Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91878B3/28355950D4BE11F0A3DEE216C4F9AE02/Vp-1bt2xandk-zENNy4XiFSCg5k.mft
File:                     Vp-1bt2xandk-zENNy4XiFSCg5k.mft (raw, json)
Hash identifier:          RzxQVmHnCrTvz/+PrYeEKrs4Avt7ZwA/xvPzv57IBM0=
Subject key identifier:   D9:FB:50:69:79:1B:18:6C:9E:5A:CF:B0:8E:FB:97:A2:39:A4:62:6F
Authority key identifier: 56:9F:B5:6E:DD:B1:6A:77:64:FB:31:0D:37:2E:17:88:54:82:83:99
Certificate issuer:       /CN=A91878B3/serialNumber=569FB56EDDB16A7764FB310D372E178854828399
Certificate serial:       3A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vp-1bt2xandk-zENNy4XiFSCg5k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91878B3/28355950D4BE11F0A3DEE216C4F9AE02/Vp-1bt2xandk-zENNy4XiFSCg5k.mft
Manifest number:          3A
Signing time:             Wed 25 Mar 2026 07:44:12 +0000
Manifest this update:     Wed 25 Mar 2026 07:44:11 +0000
Manifest next update:     Wed 01 Apr 2026 07:44:11 +0000
Files and hashes:         1: Vp-1bt2xandk-zENNy4XiFSCg5k.crl (hash: D+f7DUCoRP56kBPL3PR4YS+qxk/VDyWgygH9oyyBunI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91878B3/28355950D4BE11F0A3DEE216C4F9AE02/Vp-1bt2xandk-zENNy4XiFSCg5k.crl
                          rsync://rpki.apnic.net/member_repository/A91878B3/28355950D4BE11F0A3DEE216C4F9AE02/Vp-1bt2xandk-zENNy4XiFSCg5k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vp-1bt2xandk-zENNy4XiFSCg5k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:44:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91878B3, serialNumber=569FB56EDDB16A7764FB310D372E178854828399
        Validity
            Not Before: Mar 25 07:44:11 2026 GMT
            Not After : Apr  1 07:44:11 2026 GMT
        Subject: CN=69c3924c-c3df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6b:5d:c2:dc:bf:d0:55:68:15:01:16:17:d1:
                    e9:20:30:4b:53:4a:39:ac:a9:1b:93:1f:3c:77:cb:
                    4d:16:b3:65:2c:b3:16:4d:c6:82:c0:dc:7b:04:ce:
                    3d:fb:82:a6:81:43:7b:08:8c:78:2a:44:e5:15:26:
                    86:4c:b9:65:d3:b5:56:41:b9:8b:a5:d0:b3:b0:5c:
                    14:fc:2e:a4:8d:17:fd:18:e0:2a:e4:4a:bb:95:88:
                    1c:ae:6e:15:84:9f:a0:e0:cc:92:70:65:08:db:d5:
                    e0:5d:9a:89:d0:75:c0:99:62:ac:6a:d9:a6:0d:81:
                    db:6c:4c:80:ba:2f:0a:64:0b:a7:f2:74:a8:a6:8f:
                    79:ea:be:16:17:00:3d:d6:18:8f:62:ea:79:68:da:
                    b7:8b:5c:cd:af:6f:eb:d5:ce:60:12:53:21:3b:d4:
                    d8:e4:92:9f:09:06:88:6f:c6:a0:ac:ed:38:3e:5d:
                    89:ed:a9:fb:db:b1:cc:78:db:0c:ab:5b:62:24:7f:
                    61:e8:08:4f:59:ae:ba:07:2b:fb:b9:e5:e1:c1:7e:
                    c3:0b:7a:47:63:10:4c:25:6f:7c:ba:7d:60:3a:9d:
                    bf:a0:27:ad:55:47:0e:1b:d5:b4:5b:bf:d0:d4:43:
                    5b:1f:8d:24:15:42:40:fd:b3:03:b0:ad:df:72:01:
                    18:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:FB:50:69:79:1B:18:6C:9E:5A:CF:B0:8E:FB:97:A2:39:A4:62:6F
