Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.mft
File:                     VRTBgTfeq40U8RHJD39rfjDQH2Q.mft (raw, json)
Hash identifier:          Z0pb13hPicJRn6t4bRvlqh+uojcrlCh1MF+U43KIix0=
Subject key identifier:   E5:D7:C8:B2:6B:8F:28:D7:40:5F:37:32:67:83:CE:29:ED:6D:B1:4D
Authority key identifier: 55:14:C1:81:37:DE:AB:8D:14:F1:11:C9:0F:7F:6B:7E:30:D0:1F:64
Certificate issuer:       /CN=A916D1DA/serialNumber=5514C18137DEAB8D14F111C90F7F6B7E30D01F64
Certificate serial:       3528
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRTBgTfeq40U8RHJD39rfjDQH2Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.mft
Manifest number:          3528
Signing time:             Sat 04 Apr 2026 14:58:28 +0000
Manifest this update:     Sat 04 Apr 2026 14:58:27 +0000
Manifest next update:     Sat 11 Apr 2026 14:58:27 +0000
Files and hashes:         1: VRTBgTfeq40U8RHJD39rfjDQH2Q.crl (hash: 0aX/Ba1mbzRo2b2vzzUGbm8smiG2epqPEnOSz2XTLiY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.crl
                          rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRTBgTfeq40U8RHJD39rfjDQH2Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 14:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13608 (0x3528)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D1DA, serialNumber=5514C18137DEAB8D14F111C90F7F6B7E30D01F64
        Validity
            Not Before: Apr  4 14:58:27 2026 GMT
            Not After : Apr 11 14:58:27 2026 GMT
        Subject: CN=69d12714-bc78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:75:6a:9d:d8:11:04:09:34:b4:29:5a:cc:5d:
                    aa:c9:7b:91:22:a9:af:6a:70:80:98:d7:b8:e7:34:
                    f7:9a:84:b5:48:d7:26:e9:d9:3a:6a:a5:d7:6d:2c:
                    4a:ce:3b:ae:0d:6f:2d:7e:ec:47:1e:94:d2:86:93:
                    59:a3:71:b6:00:4d:0a:b9:62:7c:30:ea:46:2a:7b:
                    e3:2c:b8:c6:08:01:da:1c:48:17:ca:c5:d6:d1:c1:
                    92:d4:31:8c:c5:09:4e:0b:19:5b:3a:56:43:b0:56:
                    ad:9a:00:cc:5e:0c:c3:0a:80:6a:bd:25:4e:92:aa:
                    eb:75:40:61:3c:d9:59:de:c3:11:66:4f:9f:70:0f:
                    cb:cd:70:cb:0e:6b:4a:a7:2e:ed:4f:3d:65:76:bf:
                    c1:ec:94:0a:d2:91:40:67:22:a3:66:4c:2c:c3:5a:
                    21:18:74:59:32:ed:20:a1:1e:45:de:11:a1:8d:19:
                    a5:77:d2:67:21:ba:ec:5f:ae:12:f2:dc:1f:93:a7:
                    4b:67:38:15:a4:5a:8e:d3:9d:1c:8e:71:8d:3a:49:
                    7e:71:62:8c:69:dc:7f:38:07:49:2a:af:60:57:18:
                    4d:fa:72:93:9a:c5:75:58:21:45:cf:0f:c7:31:95:
                    03:69:f2:30:4a:a6:f3:87:08:79:4f:77:b8:7f:6f:
                    25:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:D7:C8:B2:6B:8F:28:D7:40:5F:37:32:67:83:CE:29:ED:6D:B1:4D
