Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft
File:                     vRTPGp8I9oE3_oEWzXdq29sv77Q.mft (raw, json)
Hash identifier:          CYsUe9B1UtJMIeyCMuMEu04o1VdiJnsJkFlJhHZXz8g=
Subject key identifier:   70:EF:2B:C6:BA:12:29:5F:F4:7C:A0:F2:25:54:3A:70:42:DB:AA:42
Authority key identifier: BD:14:CF:1A:9F:08:F6:81:37:FE:81:16:CD:77:6A:DB:DB:2F:EF:B4
Certificate issuer:       /CN=A9119A40/serialNumber=BD14CF1A9F08F68137FE8116CD776ADBDB2FEFB4
Certificate serial:       047C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRTPGp8I9oE3_oEWzXdq29sv77Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft
Manifest number:          116A
Signing time:             Mon 30 Mar 2026 18:08:51 +0000
Manifest this update:     Mon 30 Mar 2026 18:08:50 +0000
Manifest next update:     Mon 06 Apr 2026 18:08:50 +0000
Files and hashes:         1: vRTPGp8I9oE3_oEWzXdq29sv77Q.crl (hash: bdSfn4Y6pqjBzjhg+kL0sR4SP+dNq37at264a56ATYE=)
                          2: D5DBA6BC63ED11ED851C647DC4F9AE02.roa (hash: +a9x011lIrelYT5vohtPE5YuGG+ywFHENvyw6lCFvco=)
                          3: 5277F6368D2411EC816B4C70C4F9AE02.roa (hash: mDjCsaxH5mUMKVvZsFwN09lkj4cypyPUsp4Oj/a1naU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.crl
                          rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRTPGp8I9oE3_oEWzXdq29sv77Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1148 (0x47c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119A40, serialNumber=BD14CF1A9F08F68137FE8116CD776ADBDB2FEFB4
        Validity
            Not Before: Mar 30 18:08:50 2026 GMT
            Not After : Apr  6 18:08:50 2026 GMT
        Subject: CN=69cabc32-6463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:44:0e:92:da:63:79:af:91:02:58:d9:7b:2a:
                    35:ce:b6:62:d5:73:3f:44:bd:46:94:1d:a1:38:94:
                    12:ba:34:14:9c:4c:b5:99:c8:cf:02:dd:2e:81:9d:
                    54:0b:6d:2e:6f:20:6d:5a:4e:5d:bf:5b:fb:f8:7b:
                    d1:4d:2f:41:cb:93:39:55:47:c3:56:9a:51:e3:d7:
                    40:aa:86:9a:38:d3:0c:b3:21:ac:68:c7:e6:34:3c:
                    95:5d:65:5f:01:ea:46:ed:27:e2:6c:84:73:9c:14:
                    ec:59:d0:73:d5:3e:fd:fd:b3:dc:ca:9e:64:fd:fc:
                    68:c9:27:7c:27:a7:29:31:d3:b3:bd:1e:e9:16:db:
                    c4:ab:8c:7f:05:69:53:d0:db:21:b0:63:68:51:68:
                    8e:21:c5:cb:6e:3f:c8:5b:07:8d:da:52:4e:64:ad:
                    f3:31:a1:82:81:77:46:e3:2d:18:6c:27:9f:3c:e6:
                    62:09:ff:8c:9e:02:79:6c:d6:30:74:3d:9f:6f:d2:
                    52:12:49:2c:a8:05:38:40:83:d2:a7:50:8c:f6:27:
                    c1:4a:3a:e4:eb:b6:8b:9c:a1:cd:b7:dd:1e:49:e4:
                    9f:70:f2:9f:4b:ec:d2:a6:03:e0:b2:47:e7:b7:8d:
                    7f:a1:50:71:af:e9:00:da:f6:46:4c:1a:cc:a7:3e:
