Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft
File:                     vaPoqCMceH9rfxi8FGuV-1wDjtk.mft (raw, json)
Hash identifier:          3Y0Y1jXYVCxTL2FVJ9uHGc2DfaS39MjonuLY/zbTuUo=
Subject key identifier:   12:C9:77:27:B8:58:88:29:66:70:A8:22:09:0F:F5:F2:3F:4F:88:F2
Authority key identifier: BD:A3:E8:A8:23:1C:78:7F:6B:7F:18:BC:14:6B:95:FB:5C:03:8E:D9
Certificate issuer:       /CN=A91AE8D7/serialNumber=BDA3E8A8231C787F6B7F18BC146B95FB5C038ED9
Certificate serial:       C6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vaPoqCMceH9rfxi8FGuV-1wDjtk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft
Manifest number:          C6
Signing time:             Wed 25 Mar 2026 06:03:27 +0000
Manifest this update:     Wed 25 Mar 2026 06:03:26 +0000
Manifest next update:     Wed 01 Apr 2026 06:03:26 +0000
Files and hashes:         1: vaPoqCMceH9rfxi8FGuV-1wDjtk.crl (hash: EzxtcxQW+IvgJrRAc6p4W9bA2KB+qU8sSeoeWv4FOaQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.crl
                          rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vaPoqCMceH9rfxi8FGuV-1wDjtk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:03:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 198 (0xc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE8D7, serialNumber=BDA3E8A8231C787F6B7F18BC146B95FB5C038ED9
        Validity
            Not Before: Mar 25 06:03:26 2026 GMT
            Not After : Apr  1 06:03:26 2026 GMT
        Subject: CN=69c37aaf-6a79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:38:63:2b:58:74:fd:09:71:c3:4d:b7:08:9f:
                    ca:5f:02:cf:a6:9f:50:aa:39:2b:f4:d3:23:23:c1:
                    a0:86:25:20:14:04:2e:27:22:43:65:2e:d8:39:63:
                    85:6d:97:5c:df:ab:58:30:e9:a6:d0:c0:56:47:17:
                    a3:5d:25:26:62:73:9a:1b:15:5a:2e:52:a4:71:94:
                    8f:eb:6a:6c:c6:6d:4f:b4:8a:16:1a:d9:ac:43:fc:
                    2f:46:a9:ef:b7:e4:8f:1e:ad:ef:87:2f:e3:05:0a:
                    03:59:5c:2d:fe:80:57:ad:3c:3f:67:56:bb:c7:85:
                    61:99:5b:2c:d4:3e:92:db:b3:1d:82:aa:a8:f8:1b:
                    58:3d:b8:97:6e:c2:59:48:e0:36:e1:d5:b0:d1:db:
                    9b:d6:28:98:16:1a:8c:2d:e8:de:e1:ba:bf:be:ef:
                    82:85:05:05:b7:3f:6a:5d:3f:3b:e0:b3:3f:f4:6c:
                    87:3d:9b:bb:c4:1b:b1:c1:35:33:d6:9a:46:eb:eb:
                    bf:15:d9:30:e0:32:1d:eb:f3:0f:44:0c:28:bb:ff:
                    f5:fd:eb:01:57:45:d1:70:43:c3:81:d8:b4:08:8a:
                    82:26:5d:6d:43:53:0f:2c:4c:5f:71:2e:ec:a7:63:
                    e9:93:ef:8d:b2:8f:60:fb:22:c3:ca:f9:4d:28:8c:
                    4e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:C9:77:27:B8:58:88:29:66:70:A8:22:09:0F:F5:F2:3F:4F:88:F2
