1A:70:6C:0A:70:E4:F7:0A:51:6F:C1:92:00:84:E5
            X509v3 Authority Key Identifier:
                keyid:55:9F:51:EC:8B:25:8E:7E:90:62:9D:85:62:E1:DB:95:6B:C0:FF:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/VZ9R7Isljn6QYp2FYuHblWvA_zc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZ9R7Isljn6QYp2FYuHblWvA_zc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/VZ9R7Isljn6QYp2FYuHblWvA_zc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:29:82:97:c6:45:90:76:9e:31:16:7d:27:e3:df:fa:29:e2:
         23:72:27:9e:31:ac:99:2f:36:51:78:3b:ce:59:bc:35:b9:02:
         8d:7e:5c:88:60:a1:97:ee:e6:b3:55:c3:40:4f:3e:07:2b:b4:
         64:81:a0:1e:2c:8c:77:3a:b7:30:2f:a6:06:e5:24:4c:a0:a0:
         ae:f7:d6:9c:dd:85:d1:2b:47:ca:67:cb:05:63:2d:e6:6e:b1:
         87:76:48:a2:d0:ae:a8:6f:f4:4c:87:f0:76:12:59:71:b2:b4:
         f6:5d:9c:60:4e:fc:cb:b4:50:57:bb:cf:25:a6:45:55:85:3d:
         65:4c:22:87:b1:82:18:18:1f:d0:c6:9e:f7:9b:c5:8c:69:44:
         f7:bf:10:03:48:58:36:5d:73:86:c0:b4:dc:a1:8a:76:97:cb:
         dc:61:ed:8a:82:12:56:e3:8f:6f:58:28:b2:cb:e0:79:98:d8:
         8c:dc:52:f5:6f:6f:10:2d:6d:16:bb:eb:65:c2:40:a3:8b:9a:
         84:a6:ab:47:65:c5:29:b4:00:3e:54:fc:c5:75:67:46:57:30:
         b3:0b:03:40:17:97:6f:33:e4:a6:61:d0:dd:dc:f4:09:3a:8e:
         5d:30:67:fc:aa:28:15:61:b2:ad:95:20:01:0c:52:5c:b8:36:
         ba:56:1f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:57:56 2026 by rpki-client