                    ed:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:EF:2B:C6:BA:12:29:5F:F4:7C:A0:F2:25:54:3A:70:42:DB:AA:42
            X509v3 Authority Key Identifier:
                keyid:BD:14:CF:1A:9F:08:F6:81:37:FE:81:16:CD:77:6A:DB:DB:2F:EF:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRTPGp8I9oE3_oEWzXdq29sv77Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:ff:c3:d4:5a:c7:4b:04:8c:9b:95:38:1e:9d:62:b6:89:63:
         a8:b1:7c:49:96:64:a9:ae:bd:0d:d0:2e:1b:36:56:e3:89:99:
         63:b3:f1:03:3d:2f:9a:5a:51:92:38:57:ea:60:60:75:92:2e:
         ac:35:0c:ca:73:bd:2d:46:4d:39:98:ff:ce:61:c9:e3:39:01:
         3f:67:21:d5:78:9b:64:b6:74:fc:90:c8:f1:7c:c1:8e:9a:05:
         cd:53:dd:87:d2:e9:09:1a:c2:9d:5b:d3:14:3e:09:af:68:a2:
         9c:30:2e:8b:02:fa:d6:13:41:bb:89:93:ff:86:a4:a0:3a:f5:
         55:f2:37:a2:7b:bb:0b:0d:92:38:b5:fd:8f:30:21:9f:15:8b:
         96:54:3a:7a:45:ce:e3:ec:e1:ba:5a:23:b7:02:37:0c:ba:8d:
         72:a5:c9:80:ee:02:05:e2:46:26:37:d6:37:17:28:64:c3:1a:
         9c:ab:81:0c:36:21:f4:9f:77:8e:fa:79:b8:00:de:c7:ab:23:
         17:d8:8f:70:3e:df:7f:51:53:43:65:a7:4d:dd:0d:29:bf:a1:
         29:0a:9b:ba:1a:a7:77:a2:86:0c:78:c6:7e:e2:97:5c:34:95:
         5e:cb:f6:81:3f:f1:be:72:e8:d9:71:1e:20:5a:63:eb:d3:85:
         df:fe:c9:c4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTlBNDAxMTAvBgNVBAUTKEJEMTRDRjFBOUYwOEY2ODEzN0ZFODExNkNENzc2QURC
REIyRkVGQjQwHhcNMjYwMzMwMTgwODUwWhcNMjYwNDA2MTgwODUwWjAYMRYwFAYD
VQQDEw02OWNhYmMzMi02NDYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAl0QOktpjea+RAljZeyo1zrZi1XM/RL1GlB2hOJQSujQUnEy1mcjPAt0ugZ1U
C20ubyBtWk5dv1v7+HvRTS9By5M5VUfDVppR49dAqoaaONMMsyGsaMfmNDyVXWVf
AepG7SfibIRznBTsWdBz1T79/bPcyp5k/fxoySd8J6cpMdOzvR7pFtvEq4x/BWlT
0NshsGNoUWiOIcXLbj/IWweN2lJOZK3zMaGCgXdG4y0YbCefPOZiCf+MngJ5bNYw
dD2fb9JSEkksqAU4QIPSp1CM9ifBSjrk67aLnKHNt90eSeSfcPKfS+zSpgPgskfn
t41/oVBxr+kA2vZGTBrMpz7tqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHDvK8a6
Eilf9Hyg8iVUOnBC26pCMB8GA1UdIwQYMBaAFL0UzxqfCPaBN/6BFs13atvbL++0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUE0MC8wQkQ0NTYyMjAw
N0ExMUVBQjhCMzFCMTBDNEY5QUUwMi92UlRQR3A4STlvRTNfb0VXelhkcTI5c3Y3
N1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZSVFBHcDhJOW9FM19vRVd6WGRxMjlzdjc3US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
OUE0MC8wQkQ0NTYyMjAwN0ExMUVBQjhCMzFCMTBDNEY5QUUwMi92UlRQR3A4STlv
RTNfb0VXelhkcTI5c3Y3N1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkf/D1FrHSwSMm5U4Hp1itoljqLF8SZZkqa69DdAuGzZW44mZY7PxAz0vmlpR
kjhX6mBgdZIurDUMynO9LUZNOZj/zmHJ4zkBP2ch1XibZLZ0/JDI8XzBjpoFzVPd
h9LpCRrCnVvTFD4Jr2iinDAuiwL61hNBu4mT/4akoDr1VfI3onu7Cw2SOLX9jzAh
nxWLllQ6ekXO4+zhulojtwI3DLqNcqXJgO4CBeJGJjfWNxcoZMManKuBDDYh9J93
jvp5uADex6sjF9iPcD7ff1FTQ2WnTd0NKb+hKQqbuhqnd6KGDHjGfuKXXDSVXsv2
gT/xvnLo2XEeIFpj69OF3/7JxA==
-----END CERTIFICATE-----
Generated at Tue Mar 31 04:16:15 2026 by rpki-client