Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.mft
File:                     VB3RXhVOUI-wD9skXE528q09iB0.mft (raw, json)
Hash identifier:          y8s259iyeESIrma/Ym4S2/A2i4YgGE3tBgYb4VXfuw4=
Subject key identifier:   9D:20:56:00:C9:D7:46:8B:8B:51:72:26:90:52:6E:AB:F0:81:FF:CA
Authority key identifier: 54:1D:D1:5E:15:4E:50:8F:B0:0F:DB:24:5C:4E:76:F2:AD:3D:88:1D
Certificate issuer:       /CN=A911CE4A/serialNumber=541DD15E154E508FB00FDB245C4E76F2AD3D881D
Certificate serial:       96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB3RXhVOUI-wD9skXE528q09iB0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.mft
Manifest number:          92
Signing time:             Sun 19 Apr 2026 07:10:02 +0000
Manifest this update:     Sun 19 Apr 2026 07:10:02 +0000
Manifest next update:     Sun 26 Apr 2026 07:10:02 +0000
Files and hashes:         1: VB3RXhVOUI-wD9skXE528q09iB0.crl (hash: +eq/uJGTbpRdpHp6+Z3ATuJw/f5tFy0HZ820CUkN2yY=)
                          2: BA2C0A9E673A11F0B876713DC4F9AE02.roa (hash: k7KAeEujUB9hyqnv/uSDh4wrDBFacTBtGdVKJFRlzqg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.crl
                          rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB3RXhVOUI-wD9skXE528q09iB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 150 (0x96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CE4A, serialNumber=541DD15E154E508FB00FDB245C4E76F2AD3D881D
        Validity
            Not Before: Apr 19 07:10:02 2026 GMT
            Not After : Apr 26 07:10:02 2026 GMT
        Subject: CN=69e47fca-0d60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f9:25:7c:5a:83:48:cb:47:8c:6f:ed:76:e5:
                    bb:40:54:2a:df:d5:d7:5e:24:9f:41:9f:96:9c:2a:
                    99:b4:e7:7a:0c:32:a2:7a:8d:b7:35:e7:58:62:7f:
                    44:56:c7:9d:50:67:4b:e4:ed:2d:4d:3b:ac:b9:99:
                    94:54:19:a4:a6:dd:e8:d3:e7:b6:11:b1:c5:6a:bc:
                    8c:96:82:aa:a9:3e:5c:94:83:66:ee:52:85:97:3e:
                    a6:89:a8:91:8b:62:1e:3b:ae:e5:bf:18:14:40:0f:
                    8e:48:f3:49:dd:27:26:5d:f5:b2:45:16:96:fc:ea:
                    cd:c0:94:cc:6f:45:e9:f2:35:ba:67:c8:3a:ce:20:
                    c8:70:f0:95:18:c3:e4:ae:53:ce:71:7d:04:a6:d3:
                    3d:54:2f:74:ac:30:69:66:11:02:2c:af:4d:02:73:
                    73:63:2f:3f:8f:ea:a6:e9:05:9a:4c:d4:87:ff:50:
                    ae:4d:57:18:fa:9c:23:bb:4c:57:86:1a:39:be:e7:
                    c3:95:58:2d:5e:31:41:89:69:ac:3f:1d:62:68:1f:
                    77:58:07:7a:1f:36:01:c2:4b:15:f6:cb:1c:7d:d1:
                    b6:02:65:2b:53:d2:fa:33:e9:ae:f4:ce:ed:d8:dd:
                    d2:f5:16:aa:91:16:1d:1e:91:ec:29:5f:0a:1a:ef:
                    03:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:20:56:00:C9:D7:46:8B:8B:51:72:26:90:52:6E:AB:F0:81:FF:CA
            X509v3 Authority Key Identifier:
                keyid:54:1D:D1:5E:15:4E:50:8F:B0:0F:DB:24:5C:4E:76:F2:AD:3D:88:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB3RXhVOUI-wD9skXE528q09iB0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:d0:2a:88:04:64:a3:f9:43:e5:f0:db:3e:b8:5a:71:8c:40:
         f7:8b:8b:af:9f:53:ea:cd:8d:b6:e4:0c:0f:78:30:c3:57:3e:
         e7:ff:ee:77:50:4e:35:7e:b5:80:b7:78:56:5f:30:1a:e0:93:
         ec:09:84:2c:93:3c:27:2e:0d:e0:9a:8f:43:bb:0e:f7:a7:f9:
         47:16:aa:8c:84:45:6b:43:61:c9:d3:a5:7a:a6:fc:18:d3:08:
         3b:f9:f4:96:1c:0b:c1:6c:c2:ed:06:2f:4f:a3:f2:f2:1e:15:
         3c:d1:bf:ed:40:84:03:31:3d:eb:9a:93:89:db:f4:19:69:d6:
         6b:00:b5:cb:38:6e:0f:24:66:64:c1:fa:5a:93:cc:51:85:86:
         57:d2:03:8b:80:8d:41:f7:34:30:34:40:cd:b2:19:53:40:44:
         1b:56:2e:11:c3:23:6b:d0:16:12:c8:35:35:6d:f2:f5:fa:47:
         cb:42:eb:fc:23:d7:03:8f:87:f2:f3:f3:f5:6e:85:dc:1c:f3:
         99:14:ea:88:c2:4e:a2:b1:77:97:e7:58:2b:42:2f:2b:f0:11:
         12:7a:e0:07:39:78:45:fe:78:03:11:8e:bb:ba:c1:48:5a:e3:
         2e:55:cd:54:08:94:6c:9c:62:b2:56:81:d7:68:5b:fe:33:d0:
         ad:15:45:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:59:57 2026 by rpki-client