Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134167/B42267F43E8E11EF97A8557DC4F9AE02/VaNt8khLtGWsMwGcBws5J0UkAic.mft
File:                     VaNt8khLtGWsMwGcBws5J0UkAic.mft (raw, json)
Hash identifier:          IKwKrI/lmJu1UGJWvTrLWodcFu3L5/QkhB+pBX6EcAI=
Subject key identifier:   C6:EA:54:23:E5:AC:C9:DE:E2:B3:6E:DE:F8:4B:A8:28:15:F1:06:25
Authority key identifier: 55:A3:6D:F2:48:4B:B4:65:AC:33:01:9C:07:0B:39:27:45:24:02:27
Certificate issuer:       /CN=A9134167/serialNumber=55A36DF2484BB465AC33019C070B392745240227
Certificate serial:       0149
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VaNt8khLtGWsMwGcBws5J0UkAic.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134167/B42267F43E8E11EF97A8557DC4F9AE02/VaNt8khLtGWsMwGcBws5J0UkAic.mft
Manifest number:          0144
Signing time:             Wed 25 Mar 2026 04:31:46 +0000
Manifest this update:     Wed 25 Mar 2026 04:31:46 +0000
Manifest next update:     Wed 01 Apr 2026 04:31:46 +0000
Files and hashes:         1: VaNt8khLtGWsMwGcBws5J0UkAic.crl (hash: jk5QTUgREJhccRyOle0YiW8hAsucmeiweXIMwVtqqd8=)
                          2: A1A1946E3E8F11EF90A1D97EC4F9AE02.roa (hash: /ld513D22vtDsKI/GzmgQ3EYNXuMSF+WLy8acFoQpVY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134167/B42267F43E8E11EF97A8557DC4F9AE02/VaNt8khLtGWsMwGcBws5J0UkAic.crl
                          rsync://rpki.apnic.net/member_repository/A9134167/B42267F43E8E11EF97A8557DC4F9AE02/VaNt8khLtGWsMwGcBws5J0UkAic.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VaNt8khLtGWsMwGcBws5J0UkAic.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:31:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 329 (0x149)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134167, serialNumber=55A36DF2484BB465AC33019C070B392745240227
        Validity
            Not Before: Mar 25 04:31:46 2026 GMT
            Not After : Apr  1 04:31:46 2026 GMT
        Subject: CN=69c36532-ee86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:62:fe:0f:f4:9e:22:86:0d:f8:c8:2a:c1:d7:
                    e5:e2:ae:bf:a8:54:4c:6b:0b:56:b4:d5:f9:58:83:
                    96:6f:29:0f:04:80:f3:f0:7c:df:3b:d2:68:3f:ec:
                    25:76:ca:7f:4d:e9:a7:44:a9:28:32:d9:62:58:52:
                    1a:39:bb:28:94:1d:45:3f:71:30:3c:4c:07:3c:b5:
                    8f:2d:c6:0e:37:f9:ce:f5:36:72:4e:ae:75:bd:57:
                    55:2a:6b:fb:07:d4:bb:fc:12:24:10:52:6f:da:59:
                    92:d6:6e:19:78:96:4e:2d:dc:f2:03:1a:e4:d1:a6:
                    34:b7:34:41:35:62:79:7b:4e:47:67:0c:74:87:8a:
                    f1:30:8e:95:48:3e:7d:5e:f5:36:93:a2:66:d8:f4:
                    b1:7b:e7:44:2f:f9:82:85:de:83:f0:8c:6b:09:5f:
                    19:30:de:d2:ee:ea:84:1b:de:d2:63:c5:e2:6b:af:
                    57:7e:59:8e:e8:5e:38:fe:fc:b0:bd:75:e2:6b:f2:
                    d2:df:6a:19:25:7f:23:8d:72:7e:92:6f:a4:4c:73:
                    42:86:68:cd:08:25:2c:2f:cb:b4:d2:06:05:04:9f:
                    61:ba:93:89:46:ff:80:3f:f0:c8:55:88:75:a4:81:
                    2f:13:68:f3:1f:a6:fe:89:3b:7f:b2:e8:83:57:86:
                    be:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:EA:54:23:E5:AC:C9:DE:E2:B3:6E:DE:F8:4B:A8:28:15:F1:06:25
            X509v3 Authority Key Identifier:
                keyid:55:A3:6D:F2:48:4B:B4:65:AC:33:01:9C:07:0B:39:27:45:24:02:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134167/B42267F43E8E11EF97A8557DC4F9AE02/VaNt8khLtGWsMwGcBws5J0UkAic.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VaNt8khLtGWsMwGcBws5J0UkAic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134167/B42267F43E8E11EF97A8557DC4F9AE02/VaNt8khLtGWsMwGcBws5J0UkAic.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:f2:d2:7f:c5:ad:03:42:c8:8a:12:c8:5d:ff:a8:87:12:51:
         9c:c7:68:db:22:9c:11:28:c8:54:68:da:87:21:04:a9:58:ed:
         ed:a7:ec:bc:40:f5:c2:92:d6:eb:2e:a2:f5:f7:db:61:4f:06:
         79:be:4c:71:5a:3d:5e:cc:bf:73:e8:3a:ec:15:fb:dc:47:04:
         59:87:8c:87:26:8d:26:a5:d4:dc:61:f2:e1:40:06:6c:2a:50:
         d2:f8:f5:8d:8e:38:cb:89:27:c6:e1:2a:ff:30:88:b9:9e:31:
         21:ba:80:e9:44:f0:76:d9:33:7d:df:d8:bc:5a:2a:34:26:74:
         b7:32:70:7b:28:73:e6:1e:f0:b8:92:ac:38:2b:14:7b:a9:e0:
         8b:6e:3c:33:97:c5:d9:05:03:ee:8a:7f:0a:b4:fb:46:1d:c9:
         95:7a:f6:3e:39:78:b1:7a:02:2c:91:92:4a:38:d7:e1:5c:f9:
         6d:81:1c:9c:fe:03:89:5a:d6:bb:1f:bf:27:08:6e:cc:19:52:
         69:03:2e:3f:72:40:20:36:03:7b:ae:8f:32:30:b2:bd:8c:8d:
         c9:f1:a0:a3:5c:ee:cb:19:59:28:a7:e6:54:e4:a9:b7:93:aa:
         4c:e8:3d:d9:ee:3b:ac:bf:b2:f0:fc:d1:5e:95:47:80:f5:27:
         1d:c9:78:99
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzQxNjcxMTAvBgNVBAUTKDU1QTM2REYyNDg0QkI0NjVBQzMzMDE5QzA3MEIzOTI3
NDUyNDAyMjcwHhcNMjYwMzI1MDQzMTQ2WhcNMjYwNDAxMDQzMTQ2WjAYMRYwFAYD
VQQDEw02OWMzNjUzMi1lZTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmmL+D/SeIoYN+Mgqwdfl4q6/qFRMawtWtNX5WIOWbykPBIDz8HzfO9JoP+wl
dsp/TemnRKkoMtliWFIaObsolB1FP3EwPEwHPLWPLcYON/nO9TZyTq51vVdVKmv7
B9S7/BIkEFJv2lmS1m4ZeJZOLdzyAxrk0aY0tzRBNWJ5e05HZwx0h4rxMI6VSD59
XvU2k6Jm2PSxe+dEL/mChd6D8IxrCV8ZMN7S7uqEG97SY8Xia69XflmO6F44/vyw
vXXia/LS32oZJX8jjXJ+km+kTHNChmjNCCUsL8u00gYFBJ9hupOJRv+AP/DIVYh1
pIEvE2jzH6b+iTt/suiDV4a+ewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMbqVCPl
rMne4rNu3vhLqCgV8QYlMB8GA1UdIwQYMBaAFFWjbfJIS7RlrDMBnAcLOSdFJAIn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDE2Ny9CNDIyNjdGNDNF
OEUxMUVGOTdBODU1N0RDNEY5QUUwMi9WYU50OGtoTHRHV3NNd0djQndzNUowVWtB
aWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZhTnQ4a2hMdEdXc013R2NCd3M1SjBVa0FpYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NDE2Ny9CNDIyNjdGNDNFOEUxMUVGOTdBODU1N0RDNEY5QUUwMi9WYU50OGtoTHRH
V3NNd0djQndzNUowVWtBaWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWPLSf8WtA0LIihLIXf+ohxJRnMdo2yKcESjIVGjahyEEqVjt7afsvED1wpLW
6y6i9ffbYU8Geb5McVo9Xsy/c+g67BX73EcEWYeMhyaNJqXU3GHy4UAGbCpQ0vj1
jY44y4knxuEq/zCIuZ4xIbqA6UTwdtkzfd/YvFoqNCZ0tzJweyhz5h7wuJKsOCsU
e6ngi248M5fF2QUD7op/CrT7Rh3JlXr2Pjl4sXoCLJGSSjjX4Vz5bYEcnP4DiVrW
ux+/JwhuzBlSaQMuP3JAIDYDe66PMjCyvYyNyfGgo1zuyxlZKKfmVOSpt5OqTOg9
2e47rL+y8PzRXpVHgPUnHcl4mQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:40:52 2026 by rpki-client