Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft
File:                     VN6ZlQt_yVgf6KyWHze3iY81zcM.mft (raw, json)
Hash identifier:          H4GOGUEUgB6Rc0We8Wb+WfSM6afbvfAr3IMg/4IegP4=
Subject key identifier:   38:41:E3:8A:2B:FC:F1:77:F8:40:22:16:38:F4:8B:DF:7A:78:9F:85
Authority key identifier: 54:DE:99:95:0B:7F:C9:58:1F:E8:AC:96:1F:37:B7:89:8F:35:CD:C3
Certificate issuer:       /CN=A917E458/serialNumber=54DE99950B7FC9581FE8AC961F37B7898F35CDC3
Certificate serial:       AB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VN6ZlQt_yVgf6KyWHze3iY81zcM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft
Manifest number:          A8
Signing time:             Sun 05 Apr 2026 06:35:13 +0000
Manifest this update:     Sun 05 Apr 2026 06:35:12 +0000
Manifest next update:     Sun 12 Apr 2026 06:35:12 +0000
Files and hashes:         1: VN6ZlQt_yVgf6KyWHze3iY81zcM.crl (hash: atxpMnxS3ZILFB3cTcJXVbuD0aCaluAQ19POZ3ZlbOE=)
                          2: 8F8A915C590C11F0AC0A3639C4F9AE02.roa (hash: HtaHQbR4Ww0fWPU3P7Hu/E8dYBtv4LHASdo5cN8a0Fc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.crl
                          rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VN6ZlQt_yVgf6KyWHze3iY81zcM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 06:35:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171 (0xab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E458, serialNumber=54DE99950B7FC9581FE8AC961F37B7898F35CDC3
        Validity
            Not Before: Apr  5 06:35:12 2026 GMT
            Not After : Apr 12 06:35:12 2026 GMT
        Subject: CN=69d202a1-0357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b2:d3:95:f2:3b:69:9b:79:7f:9a:c5:96:c1:
                    af:a9:2d:cc:f5:bc:95:1a:f3:22:a5:35:aa:cd:44:
                    ae:35:e2:4c:70:6a:a8:6e:8c:6a:89:9d:1b:b3:f1:
                    49:8f:a7:d5:ca:97:57:e8:f9:12:8f:91:74:10:9b:
                    99:e9:0a:7c:d2:26:be:1e:ba:50:5d:1c:7c:b8:18:
                    8a:e3:00:08:32:ff:29:44:77:d1:66:8c:e1:f8:b6:
                    c9:dc:be:d9:60:2b:1d:7c:44:ad:70:b6:30:06:99:
                    9d:5b:66:31:57:40:ea:ae:75:99:f1:8a:c6:05:10:
                    48:b8:01:43:2f:01:24:7e:5c:52:47:a5:76:32:2d:
                    57:22:f8:4e:c6:d6:5e:93:5f:17:53:2e:d1:f7:4d:
                    2a:f6:c9:95:a3:68:7c:c6:73:16:8d:95:cf:af:77:
                    dd:3d:21:75:9f:6b:5d:2b:29:73:ab:6a:4e:89:d2:
                    63:c9:1a:45:73:a4:ea:79:96:22:40:e7:b2:2d:1b:
                    f1:b8:3b:d2:ef:ff:39:96:f7:65:5d:5f:e7:63:f5:
                    e5:ff:a2:17:66:4a:72:47:ec:0a:c7:c0:eb:0d:63:
                    3c:be:2c:80:2f:4b:16:8b:0d:c0:7c:7a:9b:64:ed:
                    ad:4f:e9:28:4e:2c:24:14:82:c5:b1:cb:69:36:c2:
                    42:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:41:E3:8A:2B:FC:F1:77:F8:40:22:16:38:F4:8B:DF:7A:78:9F:85
            X509v3 Authority Key Identifier:
                keyid:54:DE:99:95:0B:7F:C9:58:1F:E8:AC:96:1F:37:B7:89:8F:35:CD:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VN6ZlQt_yVgf6KyWHze3iY81zcM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:81:2a:cc:e2:2b:47:ed:a3:98:83:b5:f3:79:d3:ad:fc:98:
         46:3c:78:7a:80:7a:bb:fa:dc:3d:2e:49:dc:c2:00:18:ae:0b:
         d3:1f:ea:80:78:1e:14:aa:d2:ca:55:31:d5:d9:14:ae:53:d0:
         34:f5:f0:1b:c5:86:36:17:6b:ad:df:a2:6e:cd:f0:71:f2:93:
         07:9d:71:d0:41:68:52:60:2b:5e:19:c4:72:25:49:60:a0:83:
         cd:99:7d:eb:8a:1b:d2:26:5e:47:7a:0f:30:ab:41:8e:19:f0:
         4f:65:3b:18:6f:7f:f3:4f:0e:84:0c:4e:43:52:f0:27:3c:6e:
         d0:71:81:6e:e3:fc:a7:b4:f9:7b:ee:ee:c0:c6:f1:98:56:39:
         9d:8b:1e:44:e5:d7:54:2e:31:be:17:b2:be:ec:09:f5:58:d6:
         ad:7b:1c:78:4b:7a:fe:d9:4b:75:ee:68:91:e4:23:76:be:7e:
         4e:aa:f6:95:af:af:61:39:79:15:b6:b1:40:9a:d2:f3:b8:70:
         ab:b8:e9:f1:d8:3a:ee:f1:64:c6:9c:d0:57:46:ca:dc:b5:3c:
         ab:e1:b2:3e:24:80:fb:37:00:d4:80:0c:73:1a:2b:d0:54:df:
         c3:eb:80:fb:01:f3:d5:e6:3a:3d:2f:09:57:eb:00:16:0c:76:
         85:d4:85:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 14:15:10 2026 by rpki-client