            X509v3 Authority Key Identifier:
                keyid:56:9F:B5:6E:DD:B1:6A:77:64:FB:31:0D:37:2E:17:88:54:82:83:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91878B3/28355950D4BE11F0A3DEE216C4F9AE02/Vp-1bt2xandk-zENNy4XiFSCg5k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vp-1bt2xandk-zENNy4XiFSCg5k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91878B3/28355950D4BE11F0A3DEE216C4F9AE02/Vp-1bt2xandk-zENNy4XiFSCg5k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:9c:84:f6:91:37:18:af:62:a0:54:f7:cd:f0:c8:40:14:81:
         dd:84:4c:c0:01:27:bd:19:9c:91:a7:41:ca:62:5f:dc:f5:d7:
         32:ba:ab:a6:e1:3e:b7:c2:32:58:25:a3:2c:8d:52:e8:a0:8f:
         94:ea:d4:d9:1a:13:8e:df:80:d7:d7:cc:de:b5:fc:36:e5:fa:
         5d:b1:1b:3a:8e:a3:11:6f:90:7a:5f:3c:22:fc:3d:53:67:67:
         f5:e0:49:9c:6b:4a:a6:c3:cc:81:e5:71:75:58:22:1b:0a:1d:
         57:66:88:1f:b9:b1:91:f9:a3:50:56:23:2c:17:8a:6c:16:a8:
         2b:0c:c4:61:a2:54:28:b3:48:bd:37:2b:4c:1c:0c:97:f6:e4:
         d3:ae:04:0d:b0:5c:53:3f:77:f0:2b:bf:ac:9a:c8:2a:01:a3:
         59:c8:fd:4b:50:73:82:16:6d:13:42:cb:5c:44:97:02:c2:71:
         44:1e:af:df:9c:e4:fd:a5:c5:f4:9a:0a:be:ec:ad:98:34:4d:
         51:c0:a0:97:f0:2b:ec:ea:c7:43:55:b3:7e:44:33:19:5f:f9:
         c7:7e:f6:5a:2e:8b:75:5b:ba:f4:4c:79:dc:f7:8f:5a:b9:5b:
         81:21:8c:cc:4c:6d:10:9d:e7:78:da:47:45:a4:8e:ac:36:47:
         d3:c3:33:5a
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
NzhCMzExMC8GA1UEBRMoNTY5RkI1NkVEREIxNkE3NzY0RkIzMTBEMzcyRTE3ODg1
NDgyODM5OTAeFw0yNjAzMjUwNzQ0MTFaFw0yNjA0MDEwNzQ0MTFaMBgxFjAUBgNV
BAMTDTY5YzM5MjRjLWMzZGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCfa13C3L/QVWgVARYX0ekgMEtTSjmsqRuTHzx3y00Ws2UssxZNxoLA3HsEzj37
gqaBQ3sIjHgqROUVJoZMuWXTtVZBuYul0LOwXBT8LqSNF/0Y4CrkSruViByubhWE
n6DgzJJwZQjb1eBdmonQdcCZYqxq2aYNgdtsTIC6LwpkC6fydKimj3nqvhYXAD3W
GI9i6nlo2reLXM2vb+vVzmASUyE71Njkkp8JBohvxqCs7Tg+XYntqfvbscx42wyr
W2Ikf2HoCE9ZrroHK/u55eHBfsMLekdjEEwlb3y6fWA6nb+gJ61VRw4b1bRbv9DU
Q1sfjSQVQkD9swOwrd9yARjjAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU2ftQaXkb
GGyeWs+wjvuXojmkYm8wHwYDVR0jBBgwFoAUVp+1bt2xandk+zENNy4XiFSCg5kw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3OEIzLzI4MzU1OTUwRDRC
RTExRjBBM0RFRTIxNkM0RjlBRTAyL1ZwLTFidDJ4YW5kay16RU5OeTRYaUZTQ2c1
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvVnAtMWJ0MnhhbmRrLXpFTk55NFhpRlNDZzVrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3
OEIzLzI4MzU1OTUwRDRCRTExRjBBM0RFRTIxNkM0RjlBRTAyL1ZwLTFidDJ4YW5k
ay16RU5OeTRYaUZTQ2c1ay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA+nIT2kTcYr2KgVPfN8MhAFIHdhEzAASe9GZyRp0HKYl/c9dcyuqum4T63wjJY
JaMsjVLooI+U6tTZGhOO34DX18zetfw25fpdsRs6jqMRb5B6Xzwi/D1TZ2f14Emc
a0qmw8yB5XF1WCIbCh1XZogfubGR+aNQViMsF4psFqgrDMRholQos0i9NytMHAyX
9uTTrgQNsFxTP3fwK7+smsgqAaNZyP1LUHOCFm0TQstcRJcCwnFEHq/fnOT9pcX0
mgq+7K2YNE1RwKCX8Cvs6sdDVbN+RDMZX/nHfvZaLot1W7r0THnc949auVuBIYzM
TG0Qned42kdFpI6sNkfTwzNa
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:38:16 2026 by rpki-client