Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft
File:                     vLFqiHOxvhMm61zbkLGGEV2nTWc.mft (raw, json)
Hash identifier:          XdwCeAxCRV2y8gc2HuP1IElwBGkDt82AJM8NrOviRHI=
Subject key identifier:   0A:F8:DE:85:C7:2F:F0:CA:F3:4B:DC:BB:68:5F:80:4F:B8:98:BE:09
Authority key identifier: BC:B1:6A:88:73:B1:BE:13:26:EB:5C:DB:90:B1:86:11:5D:A7:4D:67
Certificate issuer:       /CN=A9194715/serialNumber=BCB16A8873B1BE1326EB5CDB90B186115DA74D67
Certificate serial:       0297
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLFqiHOxvhMm61zbkLGGEV2nTWc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft
Manifest number:          0291
Signing time:             Sun 05 Apr 2026 01:15:46 +0000
Manifest this update:     Sun 05 Apr 2026 01:15:46 +0000
Manifest next update:     Sun 12 Apr 2026 01:15:46 +0000
Files and hashes:         1: vLFqiHOxvhMm61zbkLGGEV2nTWc.crl (hash: 0dED8/gLQmIk1qGNLgTFsevp2sk0Bo4rAU6zYHTe52A=)
                          2: A8A940C6429811EDBB392C35C4F9AE02.roa (hash: gD3cKaCeij6TV/lz5LfYhJg/3abihcMPlSP3fLdyyRc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.crl
                          rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLFqiHOxvhMm61zbkLGGEV2nTWc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 01:15:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 663 (0x297)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194715, serialNumber=BCB16A8873B1BE1326EB5CDB90B186115DA74D67
        Validity
            Not Before: Apr  5 01:15:46 2026 GMT
            Not After : Apr 12 01:15:46 2026 GMT
        Subject: CN=69d1b7c2-6275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b9:ef:4a:b8:4a:00:88:87:85:4c:36:f3:92:
                    55:42:d2:f1:65:bd:e9:13:67:bb:d1:ca:f8:55:6f:
                    02:45:29:85:8d:be:01:a0:69:1f:b9:d6:2a:2f:81:
                    db:f1:6e:8b:3d:c9:82:c0:20:18:59:a0:51:a5:cf:
                    68:74:75:24:b7:31:a3:06:7b:e9:a7:2d:62:c6:58:
                    9d:7a:f9:12:39:d0:2e:e5:41:51:8c:da:05:2a:30:
                    9c:8b:38:f5:c3:35:e8:44:c5:f2:62:58:c7:4e:e0:
                    76:e2:b0:e2:d8:ec:38:d2:b4:2a:8a:03:f5:18:b8:
                    1f:33:e3:66:d4:c3:08:46:ac:0b:80:64:62:13:b9:
                    de:d8:98:9d:c2:01:2d:74:e1:14:12:58:2c:e8:99:
                    1e:3f:27:66:0b:fa:2b:bf:67:20:dd:a5:e4:04:df:
                    60:5a:fe:3f:71:43:7a:35:fa:ca:ed:fe:8a:9d:f3:
                    92:4a:6a:b0:8a:93:5d:16:f5:50:13:1f:62:46:e6:
                    c4:b1:89:85:cd:0f:42:c4:5d:d3:59:96:73:3f:ad:
                    86:0c:6f:a1:15:47:ac:12:f5:8e:fd:46:d6:ff:c5:
                    81:74:a4:4d:9e:9d:a2:b5:d1:29:be:e1:6d:ef:f0:
                    78:58:23:7f:37:55:a5:f6:35:5b:38:80:32:f9:6c:
                    a7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:F8:DE:85:C7:2F:F0:CA:F3:4B:DC:BB:68:5F:80:4F:B8:98:BE:09
            X509v3 Authority Key Identifier:
                keyid:BC:B1:6A:88:73:B1:BE:13:26:EB:5C:DB:90:B1:86:11:5D:A7:4D:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLFqiHOxvhMm61zbkLGGEV2nTWc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:e5:f8:17:ef:85:20:c0:af:08:47:be:6c:0b:28:a3:c0:16:
         10:aa:86:37:14:48:ad:b5:75:92:23:2e:c8:53:ce:02:a7:8b:
         56:b4:6c:f3:9e:4e:9f:30:e0:72:2d:43:3b:22:ae:62:c3:46:
         29:8c:51:de:a2:2c:a6:a0:50:a6:cc:b8:09:6b:58:f1:d8:0f:
         3a:05:61:ba:9c:8a:3f:20:e7:88:c4:58:dc:c3:96:6a:18:57:
         e1:f1:7e:65:db:f6:ed:b9:84:b5:f1:97:99:6b:e6:d3:1a:67:
         ef:50:b6:d2:37:1f:20:f5:71:89:22:69:85:76:06:59:de:ec:
         f6:de:91:56:00:a0:d6:4d:72:db:e6:b4:cd:7d:80:bd:61:02:
         df:d4:05:51:0b:26:cc:88:e5:3a:dd:36:16:cb:2a:d4:5e:f9:
         a5:b9:69:1a:0f:41:dc:fe:09:47:ed:f3:ec:a8:ed:c3:a7:d0:
         5b:34:f6:1d:e5:40:bb:62:54:27:9f:df:7b:77:ca:3c:c6:2c:
         52:5c:fa:c2:a7:53:e8:0a:aa:9c:f0:dc:5d:42:7c:38:40:e4:
         cd:0d:f3:ca:3b:0a:55:55:9e:bd:6c:5b:34:f6:63:30:99:fe:
         ef:07:44:f1:be:ff:dc:d0:50:bb:c2:dc:12:5b:b6:c3:6c:ac:
         56:94:ee:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:33:00 2026 by rpki-client