Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91943F0/CA6B94CC74F811EFB3427984C4F9AE02/vZJia0ALsU3kGlBTnZYPxd1h3Dc.mft
File:                     vZJia0ALsU3kGlBTnZYPxd1h3Dc.mft (raw, json)
Hash identifier:          e7lnTUF00WTcrvbKzltF0MpcJ2j7/kRyN+TRsHoUaOE=
Subject key identifier:   3A:33:82:99:6B:95:B7:5D:3E:0F:73:42:B0:FC:C2:73:00:A8:3F:61
Authority key identifier: BD:92:62:6B:40:0B:B1:4D:E4:1A:50:53:9D:96:0F:C5:DD:61:DC:37
Certificate issuer:       /CN=A91943F0/serialNumber=BD92626B400BB14DE41A50539D960FC5DD61DC37
Certificate serial:       011E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZJia0ALsU3kGlBTnZYPxd1h3Dc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91943F0/CA6B94CC74F811EFB3427984C4F9AE02/vZJia0ALsU3kGlBTnZYPxd1h3Dc.mft
Manifest number:          011E
Signing time:             Wed 25 Mar 2026 04:58:24 +0000
Manifest this update:     Wed 25 Mar 2026 04:58:24 +0000
Manifest next update:     Wed 01 Apr 2026 04:58:24 +0000
Files and hashes:         1: vZJia0ALsU3kGlBTnZYPxd1h3Dc.crl (hash: KfLCm60LB+kry3Z+fm8xpX26KegRJ6+SZtp8t08Ygew=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91943F0/CA6B94CC74F811EFB3427984C4F9AE02/vZJia0ALsU3kGlBTnZYPxd1h3Dc.crl
                          rsync://rpki.apnic.net/member_repository/A91943F0/CA6B94CC74F811EFB3427984C4F9AE02/vZJia0ALsU3kGlBTnZYPxd1h3Dc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZJia0ALsU3kGlBTnZYPxd1h3Dc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:58:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 286 (0x11e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91943F0, serialNumber=BD92626B400BB14DE41A50539D960FC5DD61DC37
        Validity
            Not Before: Mar 25 04:58:24 2026 GMT
            Not After : Apr  1 04:58:24 2026 GMT
        Subject: CN=69c36b70-2a25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c4:d9:c7:aa:23:01:b7:33:b0:3f:0b:e8:ee:
                    2a:cc:a4:14:98:8a:95:25:2e:10:6d:25:73:68:a4:
                    61:71:6b:c5:0f:cd:63:af:81:74:cc:c3:d7:9b:0d:
                    23:ef:82:54:d7:3a:54:c7:59:e1:7c:4c:e6:58:ad:
                    b6:52:cd:5f:ad:c3:6b:1f:38:08:28:5a:3c:7b:01:
                    e5:61:09:a1:48:1e:6b:62:48:b8:18:ad:74:cb:3a:
                    63:10:73:8f:85:e7:87:6b:ab:63:14:09:45:fd:04:
                    5f:76:f9:ce:2b:fe:cd:f8:e5:a6:e6:88:88:0d:e7:
                    c8:75:84:21:fc:ee:34:3b:4b:cb:7f:0c:39:de:71:
                    09:22:9c:db:52:dd:e6:81:21:be:20:c6:a2:cb:a7:
                    6d:c0:fa:38:f9:79:5d:86:2f:d6:3a:a3:20:32:a8:
                    b3:d8:0d:94:86:76:39:9b:57:22:67:60:d9:72:41:
                    36:4f:8e:2f:b7:7a:39:bd:87:2c:d9:2b:ed:32:d9:
                    a4:03:72:fc:9e:ee:41:de:6b:09:18:84:85:ad:eb:
                    fd:05:86:57:bd:7d:89:ce:51:8e:6d:fe:94:25:0e:
                    db:9e:0c:8a:0c:cb:aa:5c:23:39:a3:94:4e:dc:4e:
                    39:cd:d0:1b:31:b8:0c:88:23:37:7a:b7:ec:05:f9:
                    be:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:33:82:99:6B:95:B7:5D:3E:0F:73:42:B0:FC:C2:73:00:A8:3F:61
            X509v3 Authority Key Identifier:
                keyid:BD:92:62:6B:40:0B:B1:4D:E4:1A:50:53:9D:96:0F:C5:DD:61:DC:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91943F0/CA6B94CC74F811EFB3427984C4F9AE02/vZJia0ALsU3kGlBTnZYPxd1h3Dc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZJia0ALsU3kGlBTnZYPxd1h3Dc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91943F0/CA6B94CC74F811EFB3427984C4F9AE02/vZJia0ALsU3kGlBTnZYPxd1h3Dc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:6c:5b:26:b4:cf:73:83:9f:79:ac:d1:61:d5:de:83:6e:a1:
         63:b3:d6:d8:a4:0b:24:d3:8d:2b:01:12:68:47:9d:12:97:99:
         84:0f:d7:d2:d2:bf:91:7b:64:4c:74:a4:bb:96:f9:33:67:79:
         ab:a9:ae:08:2d:e0:ff:e1:b1:28:c6:d8:68:d2:12:bf:6e:5d:
         d1:9a:83:57:5a:63:59:ff:7f:62:58:f7:1f:40:6c:7f:ca:72:
         ca:b2:d7:a9:58:87:78:ef:49:01:09:10:19:ac:09:d5:b9:6c:
         20:b3:25:5e:79:e2:9d:98:b2:01:30:2f:0f:dd:38:c5:51:dd:
         f5:52:fb:28:ce:83:57:c5:a1:be:5a:d6:3b:05:27:98:87:ee:
         82:49:c6:6a:52:3d:85:20:f9:4a:c8:18:99:30:4e:c0:d1:99:
         e2:20:5d:28:33:1c:ad:4e:20:3a:ab:7b:19:29:23:fd:52:1a:
         2d:53:fd:22:a6:17:f7:db:0b:71:75:6a:4f:3d:ca:3e:19:8e:
         3a:9e:f8:7b:9c:0d:8f:01:87:f4:e2:82:dc:99:e5:ba:45:92:
         88:59:60:b7:7b:e8:22:af:07:e8:6e:76:9a:0a:a1:12:85:a3:
         4a:0f:96:a0:00:a8:d8:2e:80:15:d6:7e:ce:2d:b5:9d:2d:8e:
         94:3a:01:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:57:25 2026 by rpki-client