Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft
File:                     VA3axmjYtQyWYFcSGVqYihytnj8.mft (raw, json)
Hash identifier:          d0D6FJ5NRw0wBY1h6QddyJFzlEJAio4fdlDW3WsKtLc=
Subject key identifier:   84:40:52:91:9B:F1:04:1E:64:CB:EC:41:48:05:4D:34:11:C6:0A:21
Authority key identifier: 54:0D:DA:C6:68:D8:B5:0C:96:60:57:12:19:5A:98:8A:1C:AD:9E:3F
Certificate issuer:       /CN=A91FF74B/serialNumber=540DDAC668D8B50C96605712195A988A1CAD9E3F
Certificate serial:       080D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VA3axmjYtQyWYFcSGVqYihytnj8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft
Manifest number:          07F1
Signing time:             Tue 24 Mar 2026 21:06:48 +0000
Manifest this update:     Tue 24 Mar 2026 21:06:48 +0000
Manifest next update:     Tue 31 Mar 2026 21:06:48 +0000
Files and hashes:         1: VA3axmjYtQyWYFcSGVqYihytnj8.crl (hash: yFL1K0udpTjcSKYsDu66I6CTQsrnJwFk1sW7bZgBTv0=)
                          2: 4CA8BBE232CF11EBADB5497FC4F9AE02.roa (hash: HQuRdESoi7V9MH0qlb4VprCHquKyLIPG4oL00SZEHfc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.crl
                          rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VA3axmjYtQyWYFcSGVqYihytnj8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:06:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2061 (0x80d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF74B, serialNumber=540DDAC668D8B50C96605712195A988A1CAD9E3F
        Validity
            Not Before: Mar 24 21:06:48 2026 GMT
            Not After : Mar 31 21:06:48 2026 GMT
        Subject: CN=69c2fce8-02ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:64:ae:10:1b:72:87:a4:36:fa:54:cf:ce:c4:
                    ab:86:19:db:18:31:f2:19:53:28:9f:da:99:0f:83:
                    d9:76:bc:ac:e8:2c:d3:a1:66:91:e8:9f:e6:a4:09:
                    f6:ea:27:80:10:ce:73:3b:c8:db:05:eb:e7:ad:d3:
                    b2:7b:3b:97:ef:4d:f9:f8:23:8e:a2:df:81:1b:fd:
                    f4:89:56:ce:85:7f:78:54:b4:5e:5b:57:f8:38:41:
                    70:2e:3f:70:58:d4:ea:2b:e2:f4:b2:d6:f4:ef:33:
                    54:18:eb:95:06:7b:70:f7:94:85:06:ec:bf:3d:c0:
                    cd:dc:1a:63:22:29:cf:3f:d9:48:b5:07:98:1f:ad:
                    65:05:d3:2e:1b:c0:1b:40:25:27:c9:3c:79:89:49:
                    d3:ab:a7:04:22:13:92:c7:16:02:96:1d:8e:02:c3:
                    b1:c0:65:fc:0c:9a:15:75:32:3b:f1:e3:e8:3b:42:
                    78:0f:65:69:70:b4:ef:d0:44:b4:2e:b5:5b:05:0a:
                    80:a7:55:1d:16:05:56:c5:26:b7:87:fb:6e:c5:03:
                    82:e9:49:f0:cc:e6:d4:4a:a8:08:bb:5e:69:71:02:
                    0c:1d:5d:52:34:46:01:8e:06:da:13:f6:87:78:83:
                    d1:56:7d:de:4e:98:67:7f:82:ae:5c:e7:32:ee:0d:
                    27:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:40:52:91:9B:F1:04:1E:64:CB:EC:41:48:05:4D:34:11:C6:0A:21