            X509v3 Authority Key Identifier:
                keyid:55:14:C1:81:37:DE:AB:8D:14:F1:11:C9:0F:7F:6B:7E:30:D0:1F:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRTBgTfeq40U8RHJD39rfjDQH2Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:c6:68:03:f6:03:bd:0c:76:b1:6e:56:3d:11:9c:ca:d6:4c:
         c6:71:7f:b8:1c:0c:2f:4d:72:50:2e:99:08:3e:8d:fa:b0:16:
         7d:4f:1c:84:97:83:12:e5:78:d7:5b:f5:c4:89:3f:5b:37:8f:
         ad:d4:a5:78:c0:ba:50:97:84:10:a6:2d:2e:79:fd:8e:f7:d3:
         37:8f:ac:60:f7:4f:ae:ef:41:a8:3c:6e:28:7c:e6:80:f5:d5:
         0c:69:ce:12:d9:45:5f:0e:fa:f3:e9:08:90:0f:37:76:2d:a9:
         88:28:ad:b6:4a:6f:98:37:04:89:73:92:0d:de:25:e2:e5:ce:
         f7:ea:5d:b3:90:e8:12:57:6b:cf:9a:97:2b:14:99:68:dd:7c:
         25:5a:eb:ed:d1:56:6f:88:36:15:69:78:98:3d:23:ae:c3:e5:
         29:f7:00:a4:50:dd:54:dc:29:ce:5d:b7:fc:d5:ed:0c:32:70:
         22:0c:0c:8f:c8:78:5f:a0:3b:af:f1:9a:0c:86:60:f3:be:ad:
         1b:d9:2b:2d:46:f2:a3:43:7e:63:cd:eb:cc:45:e3:ea:b2:53:
         81:69:fc:20:e2:4f:07:24:cc:2c:e9:c1:11:f8:75:58:46:0b:
         e3:0b:7c:8d:49:dc:6a:c1:89:36:f7:36:0d:8a:f6:ef:db:91:
         98:8f:f3:32
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNSgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkQxREExMTAvBgNVBAUTKDU1MTRDMTgxMzdERUFCOEQxNEYxMTFDOTBGN0Y2QjdF
MzBEMDFGNjQwHhcNMjYwNDA0MTQ1ODI3WhcNMjYwNDExMTQ1ODI3WjAYMRYwFAYD
VQQDEw02OWQxMjcxNC1iYzc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw3VqndgRBAk0tClazF2qyXuRIqmvanCAmNe45zT3moS1SNcm6dk6aqXXbSxK
zjuuDW8tfuxHHpTShpNZo3G2AE0KuWJ8MOpGKnvjLLjGCAHaHEgXysXW0cGS1DGM
xQlOCxlbOlZDsFatmgDMXgzDCoBqvSVOkqrrdUBhPNlZ3sMRZk+fcA/LzXDLDmtK
py7tTz1ldr/B7JQK0pFAZyKjZkwsw1ohGHRZMu0goR5F3hGhjRmld9JnIbrsX64S
8twfk6dLZzgVpFqO050cjnGNOkl+cWKMadx/OAdJKq9gVxhN+nKTmsV1WCFFzw/H
MZUDafIwSqbzhwh5T3e4f28lCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOXXyLJr
jyjXQF83MmeDzintbbFNMB8GA1UdIwQYMBaAFFUUwYE33quNFPERyQ9/a34w0B9k
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDFEQS8wMDhDRTUyQTFE
OUUxMUUyOTY0Qjk1OEQwOEIwMkNEMi9WUlRCZ1RmZXE0MFU4UkhKRDM5cmZqRFFI
MlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZSVEJnVGZlcTQwVThSSEpEMzlyZmpEUUgyUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RDFEQS8wMDhDRTUyQTFEOUUxMUUyOTY0Qjk1OEQwOEIwMkNEMi9WUlRCZ1RmZXE0
MFU4UkhKRDM5cmZqRFFIMlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAX8ZoA/YDvQx2sW5WPRGcytZMxnF/uBwML01yUC6ZCD6N+rAWfU8chJeDEuV4
11v1xIk/WzePrdSleMC6UJeEEKYtLnn9jvfTN4+sYPdPru9BqDxuKHzmgPXVDGnO
EtlFXw768+kIkA83di2piCittkpvmDcEiXOSDd4l4uXO9+pds5DoEldrz5qXKxSZ
aN18JVrr7dFWb4g2FWl4mD0jrsPlKfcApFDdVNwpzl23/NXtDDJwIgwMj8h4X6A7
r/GaDIZg876tG9krLUbyo0N+Y83rzEXj6rJTgWn8IOJPByTMLOnBEfh1WEYL4wt8
jUncasGJNvc2DYr279uRmI/zMg==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:29:36 2026 by rpki-client