Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7AC5/A3EB5C00C0D511EA908C0178C4F9AE02/vz-8DaluLlE6qliBLGlLzQe43Xc.mft
File:                     vz-8DaluLlE6qliBLGlLzQe43Xc.mft (raw, json)
Hash identifier:          yJlx827RkPysF8tQKAsppPSi6C7fAdvwiN8P6Wd7Slc=
Subject key identifier:   CA:64:FD:61:89:25:E7:87:A3:8A:90:5B:BD:6F:6C:B5:0C:FD:53:22
Authority key identifier: BF:3F:BC:0D:A9:6E:2E:51:3A:AA:58:81:2C:69:4B:CD:07:B8:DD:77
Certificate issuer:       /CN=A91C7AC5/serialNumber=BF3FBC0DA96E2E513AAA58812C694BCD07B8DD77
Certificate serial:       0939
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vz-8DaluLlE6qliBLGlLzQe43Xc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7AC5/A3EB5C00C0D511EA908C0178C4F9AE02/vz-8DaluLlE6qliBLGlLzQe43Xc.mft
Manifest number:          0926
Signing time:             Tue 24 Mar 2026 20:01:31 +0000
Manifest this update:     Tue 24 Mar 2026 20:01:31 +0000
Manifest next update:     Tue 31 Mar 2026 20:01:31 +0000
Files and hashes:         1: vz-8DaluLlE6qliBLGlLzQe43Xc.crl (hash: NbGdDnSnEx+MWgw9xWs7/JupkqMMP0eG4KXzwIO9lgA=)
                          2: 5BC42F286E9F11EC90A66E2BC4F9AE02.roa (hash: Ra6aDzkRJ9CvQ2Xe9bv2r/5IA66OVXcErWzz8l4k4Jo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7AC5/A3EB5C00C0D511EA908C0178C4F9AE02/vz-8DaluLlE6qliBLGlLzQe43Xc.crl
                          rsync://rpki.apnic.net/member_repository/A91C7AC5/A3EB5C00C0D511EA908C0178C4F9AE02/vz-8DaluLlE6qliBLGlLzQe43Xc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vz-8DaluLlE6qliBLGlLzQe43Xc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 20:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2361 (0x939)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7AC5, serialNumber=BF3FBC0DA96E2E513AAA58812C694BCD07B8DD77
        Validity
            Not Before: Mar 24 20:01:31 2026 GMT
            Not After : Mar 31 20:01:31 2026 GMT
        Subject: CN=69c2ed9b-89e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:82:d0:09:d7:a3:dc:56:cf:16:81:29:3b:85:
                    d0:ec:49:8b:01:36:ea:be:e5:25:1a:b8:c2:60:6e:
                    97:7d:a3:bb:47:e9:40:f1:1e:0c:4f:ad:9a:77:22:
                    0f:6b:a8:0f:52:a4:34:72:9a:4c:4f:b8:f0:ef:04:
                    40:41:ce:28:79:e9:54:b4:84:bd:14:b5:5e:f6:dc:
                    ae:e4:c6:27:8a:3f:26:23:80:be:42:91:36:dd:e6:
                    bb:1d:3f:8e:c2:d5:08:72:72:12:41:18:08:13:31:
                    55:f3:49:9e:26:72:21:c1:f0:81:d3:14:21:dd:3a:
                    fb:25:19:65:2a:d7:0e:45:87:99:58:03:0f:d5:d1:
                    ce:8e:bf:ee:0b:e8:cb:93:36:0e:26:db:fe:76:45:
                    de:ef:17:7f:17:31:83:ee:d3:d1:59:8f:d7:e0:f4:
                    d0:73:b4:f9:ce:99:36:e2:6b:11:04:e0:bd:fb:e8:
                    5a:40:1d:68:21:5c:ca:0e:f5:68:be:f7:3c:b1:bf:
                    fe:cf:c1:a4:a8:a4:de:13:a6:2b:78:28:94:aa:c7:
                    68:02:d8:74:b7:77:13:42:df:87:bc:30:84:3f:6e:
                    5f:b7:9d:d9:da:9b:36:f1:1d:0f:df:c8:86:4d:cb:
                    0b:3d:75:47:32:a6:b8:ab:02:c5:f7:18:ae:0e:dc:
                    a1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:64:FD:61:89:25:E7:87:A3:8A:90:5B:BD:6F:6C:B5:0C:FD:53:22
            X509v3 Authority Key Identifier:
                keyid:BF:3F:BC:0D:A9:6E:2E:51:3A:AA:58:81:2C:69:4B:CD:07:B8:DD:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7AC5/A3EB5C00C0D511EA908C0178C4F9AE02/vz-8DaluLlE6qliBLGlLzQe43Xc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vz-8DaluLlE6qliBLGlLzQe43Xc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7AC5/A3EB5C00C0D511EA908C0178C4F9AE02/vz-8DaluLlE6qliBLGlLzQe43Xc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:bf:76:d1:09:a4:ba:8f:a5:cd:a9:a5:9d:60:6e:9a:52:c4:
         30:67:a8:37:11:99:2f:1f:e3:2e:46:97:ed:d6:12:f5:71:69:
         ae:d8:ba:9e:32:e8:6e:fa:69:d0:25:95:78:cd:e3:6e:2d:ff:
         7f:f4:b1:5b:51:82:b0:2d:f8:9e:5d:32:c7:7f:9a:38:9d:48:
         aa:03:1f:01:45:fe:8f:46:49:f0:31:c9:53:08:bd:46:b4:bc:
         09:eb:1e:d2:0d:ad:41:51:4c:90:dc:4c:0d:2a:87:c5:bf:1e:
         d7:6a:1d:8d:86:52:62:5a:c2:25:8b:bf:c7:4b:16:62:33:29:
         f4:81:b1:fd:f7:7a:89:7c:2e:d9:01:1c:35:11:28:57:c8:1b:
         3e:d5:92:b4:b7:bd:58:94:6c:db:7b:13:ba:a9:b1:7c:1c:4b:
         9c:ff:8f:b2:0b:36:2c:0b:d6:59:d6:d4:95:69:1d:07:63:7e:
         69:d0:fb:0b:58:aa:29:80:f0:49:15:c2:11:be:ab:46:9f:22:
         db:2f:16:87:65:a3:f6:9e:15:71:b7:aa:a1:27:e0:d1:af:a4:
         77:83:83:a3:dc:1f:d4:24:e8:f8:ed:ca:cd:c0:8a:61:66:0d:
         0d:da:36:ef:72:f1:70:8e:f8:78:27:6a:b7:34:06:4a:40:45:
         39:8a:47:71
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCTkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzdBQzUxMTAvBgNVBAUTKEJGM0ZCQzBEQTk2RTJFNTEzQUFBNTg4MTJDNjk0QkNE
MDdCOERENzcwHhcNMjYwMzI0MjAwMTMxWhcNMjYwMzMxMjAwMTMxWjAYMRYwFAYD
VQQDEw02OWMyZWQ5Yi04OWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu4LQCdej3FbPFoEpO4XQ7EmLATbqvuUlGrjCYG6XfaO7R+lA8R4MT62adyIP
a6gPUqQ0cppMT7jw7wRAQc4oeelUtIS9FLVe9tyu5MYnij8mI4C+QpE23ea7HT+O
wtUIcnISQRgIEzFV80meJnIhwfCB0xQh3Tr7JRllKtcORYeZWAMP1dHOjr/uC+jL
kzYOJtv+dkXe7xd/FzGD7tPRWY/X4PTQc7T5zpk24msRBOC9++haQB1oIVzKDvVo
vvc8sb/+z8GkqKTeE6YreCiUqsdoAth0t3cTQt+HvDCEP25ft53Z2ps28R0P38iG
TcsLPXVHMqa4qwLF9xiuDtyh6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMpk/WGJ
JeeHo4qQW71vbLUM/VMiMB8GA1UdIwQYMBaAFL8/vA2pbi5ROqpYgSxpS80HuN13
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0FDNS9BM0VCNUMwMEMw
RDUxMUVBOTA4QzAxNzhDNEY5QUUwMi92ei04RGFsdUxsRTZxbGlCTEdsTHpRZTQz
WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Z6LThEYWx1TGxFNnFsaUJMR2xMelFlNDNYYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
N0FDNS9BM0VCNUMwMEMwRDUxMUVBOTA4QzAxNzhDNEY5QUUwMi92ei04RGFsdUxs
RTZxbGlCTEdsTHpRZTQzWGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAwL920Qmkuo+lzamlnWBumlLEMGeoNxGZLx/jLkaX7dYS9XFprti6njLobvpp
0CWVeM3jbi3/f/SxW1GCsC34nl0yx3+aOJ1IqgMfAUX+j0ZJ8DHJUwi9RrS8Cese
0g2tQVFMkNxMDSqHxb8e12odjYZSYlrCJYu/x0sWYjMp9IGx/fd6iXwu2QEcNREo
V8gbPtWStLe9WJRs23sTuqmxfBxLnP+Psgs2LAvWWdbUlWkdB2N+adD7C1iqKYDw
SRXCEb6rRp8i2y8Wh2Wj9p4VcbeqoSfg0a+kd4ODo9wf1CTo+O3KzcCKYWYNDdo2
73LxcI74eCdqtzQGSkBFOYpHcQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:40:14 2026 by rpki-client