Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft
File:                     vbWSaolrtlGg51QKOYzV7wcUFx8.mft (raw, json)
Hash identifier:          5lv4d/I1h+ioNUXZLF2/pSogUIUruS3oNkzDOmlif/g=
Subject key identifier:   15:B8:7A:8C:CA:D4:49:7D:16:FE:5A:3E:D7:6C:CD:37:55:69:44:D8
Authority key identifier: BD:B5:92:6A:89:6B:B6:51:A0:E7:54:0A:39:8C:D5:EF:07:14:17:1F
Certificate issuer:       /CN=A916A5CD/serialNumber=BDB5926A896BB651A0E7540A398CD5EF0714171F
Certificate serial:       04CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft
Manifest number:          04BA
Signing time:             Tue 24 Mar 2026 23:35:57 +0000
Manifest this update:     Tue 24 Mar 2026 23:35:56 +0000
Manifest next update:     Tue 31 Mar 2026 23:35:56 +0000
Files and hashes:         1: vbWSaolrtlGg51QKOYzV7wcUFx8.crl (hash: 0EfpYorSx7V4fiG3Y7ZY1xfB28+eWsnCGowh/KOIxOw=)
                          2: 66864FCE688011ECAA829E31C4F9AE02.roa (hash: oTwsosYR7qPA588mHLZ56TR8yUV0D8Vyzewy1czbsfc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.crl
                          rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:35:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1229 (0x4cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A5CD, serialNumber=BDB5926A896BB651A0E7540A398CD5EF0714171F
        Validity
            Not Before: Mar 24 23:35:56 2026 GMT
            Not After : Mar 31 23:35:56 2026 GMT
        Subject: CN=69c31fdd-e364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a7:b7:94:52:9c:7c:d3:60:13:f7:24:46:f8:
                    80:3d:ba:be:68:f0:12:29:59:9e:ac:6c:c9:c6:41:
                    44:0e:50:a4:47:68:d4:48:13:84:73:da:c0:00:bd:
                    54:17:ed:27:bc:84:c6:3e:47:c6:07:35:0f:4c:ec:
                    3f:5e:18:25:65:77:1c:54:a4:84:cc:39:bd:cc:c5:
                    85:ea:29:d9:36:bb:d3:d1:68:67:55:6c:7b:52:99:
                    4f:66:10:dd:44:77:d3:ce:ff:bf:7f:9e:5c:ea:1b:
                    23:47:a0:69:74:d4:a7:43:de:d6:01:21:7d:32:a2:
                    09:7f:ca:3c:d7:62:eb:f5:5d:69:cc:58:2b:c3:1d:
                    bb:78:c6:ec:62:42:a7:fe:ea:7e:da:b3:d7:63:a9:
                    98:81:83:60:92:e4:03:db:08:9b:a9:fe:5f:c5:b9:
                    ac:51:09:4c:9e:90:1d:8a:2e:cb:1b:90:74:c9:c5:
                    34:89:6c:9f:37:c3:df:7a:b4:f9:e1:a1:07:a9:4f:
                    2a:32:08:c7:da:b0:61:9c:53:cc:5f:67:30:08:7d:
                    e2:28:e9:bc:59:86:93:aa:c6:59:d5:22:cb:15:6b:
                    db:e4:49:17:a8:73:74:d6:cd:23:ff:63:9a:db:94:
                    77:52:d4:7d:12:85:4d:2a:c2:81:20:5c:f9:3e:ff:
                    d5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B8:7A:8C:CA:D4:49:7D:16:FE:5A:3E:D7:6C:CD:37:55:69:44:D8
