Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.mft
File:                     VB3RXhVOUI-wD9skXE528q09iB0.mft (raw, json)
Hash identifier:          A937XW1NxqCUjIQde38VG3GvWMFE3SXD8zN1OPQrOD4=
Subject key identifier:   FC:DC:A5:4D:D8:7F:94:BA:B9:90:CD:8F:73:E3:17:98:8C:62:36:A9
Authority key identifier: 54:1D:D1:5E:15:4E:50:8F:B0:0F:DB:24:5C:4E:76:F2:AD:3D:88:1D
Certificate issuer:       /CN=A911CE4A/serialNumber=541DD15E154E508FB00FDB245C4E76F2AD3D881D
Certificate serial:       77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB3RXhVOUI-wD9skXE528q09iB0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.mft
Manifest number:          75
Signing time:             Sun 01 Mar 2026 09:12:01 +0000
Manifest this update:     Sun 01 Mar 2026 09:12:00 +0000
Manifest next update:     Sun 08 Mar 2026 09:12:00 +0000
Files and hashes:         1: VB3RXhVOUI-wD9skXE528q09iB0.crl (hash: TPDnOGq04u9h02XtTSl83h+Hbq8XTaNuczZn+x2/Lbs=)
                          2: BA2C0A9E673A11F0B876713DC4F9AE02.roa (hash: iENsMSoALP99bR1N5hhDPtffTTwsxcPuKsVO6aYiFUM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.crl
                          rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB3RXhVOUI-wD9skXE528q09iB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:11:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119 (0x77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CE4A, serialNumber=541DD15E154E508FB00FDB245C4E76F2AD3D881D
        Validity
            Not Before: Mar  1 09:12:00 2026 GMT
            Not After : Mar  8 09:12:00 2026 GMT
        Subject: CN=69a402e0-7578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e5:37:9a:25:e2:9c:62:79:d6:33:1f:78:78:
                    3c:93:ef:ba:44:dc:f4:0e:f0:86:dd:db:1b:4f:95:
                    69:43:fd:49:51:03:b5:f4:95:4e:de:1a:27:01:05:
                    11:d0:4a:28:52:59:65:51:f9:df:f4:bb:1d:64:67:
                    c3:07:d6:04:e8:05:75:21:c2:e9:e2:f1:69:9c:c4:
                    2a:93:6f:b6:a8:be:3a:07:98:a4:5a:ad:fc:71:ea:
                    14:6b:a2:25:29:d2:ed:35:f2:5e:65:db:8a:d3:1a:
                    c9:f4:a5:cb:ca:0b:1a:49:c0:1e:66:d3:ed:8e:d1:
                    03:44:7d:80:42:36:e9:7b:e7:3a:b5:c9:1e:98:bd:
                    d6:b1:73:17:92:51:83:f5:b7:2f:56:0a:6f:81:53:
                    76:28:ae:1a:99:53:8c:94:b0:2d:e1:6b:9c:37:c9:
                    85:a0:21:30:43:0f:11:a9:9e:41:8f:81:f6:2b:8f:
                    c1:dc:07:af:2c:91:b9:92:ed:f7:b5:92:5f:81:18:
                    9f:db:f2:c5:24:73:17:d6:4c:0f:bb:8b:3e:81:db:
                    86:a3:c0:6b:2b:02:a6:f9:44:0d:b8:e6:d7:fc:8d:
                    a1:a7:c4:d9:c1:b1:bc:fc:bf:4e:9e:dd:e6:71:d0:
                    a1:0e:6c:f1:d1:01:36:4d:49:6f:ed:1b:85:ef:21:
                    bf:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:DC:A5:4D:D8:7F:94:BA:B9:90:CD:8F:73:E3:17:98:8C:62:36:A9
            X509v3 Authority Key Identifier:
                keyid:54:1D:D1:5E:15:4E:50:8F:B0:0F:DB:24:5C:4E:76:F2:AD:3D:88:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB3RXhVOUI-wD9skXE528q09iB0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:13:7a:32:c3:36:ec:39:e2:d0:fb:5e:0e:c7:ce:b9:9d:56:
         7f:18:8e:8e:3a:13:5a:e3:e0:de:93:7b:dd:67:b4:26:d0:15:
         92:16:6f:0a:a0:94:6b:a4:ae:36:32:64:8b:ff:7e:a2:2d:c2:
         a9:28:a6:73:ce:5c:02:44:21:b1:b2:32:85:c6:f1:e6:2b:95:
         fd:e8:c0:36:31:93:a9:6a:1a:a9:9e:01:02:71:36:50:2c:ca:
         64:0b:1b:2d:1e:27:31:f0:53:12:16:31:6e:3b:f3:a0:fc:4e:
         ae:a9:2c:54:b3:78:76:7b:7b:32:a5:aa:fd:ef:6d:c7:af:8e:
         6a:37:39:fd:1a:83:0b:75:09:e0:be:d4:2d:4d:93:3f:77:51:
         7d:df:38:15:d8:f3:03:be:0d:4a:d2:6d:e0:8b:28:29:72:1a:
         89:34:12:15:19:bb:27:8b:cb:5a:ec:a3:e1:26:9e:8f:e9:51:
         1a:9d:de:c1:55:ea:72:68:31:ce:99:89:84:42:42:4b:7e:40:
         7e:71:89:a3:9a:66:15:65:18:73:d6:1e:41:88:30:ba:07:91:
         19:a8:c0:44:14:10:94:d5:85:7b:dc:47:51:a4:f9:21:fe:fe:
         37:a5:78:2a:da:e0:57:d8:60:f5:a4:c9:40:91:ab:ef:4d:a6:
         32:bd:a1:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:32:06 2026 by rpki-client