Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft
File:                     VktpF48mnvuWt2kW94FwdU6PDIc.mft (raw, json)
Hash identifier:          xfo7yeZkFNXGlIUmdDZ9YD/sAceKridJebJ+g1M2HF0=
Subject key identifier:   A1:73:BC:A9:FA:4B:9B:E4:FE:B0:CC:FF:87:BD:98:B7:A1:B0:8A:B8
Authority key identifier: 56:4B:69:17:8F:26:9E:FB:96:B7:69:16:F7:81:70:75:4E:8F:0C:87
Certificate issuer:       /CN=A91A99C5/serialNumber=564B69178F269EFB96B76916F78170754E8F0C87
Certificate serial:       92
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VktpF48mnvuWt2kW94FwdU6PDIc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft
Manifest number:          89
Signing time:             Wed 25 Mar 2026 06:49:48 +0000
Manifest this update:     Wed 25 Mar 2026 06:49:48 +0000
Manifest next update:     Wed 01 Apr 2026 06:49:48 +0000
Files and hashes:         1: VktpF48mnvuWt2kW94FwdU6PDIc.crl (hash: dw1IprXQePf7z1BGaG7TTXkEQDDzyzVPPNMJntI/h0Q=)
                          2: AE31872C5DBD11F083DD7F61C4F9AE02.roa (hash: PtmJapetaAUxJ5KEUkr9vfhR8x3TFcjZY4x2L67+TqA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.crl
                          rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VktpF48mnvuWt2kW94FwdU6PDIc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:49:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146 (0x92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A99C5, serialNumber=564B69178F269EFB96B76916F78170754E8F0C87
        Validity
            Not Before: Mar 25 06:49:48 2026 GMT
            Not After : Apr  1 06:49:48 2026 GMT
        Subject: CN=69c3858c-ca38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:0d:63:4a:a9:26:80:55:ac:13:49:d7:0b:ac:
                    c1:42:8c:f2:b6:eb:e6:df:52:b3:8c:90:d3:a3:e0:
                    92:b9:78:79:07:38:02:ea:5a:d2:39:d7:c7:c2:71:
                    00:5c:69:16:bd:14:f9:f1:33:d2:4e:a2:fc:81:d8:
                    99:0a:04:17:0b:47:42:ef:29:27:d5:51:6a:e0:78:
                    ba:48:eb:2b:c4:38:6f:26:95:0d:57:76:f2:28:9b:
                    4d:c0:4a:48:37:9c:95:84:30:74:98:f9:98:a5:29:
                    6a:10:07:2d:b5:35:94:74:46:3d:bb:1c:18:c2:86:
                    d6:76:62:b8:26:8a:a3:44:cb:32:24:83:9c:54:ae:
                    12:be:25:4c:55:62:30:09:89:5d:36:11:af:2c:9f:
                    17:6e:fa:10:a4:79:df:2b:d7:ce:a1:3f:a3:58:54:
                    ed:6b:fc:a0:d7:cb:8d:05:28:69:c3:f1:26:e6:22:
                    86:30:b9:0e:56:03:6b:9b:82:30:67:7d:50:db:95:
                    02:0a:cb:40:d7:1d:95:d7:dc:f1:7d:26:37:da:81:
                    c5:c8:49:45:8a:1f:24:94:d4:7f:54:18:4a:d0:87:
                    0a:3c:77:a7:23:72:35:c1:f7:ae:9d:d6:87:91:e5:
                    8b:8a:52:0e:3a:78:95:4d:08:52:e4:a0:03:e7:d5:
                    cf:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:73:BC:A9:FA:4B:9B:E4:FE:B0:CC:FF:87:BD:98:B7:A1:B0:8A:B8
            X509v3 Authority Key Identifier:
                keyid:56:4B:69:17:8F:26:9E:FB:96:B7:69:16:F7:81:70:75:4E:8F:0C:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VktpF48mnvuWt2kW94FwdU6PDIc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:52:43:93:56:1d:9b:93:a1:67:0e:cb:f5:98:f5:0f:95:e3:
         ef:ea:77:53:95:44:cd:7b:a4:48:7f:ea:d1:c1:05:16:7f:71:
         59:0b:92:51:bc:2a:ea:36:a5:74:c4:4f:35:b8:b8:83:b4:c2:
         67:8d:22:bb:67:b1:1a:fc:d6:83:ae:7d:c7:05:5e:62:91:7e:
         aa:1a:a2:e7:7e:ec:43:62:66:b0:e9:03:86:8f:86:ff:5d:83:
         10:c5:a2:43:48:64:82:4a:57:48:0a:17:dd:3c:1c:f9:84:7f:
         4e:86:99:d8:d6:58:1b:9c:55:89:6c:9f:a6:ad:61:13:f7:79:
         07:da:79:17:e4:5d:0a:2b:e8:be:b7:05:3a:92:e0:7c:30:7b:
         f1:8f:23:20:ea:b4:99:c8:01:04:91:e7:72:14:67:96:d8:55:
         8f:05:5c:81:a1:0c:95:7b:88:1b:27:f8:48:48:d3:d8:60:99:
         28:9f:4a:39:8d:71:69:e0:ef:44:c7:8a:a2:d7:78:30:4b:94:
         c8:14:69:a7:2d:05:c5:85:7d:3b:e6:7a:02:a4:49:fb:ef:5f:
         ad:a5:32:cf:35:59:9c:2f:0a:db:7b:d3:62:52:69:d1:ea:62:
         40:93:a2:6e:f2:bb:e7:2c:5b:28:47:c6:82:ec:49:62:c1:76:
         83:17:8f:a2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTk5QzUxMTAvBgNVBAUTKDU2NEI2OTE3OEYyNjlFRkI5NkI3NjkxNkY3ODE3MDc1
NEU4RjBDODcwHhcNMjYwMzI1MDY0OTQ4WhcNMjYwNDAxMDY0OTQ4WjAYMRYwFAYD
VQQDEw02OWMzODU4Yy1jYTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlw1jSqkmgFWsE0nXC6zBQozytuvm31KzjJDTo+CSuXh5BzgC6lrSOdfHwnEA
XGkWvRT58TPSTqL8gdiZCgQXC0dC7ykn1VFq4Hi6SOsrxDhvJpUNV3byKJtNwEpI
N5yVhDB0mPmYpSlqEActtTWUdEY9uxwYwobWdmK4JoqjRMsyJIOcVK4SviVMVWIw
CYldNhGvLJ8XbvoQpHnfK9fOoT+jWFTta/yg18uNBShpw/Em5iKGMLkOVgNrm4Iw
Z31Q25UCCstA1x2V19zxfSY32oHFyElFih8klNR/VBhK0IcKPHenI3I1wfeundaH
keWLilIOOniVTQhS5KAD59XPdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKFzvKn6
S5vk/rDM/4e9mLehsIq4MB8GA1UdIwQYMBaAFFZLaRePJp77lrdpFveBcHVOjwyH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTlDNS9GQzAxRTg3QzVE
QkIxMUYwOUFBMTc4NTBDNEY5QUUwMi9Wa3RwRjQ4bW52dVd0MmtXOTRGd2RVNlBE
SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1ZrdHBGNDhtbnZ1V3Qya1c5NEZ3ZFU2UERJYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OTlDNS9GQzAxRTg3QzVEQkIxMUYwOUFBMTc4NTBDNEY5QUUwMi9Wa3RwRjQ4bW52
dVd0MmtXOTRGd2RVNlBESWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvlJDk1Ydm5OhZw7L9Zj1D5Xj7+p3U5VEzXukSH/q0cEFFn9xWQuSUbwq6jal
dMRPNbi4g7TCZ40iu2exGvzWg659xwVeYpF+qhqi537sQ2JmsOkDho+G/12DEMWi
Q0hkgkpXSAoX3Twc+YR/ToaZ2NZYG5xViWyfpq1hE/d5B9p5F+RdCivovrcFOpLg
fDB78Y8jIOq0mcgBBJHnchRnlthVjwVcgaEMlXuIGyf4SEjT2GCZKJ9KOY1xaeDv
RMeKotd4MEuUyBRppy0FxYV9O+Z6AqRJ++9fraUyzzVZnC8K23vTYlJp0epiQJOi
bvK75yxbKEfGguxJYsF2gxePog==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:41:18 2026 by rpki-client