Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.mft
File:                     VsaTBbXrpUJVXYx4xWGremzRqiw.mft (raw, json)
Hash identifier:          E4mECl+4tsYnoqEedJHkegOpL/Gaa3PV9ck4N9u/+og=
Subject key identifier:   7F:AE:CC:DB:6D:1D:EF:05:6D:C1:83:1A:43:78:0D:8E:C0:B7:0E:AD
Authority key identifier: 56:C6:93:05:B5:EB:A5:42:55:5D:8C:78:C5:61:AB:7A:6C:D1:AA:2C
Certificate issuer:       /CN=A911EEF8/serialNumber=56C69305B5EBA542555D8C78C561AB7A6CD1AA2C
Certificate serial:       0163
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VsaTBbXrpUJVXYx4xWGremzRqiw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.mft
Manifest number:          0154
Signing time:             Mon 21 Sep 2026 05:19:39 +0000
Manifest this update:     Mon 21 Sep 2026 05:19:38 +0000
Manifest next update:     Mon 28 Sep 2026 05:19:38 +0000
Files and hashes:         1: VsaTBbXrpUJVXYx4xWGremzRqiw.crl (hash: FssnGamc7fxHes5zdiuvfIgYSglSXl0KM61bQniNVOY=)
                          2: 0D4DDB6CABFA11F1B7BA63886911F970.roa (hash: 33VriuErHaG0b/GKxxxWpnY6hl1I8dnm1gnLVL8F77U=)
                          3: 40C6FC26ABFA11F1BB867F9D6911F970.roa (hash: 2dqyZkRvza50oGysNw3pfGLRZQAvLoX2N8qymJzoCB0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.crl
                          rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VsaTBbXrpUJVXYx4xWGremzRqiw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 05:19:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 355 (0x163)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911EEF8, serialNumber=56C69305B5EBA542555D8C78C561AB7A6CD1AA2C
        Validity
            Not Before: Sep 21 05:19:38 2026 GMT
            Not After : Sep 28 05:19:38 2026 GMT
        Subject: CN=6ab0be6b-7903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:47:55:c9:b1:81:da:a7:31:12:d8:bc:87:aa:
                    02:6f:6a:94:c5:a2:25:f7:2e:d9:8c:2f:4c:1b:e3:
                    05:97:ba:3e:54:5a:62:f0:d6:9b:e3:8f:b3:52:fe:
                    cf:9a:54:c3:8e:18:de:85:7d:ef:2a:4f:fa:a3:58:
                    f7:01:18:09:f0:5a:db:30:87:a6:78:b2:9a:56:23:
                    f1:a1:1c:58:a9:07:8b:aa:a0:94:fd:66:4f:bf:62:
                    0f:64:db:6a:6c:dd:7d:99:85:79:83:43:a9:9c:d7:
                    55:fd:d3:fd:f8:8b:1e:be:ea:20:d2:71:7f:5b:d2:
                    3d:00:ba:07:33:e5:5d:ac:f0:2e:66:1d:7a:3a:7f:
                    bf:46:47:e3:78:8e:79:2e:ae:82:40:b5:61:6d:90:
                    75:e9:9d:c8:ca:9c:5e:03:19:fc:0a:86:84:dc:92:
                    a3:f7:c9:d3:ea:ea:32:5a:df:2e:22:f6:0e:81:52:
                    04:4e:2e:d7:8d:52:17:1c:0c:65:16:1a:71:bf:cd:
                    0c:b9:f0:cf:ae:8a:7e:35:eb:c6:b7:4f:ae:1b:8d:
                    c9:1a:d3:42:b2:95:63:6a:fc:c6:79:34:5e:bf:b6:
                    ea:14:74:ae:c5:6e:ae:f4:a0:52:a1:21:0b:31:99:
                    3f:8e:14:5a:98:31:90:07:53:d3:6a:29:e4:b3:13:
                    18:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:AE:CC:DB:6D:1D:EF:05:6D:C1:83:1A:43:78:0D:8E:C0:B7:0E:AD
            X509v3 Authority Key Identifier:
                keyid:56:C6:93:05:B5:EB:A5:42:55:5D:8C:78:C5:61:AB:7A:6C:D1:AA:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VsaTBbXrpUJVXYx4xWGremzRqiw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:75:65:03:ab:6f:e2:e6:61:3d:69:14:10:6c:e4:c5:4c:4f:
         11:ed:d3:62:87:91:d5:5c:25:b1:c1:35:16:64:ec:a9:60:fd:
         f3:c7:ba:fd:f1:fb:f1:3d:d2:cd:25:48:ae:62:33:c4:b5:5e:
         ac:68:4d:9b:15:8c:2d:bd:32:9a:bc:05:ee:56:dc:74:2a:52:
         4f:0f:48:1d:99:1b:71:6c:a8:d9:bf:f6:44:a7:85:f2:c3:1b:
         d5:9d:78:0c:80:a3:47:68:2e:f5:98:ea:d7:e3:7a:70:2b:fa:
         fe:a9:88:16:a8:6b:4b:ef:d0:a4:dd:45:60:56:0b:ff:e0:3a:
         1a:c8:21:ac:bf:f2:e5:55:0c:25:9b:9d:da:37:a5:34:da:df:
         2b:50:f5:86:bf:1a:a9:d8:07:89:1d:74:bb:07:2b:a6:08:09:
         5f:d1:77:1f:5c:97:6d:c2:9e:1a:10:8a:59:d6:bc:ba:a9:74:
         04:cd:73:3a:4c:46:5b:65:93:fe:8a:df:27:2e:ad:1f:d5:26:
         c3:e7:01:25:39:31:00:91:49:2c:60:26:bb:ee:9f:97:58:fc:
         f1:fd:c5:97:44:a6:2f:a8:bd:5c:f2:1c:81:04:fc:57:3b:28:
         3a:e0:56:98:53:8c:d0:42:45:08:6e:35:11:b8:e1:93:2a:66:
         67:e9:44:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:23:26 2026 by rpki-client