Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft
File:                     VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft (raw, json)
Hash identifier:          INrDvRWMYoi3P4r9pp4U+zOWk/deFG+ILyYEh5WGW2g=
Subject key identifier:   8D:C9:F6:92:28:F8:8A:52:F9:6E:82:8C:D7:49:E7:CB:D5:3D:7D:89
Authority key identifier: 56:A0:31:67:FA:E1:2B:1B:A1:4B:B8:47:4D:44:2B:67:70:BB:98:29
Certificate issuer:       /CN=A9136BD7/serialNumber=56A03167FAE12B1BA14BB8474D442B6770BB9829
Certificate serial:       06A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft
Manifest number:          069A
Signing time:             Sat 04 Apr 2026 22:13:30 +0000
Manifest this update:     Sat 04 Apr 2026 22:13:30 +0000
Manifest next update:     Sat 11 Apr 2026 22:13:30 +0000
Files and hashes:         1: VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.crl (hash: 9joi7mEzdOsuvaN9Z+CksCt8/hiPDWGGbFVZ94Iawi4=)
                          2: E22BD636AC5011EBA37CCA28C4F9AE02.roa (hash: svVIYMOHHISnIzFT8WuFL4ZZ7FcD/VousWYFm3mhG44=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.crl
                          rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 22:13:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1698 (0x6a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136BD7, serialNumber=56A03167FAE12B1BA14BB8474D442B6770BB9829
        Validity
            Not Before: Apr  4 22:13:30 2026 GMT
            Not After : Apr 11 22:13:30 2026 GMT
        Subject: CN=69d18d0a-1182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e4:bf:c8:9d:f7:ec:9a:fb:1e:8f:52:65:59:
                    e5:59:6d:e4:3e:61:8f:47:5d:02:e7:b1:8b:0f:eb:
                    73:b3:c9:5b:76:b2:5f:68:58:d1:c7:59:64:d9:f4:
                    dc:a4:7f:e4:18:99:71:4b:7c:00:12:dc:8f:bd:24:
                    71:f0:cc:ad:4c:2e:df:b9:33:47:e3:3a:11:3c:95:
                    0f:44:bb:78:bd:13:60:22:fc:6a:c8:0b:06:22:88:
                    15:d4:4b:dd:65:41:27:bc:b1:61:7a:af:75:27:20:
                    d8:83:e5:af:b2:fc:d8:50:dd:2e:e7:7a:db:08:e4:
                    be:28:20:66:3d:06:91:e9:3a:85:c2:89:ea:9b:4a:
                    99:9c:e3:ed:70:bf:72:fb:4c:65:d4:6e:02:4d:a2:
                    c6:1f:ab:fe:3b:64:ba:13:33:b0:55:e8:7d:1d:ad:
                    91:29:76:ec:a2:f6:c0:3f:f0:0f:fe:0c:c1:cd:f6:
                    76:69:56:ab:01:96:3d:9f:5a:43:83:64:8e:06:3c:
                    91:f1:2b:25:7c:32:c5:d4:2a:70:90:15:5b:55:cf:
                    f8:7f:c5:a2:d6:ab:f9:02:92:e4:db:e2:51:9e:39:
                    0f:dd:81:bb:00:aa:ce:f9:b1:b8:1b:10:fb:fd:ee:
                    e7:11:89:fc:90:42:42:4f:b0:5b:27:52:18:2f:a3:
                    3c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:C9:F6:92:28:F8:8A:52:F9:6E:82:8C:D7:49:E7:CB:D5:3D:7D:89
            X509v3 Authority Key Identifier:
                keyid:56:A0:31:67:FA:E1:2B:1B:A1:4B:B8:47:4D:44:2B:67:70:BB:98:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:1c:58:8c:84:35:ed:72:10:62:dc:12:6c:0a:4b:f2:c2:74:
         1a:30:60:b6:b9:fb:64:d4:3d:9c:f9:1e:b8:36:30:9b:df:26:
         93:ba:36:80:83:e2:7c:f0:38:ef:80:c5:26:44:d9:64:db:6d:
         d9:d8:8b:2d:8e:7f:9a:3b:e2:a4:dc:aa:a4:ef:ec:e7:6c:51:
         cb:0b:fa:d4:94:37:db:1a:65:99:96:9a:ba:55:5d:4d:58:58:
         1a:29:14:4f:ad:f1:7d:e5:b3:83:bd:3f:98:f0:97:04:a4:93:
         8d:c8:a1:69:b9:48:91:43:22:82:d3:78:a2:04:6e:92:50:6d:
         9c:71:18:06:ed:a9:97:d2:d4:9d:d5:21:7f:15:0b:b5:26:65:
         3f:6a:9b:fb:e0:55:82:72:44:70:ab:ba:8d:57:44:8a:f3:a1:
         dd:c5:c1:88:f5:6e:c7:ca:89:62:4b:a4:49:d8:8b:61:98:cf:
         86:8f:a3:63:b2:7f:eb:ee:f4:e3:54:a2:0d:05:0f:cc:02:00:
         08:0b:d2:87:90:92:9e:58:83:ae:72:5f:66:7f:51:7f:39:d4:
         96:a8:0b:eb:e2:3e:b0:d3:75:52:8f:e4:8e:16:b5:98:02:c6:
         fd:22:38:3c:49:d3:b2:4b:e2:95:bd:e4:e5:8d:b8:02:7e:06:
         3f:c5:43:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:54:32 2026 by rpki-client