Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171172/886B9A1C18BE11EBAC10DE46C4F9AE02/Vgu9YAbOzXMA0VJMiidDmrvxWX4.mft
File:                     Vgu9YAbOzXMA0VJMiidDmrvxWX4.mft (raw, json)
Hash identifier:          8jD+myyLy1zIqmoopts/1AVbjQ5k3kWtXOimAp7+tj0=
Subject key identifier:   95:4C:DF:78:35:83:FB:C9:55:C2:2C:DF:BB:A5:96:D5:17:21:32:0C
Authority key identifier: 56:0B:BD:60:06:CE:CD:73:00:D1:52:4C:8A:27:43:9A:BB:F1:59:7E
Certificate issuer:       /CN=A9171172/serialNumber=560BBD6006CECD7300D1524C8A27439ABBF1597E
Certificate serial:       080A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vgu9YAbOzXMA0VJMiidDmrvxWX4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171172/886B9A1C18BE11EBAC10DE46C4F9AE02/Vgu9YAbOzXMA0VJMiidDmrvxWX4.mft
Manifest number:          080A
Signing time:             Sat 04 Apr 2026 20:54:26 +0000
Manifest this update:     Sat 04 Apr 2026 20:54:26 +0000
Manifest next update:     Sat 11 Apr 2026 20:54:26 +0000
Files and hashes:         1: Vgu9YAbOzXMA0VJMiidDmrvxWX4.crl (hash: RtjwTRWz1JyO9rBbIqyyit2hA7SIXhFNdZ5eyK1kLxU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171172/886B9A1C18BE11EBAC10DE46C4F9AE02/Vgu9YAbOzXMA0VJMiidDmrvxWX4.crl
                          rsync://rpki.apnic.net/member_repository/A9171172/886B9A1C18BE11EBAC10DE46C4F9AE02/Vgu9YAbOzXMA0VJMiidDmrvxWX4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vgu9YAbOzXMA0VJMiidDmrvxWX4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 20:54:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2058 (0x80a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171172, serialNumber=560BBD6006CECD7300D1524C8A27439ABBF1597E
        Validity
            Not Before: Apr  4 20:54:26 2026 GMT
            Not After : Apr 11 20:54:26 2026 GMT
        Subject: CN=69d17a82-3216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:49:bf:1b:4b:51:08:a2:d3:8d:0b:45:bf:9b:
                    b5:b3:05:41:be:3f:de:21:3e:8d:7e:86:28:bc:ae:
                    b2:b0:c6:7b:a3:bd:cb:10:e5:b0:eb:dc:9d:04:cb:
                    fa:73:a8:c6:1c:fc:03:0f:6c:4c:bd:1a:c9:58:41:
                    36:49:47:9a:bc:5a:f7:89:e1:80:6b:bc:3b:6c:0c:
                    cc:42:5f:96:a2:00:d5:4b:7c:3d:7f:6c:b9:16:fd:
                    e5:db:80:b1:6c:b6:b0:5b:3b:dd:df:41:35:25:76:
                    d8:4f:92:fc:42:04:39:33:f0:a3:49:39:3f:19:7b:
                    41:f1:8a:2d:d5:80:68:b5:3c:e5:7b:4d:1b:69:67:
                    e8:7f:09:7c:ba:08:7d:70:6a:d7:5d:32:29:9b:ad:
                    64:f3:4b:b9:0b:15:26:18:72:22:77:a6:9a:96:d2:
                    b7:0f:83:36:b3:ea:15:ab:1b:de:3a:8c:96:68:0c:
                    fc:b1:06:f4:c6:7e:b0:8e:66:55:18:8c:be:27:62:
                    4c:be:f3:82:d2:8f:d4:ff:a9:a1:c6:2b:3d:30:c4:
                    0a:b4:e0:dc:00:61:23:01:6a:b0:92:93:fb:8f:70:
                    8f:a4:2c:0b:f9:ce:18:14:ab:b1:22:91:91:b2:ac:
                    18:8e:ac:fb:f8:a2:74:38:c0:ad:3e:99:1f:46:26:
                    f9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:4C:DF:78:35:83:FB:C9:55:C2:2C:DF:BB:A5:96:D5:17:21:32:0C
            X509v3 Authority Key Identifier:
                keyid:56:0B:BD:60:06:CE:CD:73:00:D1:52:4C:8A:27:43:9A:BB:F1:59:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171172/886B9A1C18BE11EBAC10DE46C4F9AE02/Vgu9YAbOzXMA0VJMiidDmrvxWX4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vgu9YAbOzXMA0VJMiidDmrvxWX4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171172/886B9A1C18BE11EBAC10DE46C4F9AE02/Vgu9YAbOzXMA0VJMiidDmrvxWX4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:b2:a0:91:f1:b3:9a:fe:83:9a:82:64:37:72:05:13:4e:c7:
         34:f6:c5:86:d8:36:81:de:e0:a7:61:96:3e:f2:9c:39:79:6a:
         f1:60:a3:51:1c:21:fe:b3:ee:f5:a7:49:b6:bf:c5:49:b1:bf:
         e0:16:4c:b9:b5:07:1b:7c:5a:33:d5:ae:2d:4c:5c:4d:61:df:
         b5:c7:71:d4:a5:af:d6:db:b3:13:70:1f:b0:0f:9c:41:ff:1b:
         35:52:35:26:4d:52:c9:59:88:c7:6c:0c:dc:ed:5f:4b:6e:08:
         07:51:6c:e3:73:10:fb:44:9e:c4:f8:3d:45:65:ca:13:62:92:
         0d:fd:03:c2:28:8c:e8:cc:1b:cd:30:a2:3d:2b:11:2d:3f:76:
         e7:23:cd:0f:0e:a5:eb:cd:b6:9e:a8:90:84:84:57:ec:57:e5:
         50:b0:29:3e:24:8f:c6:3d:e1:47:c6:fd:15:bb:47:af:d7:f0:
         75:79:c5:73:56:16:4c:8f:ec:f1:ff:0c:d7:97:62:2c:84:8a:
         e0:3a:c5:2a:e4:95:f2:19:9e:5c:ad:92:d5:be:04:7a:a0:95:
         12:93:02:89:00:58:5d:2a:84:b6:80:08:e4:1e:2d:f7:e8:cc:
         ae:fb:bb:77:a9:a5:ee:10:91:42:64:91:ad:cd:9f:44:2b:60:
         cb:62:73:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 10:09:32 2026 by rpki-client