            X509v3 Authority Key Identifier:
                keyid:BD:A3:E8:A8:23:1C:78:7F:6B:7F:18:BC:14:6B:95:FB:5C:03:8E:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vaPoqCMceH9rfxi8FGuV-1wDjtk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:a7:63:fc:42:26:75:c8:48:de:9e:82:41:69:45:d6:d8:69:
         b4:60:72:48:47:bf:3e:a1:12:26:7e:7c:89:bb:8a:46:9b:97:
         d5:62:cd:ad:ce:00:b1:0f:af:e2:11:50:85:17:42:07:66:18:
         90:57:1b:e9:ec:aa:77:fa:86:1c:bd:91:3d:dc:48:67:1f:61:
         9e:d5:9d:3c:c5:44:ec:8e:0f:1a:82:9e:46:b8:21:7e:6d:91:
         cc:8f:16:fb:48:db:30:93:45:1d:ae:a6:ec:1c:5d:40:ed:c5:
         80:59:ad:3f:64:96:63:ea:8b:b8:17:db:88:02:0d:22:d7:6a:
         eb:47:8a:51:27:c7:f9:a9:d6:11:7c:84:9f:83:a6:b2:02:1e:
         27:a1:b4:8a:b0:7a:dc:97:b4:fd:31:5b:3e:b3:65:ea:35:13:
         1b:15:d7:be:91:82:0e:ee:f0:2a:bc:5f:c4:af:5b:12:1d:95:
         36:7c:73:6c:86:86:99:ad:f1:df:89:6f:0b:8f:bf:ab:84:69:
         78:0e:7b:b8:80:7b:fe:9a:15:bf:41:fc:d8:74:dd:24:c8:fe:
         c6:26:6e:14:83:98:de:ff:02:24:12:00:7a:30:e1:e3:23:11:
         53:d0:7d:9a:57:c5:5e:a3:13:d0:7b:fa:51:56:ec:32:03:f3:
         72:52:28:46
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUU4RDcxMTAvBgNVBAUTKEJEQTNFOEE4MjMxQzc4N0Y2QjdGMThCQzE0NkI5NUZC
NUMwMzhFRDkwHhcNMjYwMzI1MDYwMzI2WhcNMjYwNDAxMDYwMzI2WjAYMRYwFAYD
VQQDEw02OWMzN2FhZi02YTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4zhjK1h0/Qlxw023CJ/KXwLPpp9Qqjkr9NMjI8GghiUgFAQuJyJDZS7YOWOF
bZdc36tYMOmm0MBWRxejXSUmYnOaGxVaLlKkcZSP62psxm1PtIoWGtmsQ/wvRqnv
t+SPHq3vhy/jBQoDWVwt/oBXrTw/Z1a7x4VhmVss1D6S27Mdgqqo+BtYPbiXbsJZ
SOA24dWw0dub1iiYFhqMLeje4bq/vu+ChQUFtz9qXT874LM/9GyHPZu7xBuxwTUz
1ppG6+u/Fdkw4DId6/MPRAwou//1/esBV0XRcEPDgdi0CIqCJl1tQ1MPLExfcS7s
p2Ppk++Nso9g+yLDyvlNKIxOKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBLJdye4
WIgpZnCoIgkP9fI/T4jyMB8GA1UdIwQYMBaAFL2j6KgjHHh/a38YvBRrlftcA47Z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRThENy80QjAxQzRBNkY5
M0YxMUVGQjdFQUI0MjVDNEY5QUUwMi92YVBvcUNNY2VIOXJmeGk4Rkd1Vi0xd0Rq
dGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3ZhUG9xQ01jZUg5cmZ4aThGR3VWLTF3RGp0ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RThENy80QjAxQzRBNkY5M0YxMUVGQjdFQUI0MjVDNEY5QUUwMi92YVBvcUNNY2VI
OXJmeGk4Rkd1Vi0xd0RqdGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWadj/EImdchI3p6CQWlF1thptGBySEe/PqESJn58ibuKRpuX1WLNrc4AsQ+v
4hFQhRdCB2YYkFcb6eyqd/qGHL2RPdxIZx9hntWdPMVE7I4PGoKeRrghfm2RzI8W
+0jbMJNFHa6m7BxdQO3FgFmtP2SWY+qLuBfbiAINItdq60eKUSfH+anWEXyEn4Om
sgIeJ6G0irB63Je0/TFbPrNl6jUTGxXXvpGCDu7wKrxfxK9bEh2VNnxzbIaGma3x
34lvC4+/q4RpeA57uIB7/poVv0H82HTdJMj+xiZuFIOY3v8CJBIAejDh4yMRU9B9
mlfFXqMT0Hv6UVbsMgPzclIoRg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:41:44 2026 by rpki-client