            X509v3 Authority Key Identifier:
                keyid:54:0D:DA:C6:68:D8:B5:0C:96:60:57:12:19:5A:98:8A:1C:AD:9E:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VA3axmjYtQyWYFcSGVqYihytnj8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:d2:5a:e1:0f:1b:50:f4:f6:06:a8:5d:ab:08:8c:96:66:6d:
         0f:27:fa:a9:23:18:c3:4a:b2:48:d1:68:21:6b:2e:d3:4a:36:
         d6:3d:92:83:a4:43:07:a7:97:82:38:92:e0:03:e0:c6:33:e8:
         1f:12:49:3a:91:90:e3:d1:5c:3e:a0:b2:af:02:2e:a4:a7:37:
         ca:da:47:1d:6e:e9:17:d7:4b:74:87:4c:0e:b0:33:e0:f2:e9:
         f6:12:a9:cd:fc:f9:bf:b1:67:eb:90:9d:4d:a5:f8:68:35:7c:
         60:5f:a3:f7:e2:94:7e:39:0f:31:10:d3:a9:fc:07:cc:ab:fc:
         fd:99:69:98:62:e3:0e:63:22:98:03:c8:10:91:3d:80:a2:45:
         37:35:4f:b2:a9:9f:b2:2d:17:c8:7d:ee:66:64:02:ab:3a:d2:
         fc:5d:bb:b4:91:f3:66:7c:4b:86:70:17:39:fd:82:08:eb:1b:
         a9:d4:d6:67:3b:5b:49:ec:3a:65:cd:6a:9d:31:a2:88:69:13:
         25:39:e6:69:60:dd:e9:f3:d8:e5:05:38:d5:a1:8f:c0:9f:8d:
         13:f6:11:fd:d7:b4:b8:c0:72:c1:7a:ed:61:ff:f9:bb:47:8b:
         ad:6d:93:cc:2e:93:6f:9e:34:82:51:03:7f:88:47:ea:fe:32:
         18:c4:a3:db
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCA0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkY3NEIxMTAvBgNVBAUTKDU0MEREQUM2NjhEOEI1MEM5NjYwNTcxMjE5NUE5ODhB
MUNBRDlFM0YwHhcNMjYwMzI0MjEwNjQ4WhcNMjYwMzMxMjEwNjQ4WjAYMRYwFAYD
VQQDEw02OWMyZmNlOC0wMmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1GSuEBtyh6Q2+lTPzsSrhhnbGDHyGVMon9qZD4PZdrys6CzToWaR6J/mpAn2
6ieAEM5zO8jbBevnrdOyezuX7035+COOot+BG/30iVbOhX94VLReW1f4OEFwLj9w
WNTqK+L0stb07zNUGOuVBntw95SFBuy/PcDN3BpjIinPP9lItQeYH61lBdMuG8Ab
QCUnyTx5iUnTq6cEIhOSxxYClh2OAsOxwGX8DJoVdTI78ePoO0J4D2VpcLTv0ES0
LrVbBQqAp1UdFgVWxSa3h/tuxQOC6UnwzObUSqgIu15pcQIMHV1SNEYBjgbaE/aH
eIPRVn3eTphnf4KuXOcy7g0nTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIRAUpGb
8QQeZMvsQUgFTTQRxgohMB8GA1UdIwQYMBaAFFQN2sZo2LUMlmBXEhlamIocrZ4/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjc0Qi8wOTQ0ODlGRTMy
Q0UxMUVCOUMxNDNGN0VDNEY5QUUwMi9WQTNheG1qWXRReVdZRmNTR1ZxWWloeXRu
ajguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZBM2F4bWpZdFF5V1lGY1NHVnFZaWh5dG5qOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
Rjc0Qi8wOTQ0ODlGRTMyQ0UxMUVCOUMxNDNGN0VDNEY5QUUwMi9WQTNheG1qWXRR
eVdZRmNTR1ZxWWloeXRuajgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAI9Ja4Q8bUPT2BqhdqwiMlmZtDyf6qSMYw0qySNFoIWsu00o21j2Sg6RDB6eX
gjiS4APgxjPoHxJJOpGQ49FcPqCyrwIupKc3ytpHHW7pF9dLdIdMDrAz4PLp9hKp
zfz5v7Fn65CdTaX4aDV8YF+j9+KUfjkPMRDTqfwHzKv8/ZlpmGLjDmMimAPIEJE9
gKJFNzVPsqmfsi0XyH3uZmQCqzrS/F27tJHzZnxLhnAXOf2CCOsbqdTWZztbSew6
Zc1qnTGiiGkTJTnmaWDd6fPY5QU41aGPwJ+NE/YR/de0uMBywXrtYf/5u0eLrW2T
zC6Tb540glEDf4hH6v4yGMSj2w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:14:38 2026 by rpki-client