            X509v3 Authority Key Identifier:
                keyid:BD:B5:92:6A:89:6B:B6:51:A0:E7:54:0A:39:8C:D5:EF:07:14:17:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:65:b4:da:ba:d0:63:bd:0c:55:8e:1d:3a:52:13:b6:38:ef:
         63:04:22:42:88:bb:b3:3f:95:a6:86:ca:af:56:e0:ed:2e:1c:
         b0:b9:13:a4:c9:90:8d:61:e9:76:b5:f5:04:8a:dc:ca:dc:7c:
         0b:b8:9a:89:94:48:11:5e:e0:e7:9a:da:fa:26:b0:5f:75:34:
         b2:e7:f9:42:54:cc:d4:39:69:33:0a:39:56:e2:fd:ac:a5:b0:
         dc:c8:11:63:00:35:21:bf:89:20:1f:5d:58:f7:dc:e9:f7:72:
         e5:63:70:01:ae:82:9d:2a:b8:2b:fd:ba:08:5e:39:6f:c5:22:
         37:29:b4:7c:a0:e7:c7:66:55:68:24:0e:f4:54:21:ff:33:2f:
         61:e5:cd:f0:6e:57:85:9a:52:6a:2a:95:d8:75:93:96:71:e0:
         fc:98:77:70:5b:19:1f:f9:8a:90:c5:61:1f:6b:55:7b:29:04:
         7f:b1:e2:c8:0a:9b:25:be:48:13:c2:ca:b2:f3:56:4e:d7:18:
         78:eb:b8:ad:86:c6:98:68:d3:20:17:ac:f4:c7:1f:ec:d5:a0:
         6e:e4:05:60:d9:d1:87:b8:47:86:ff:3d:1a:ba:a9:7e:94:d5:
         60:bc:1e:fa:01:4a:a3:9d:ab:3c:c0:b6:03:fa:9e:da:e4:62:
         24:8d:40:40
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkE1Q0QxMTAvBgNVBAUTKEJEQjU5MjZBODk2QkI2NTFBMEU3NTQwQTM5OENENUVG
MDcxNDE3MUYwHhcNMjYwMzI0MjMzNTU2WhcNMjYwMzMxMjMzNTU2WjAYMRYwFAYD
VQQDEw02OWMzMWZkZC1lMzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxKe3lFKcfNNgE/ckRviAPbq+aPASKVmerGzJxkFEDlCkR2jUSBOEc9rAAL1U
F+0nvITGPkfGBzUPTOw/XhglZXccVKSEzDm9zMWF6inZNrvT0WhnVWx7UplPZhDd
RHfTzv+/f55c6hsjR6BpdNSnQ97WASF9MqIJf8o812Lr9V1pzFgrwx27eMbsYkKn
/up+2rPXY6mYgYNgkuQD2wibqf5fxbmsUQlMnpAdii7LG5B0ycU0iWyfN8PferT5
4aEHqU8qMgjH2rBhnFPMX2cwCH3iKOm8WYaTqsZZ1SLLFWvb5EkXqHN01s0j/2Oa
25R3UtR9EoVNKsKBIFz5Pv/VrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBW4eozK
1El9Fv5aPtdszTdVaUTYMB8GA1UdIwQYMBaAFL21kmqJa7ZRoOdUCjmM1e8HFBcf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTVDRC8yOTQzNkZDRTY4
N0MxMUVDQUEyNkI5NTlDNEY5QUUwMi92YldTYW9scnRsR2c1MVFLT1l6Vjd3Y1VG
eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZiV1Nhb2xydGxHZzUxUUtPWXpWN3djVUZ4OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QTVDRC8yOTQzNkZDRTY4N0MxMUVDQUEyNkI5NTlDNEY5QUUwMi92YldTYW9scnRs
R2c1MVFLT1l6Vjd3Y1VGeDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAk2W02rrQY70MVY4dOlITtjjvYwQiQoi7sz+VpobKr1bg7S4csLkTpMmQjWHp
drX1BIrcytx8C7iaiZRIEV7g55ra+iawX3U0suf5QlTM1DlpMwo5VuL9rKWw3MgR
YwA1Ib+JIB9dWPfc6fdy5WNwAa6CnSq4K/26CF45b8UiNym0fKDnx2ZVaCQO9FQh
/zMvYeXN8G5XhZpSaiqV2HWTlnHg/Jh3cFsZH/mKkMVhH2tVeykEf7HiyAqbJb5I
E8LKsvNWTtcYeOu4rYbGmGjTIBes9Mcf7NWgbuQFYNnRh7hHhv89GrqpfpTVYLwe
+gFKo52rPMC2A/qe2uRiJI1AQA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:26:50 2026 by rpki-client