Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.mft
File:                     vttNMcgBx4se-jSHY50DVayRNUs.mft (raw, json)
Hash identifier:          ETyzKWu1VuTC/1CsYJpO/uFacQLs/slshVOEA43LjHI=
Subject key identifier:   42:24:B0:9A:A6:77:A3:D1:3B:73:8A:DE:C3:76:A2:83:9C:28:2C:99
Authority key identifier: BE:DB:4D:31:C8:01:C7:8B:1E:FA:34:87:63:9D:03:55:AC:91:35:4B
Certificate issuer:       /CN=A91CB063/serialNumber=BEDB4D31C801C78B1EFA3487639D0355AC91354B
Certificate serial:       F2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vttNMcgBx4se-jSHY50DVayRNUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.mft
Manifest number:          E7
Signing time:             Wed 25 Mar 2026 05:47:09 +0000
Manifest this update:     Wed 25 Mar 2026 05:47:09 +0000
Manifest next update:     Wed 01 Apr 2026 05:47:09 +0000
Files and hashes:         1: vttNMcgBx4se-jSHY50DVayRNUs.crl (hash: /0co+m6enpoKJCG0ZuFRXFh1mmT+FeZEi5RkCO6iMek=)
                          2: D99266FE4F7911F095AB2D46C4F9AE02.roa (hash: S7S5igmQvKLW0ck787Ok4dnnBzff6qmeN+pto8WjXmE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.crl
                          rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vttNMcgBx4se-jSHY50DVayRNUs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:47:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 242 (0xf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB063, serialNumber=BEDB4D31C801C78B1EFA3487639D0355AC91354B
        Validity
            Not Before: Mar 25 05:47:09 2026 GMT
            Not After : Apr  1 05:47:09 2026 GMT
        Subject: CN=69c376dd-7a78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7f:fc:45:de:01:7d:97:8d:02:8f:d4:ca:45:
                    d5:d5:89:0b:95:71:20:7f:c7:e2:34:cb:18:bc:4d:
                    6b:c8:6c:15:3b:7f:50:62:83:58:dc:31:c5:1a:8b:
                    ad:6d:93:62:be:26:9f:52:17:b8:01:60:a6:0d:b2:
                    4b:09:ad:f1:1d:9d:35:43:6f:c6:b7:49:eb:d2:d6:
                    cb:86:f0:85:19:2e:88:bd:38:7a:a1:19:b6:70:92:
                    71:2f:67:66:ba:5a:35:cb:65:9c:4c:4c:0d:4c:5b:
                    dc:fd:ee:5c:f3:43:ac:ce:0c:85:bc:fc:27:3b:12:
                    e3:ac:30:ac:57:7f:bc:10:93:c4:f5:c5:34:94:ac:
                    f4:45:d5:5a:b6:cc:d7:42:de:5d:c6:76:02:f0:73:
                    1b:45:7c:30:33:43:61:78:67:e8:a9:19:bd:2e:a0:
                    0c:18:28:eb:6f:d4:84:28:fc:54:65:17:ac:e0:74:
                    df:4d:2d:0e:3e:0d:6a:f9:03:10:d1:e3:6a:8a:16:
                    c1:bd:3d:da:2f:de:fe:8e:33:58:0c:f6:b6:b9:10:
                    8e:4a:73:76:37:fd:ea:e8:fd:e9:4d:03:f8:e4:a8:
                    fb:1e:6e:33:db:5c:62:ae:07:ed:09:1c:61:ca:21:
                    b9:1b:b3:68:da:fa:59:7f:ff:11:10:89:12:f9:c3:
                    5b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:24:B0:9A:A6:77:A3:D1:3B:73:8A:DE:C3:76:A2:83:9C:28:2C:99
            X509v3 Authority Key Identifier:
                keyid:BE:DB:4D:31:C8:01:C7:8B:1E:FA:34:87:63:9D:03:55:AC:91:35:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vttNMcgBx4se-jSHY50DVayRNUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:f6:af:10:58:48:b5:0d:9e:1e:91:60:d9:e6:ad:ca:34:79:
         72:ee:c4:88:de:a0:45:95:24:62:64:e2:d7:61:1d:8a:f8:e8:
         a2:03:5d:81:d7:3f:fb:20:bc:41:0e:7c:ac:98:a6:a0:0b:b8:
         fe:65:b9:59:6a:e4:b9:03:20:d4:fe:a3:a1:53:bc:44:62:8d:
         56:a7:63:35:19:1e:8b:a4:69:16:d4:38:e3:ef:a3:37:4c:93:
         52:b7:6a:79:13:ba:e2:05:29:da:6a:53:77:75:f3:5c:81:b5:
         23:d8:d7:47:37:11:29:ff:52:c8:b1:f5:d5:5f:b8:8c:85:82:
         e2:df:33:39:22:8c:a1:3e:39:3a:01:39:87:77:bb:21:48:e9:
         6c:73:f8:eb:e5:5f:5a:9b:31:d3:0f:2c:79:14:68:7a:44:8c:
         ac:42:4b:01:44:16:30:45:d7:a8:32:9e:56:cf:db:87:32:7c:
         9a:16:d4:ed:8a:a1:a0:bf:73:db:fa:fa:78:fc:88:cc:f8:7d:
         9a:d8:ca:13:c0:f2:c9:a4:eb:3f:84:23:47:f1:b7:6f:a0:cb:
         78:a6:36:e3:bd:8a:57:d1:44:21:6e:b4:87:6b:86:36:65:66:
         32:d5:e8:9a:51:c3:82:6e:56:f2:03:3b:85:46:09:60:dd:e0:
         a5:f0:cf:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:43:35 2026 by rpki-client