Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft
File:                     VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft (raw, json)
Hash identifier:          vQwfoMSz96sWhblYEkCvcMqXFEd38yymyWoaKNNkXcU=
Subject key identifier:   1B:57:35:B3:4C:4D:19:93:2A:BB:F0:3D:1A:D7:CA:0B:00:4E:73:F0
Authority key identifier: 55:39:0F:3F:6B:3B:30:ED:4A:9C:6F:B9:AD:82:97:B8:EF:99:06:E0
Certificate issuer:       /CN=A912404E/serialNumber=55390F3F6B3B30ED4A9C6FB9AD8297B8EF9906E0
Certificate serial:       0193
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft
Manifest number:          018D
Signing time:             Sun 01 Mar 2026 23:08:31 +0000
Manifest this update:     Sun 01 Mar 2026 23:08:31 +0000
Manifest next update:     Sun 08 Mar 2026 23:08:31 +0000
Files and hashes:         1: VTkPP2s7MO1KnG-5rYKXuO-ZBuA.crl (hash: 4XMb6lUNG+QjiyR8+C6g7akgKE80WlCzWRr7ruLy2uw=)
                          2: FF1C0B44C0D411EEB8303680C4F9AE02.roa (hash: Lmq2NlPigyOuDvfNbo9bP8wwoc5cdlliVt/Do6DQwes=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.crl
                          rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:08:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 403 (0x193)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912404E, serialNumber=55390F3F6B3B30ED4A9C6FB9AD8297B8EF9906E0
        Validity
            Not Before: Mar  1 23:08:31 2026 GMT
            Not After : Mar  8 23:08:31 2026 GMT
        Subject: CN=69a4c6ef-11d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a2:c8:97:29:a5:40:1a:3e:f4:a9:5a:97:e8:
                    b7:98:99:56:d7:56:68:87:65:d7:ad:d8:7f:05:40:
                    c0:f2:64:3a:36:a9:a2:b2:02:9e:a0:a4:8a:74:8e:
                    2e:db:1c:46:b3:08:e3:0d:bd:5d:9a:44:cf:61:d0:
                    1d:a4:19:90:99:24:ce:9d:a3:db:d5:f2:d0:68:da:
                    32:4e:84:8a:7b:85:4b:0d:ab:9e:cb:a1:b5:0d:a4:
                    27:ce:7c:c0:44:de:94:63:db:f2:87:a1:1a:f4:ca:
                    17:7c:ed:24:60:1b:2f:83:54:7a:8b:25:61:0f:4e:
                    4a:3d:4a:50:2e:5e:7d:72:91:7a:89:4e:55:dd:62:
                    7a:e2:ae:dd:e1:3e:9b:ad:ff:9c:aa:33:8b:72:b1:
                    6e:a2:9c:0e:87:4c:3d:6c:a4:b2:de:7c:5a:e1:82:
                    df:6d:78:03:99:90:14:62:3b:ef:32:8f:55:f4:56:
                    b4:cd:d3:6e:59:b3:0f:7c:37:99:5a:15:0f:e7:23:
                    2a:c1:fe:cd:a4:43:50:1d:a3:be:0e:a0:af:6a:c7:
                    2c:d3:81:60:ac:7b:2c:ea:fb:ab:d9:63:eb:0b:b2:
                    f0:1c:44:5b:f1:b7:a0:66:56:1c:a6:b1:39:6f:2c:
                    ad:60:0e:88:68:59:bc:be:98:4b:25:dd:91:4f:ae:
                    fc:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:57:35:B3:4C:4D:19:93:2A:BB:F0:3D:1A:D7:CA:0B:00:4E:73:F0
            X509v3 Authority Key Identifier:
                keyid:55:39:0F:3F:6B:3B:30:ED:4A:9C:6F:B9:AD:82:97:B8:EF:99:06:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:07:1d:eb:db:7b:ed:0d:52:53:f8:a4:68:40:b8:2d:1d:cb:
         01:6f:00:79:67:74:03:3c:e4:03:35:b6:a1:3c:24:69:ca:ea:
         16:d1:c3:19:3f:43:e7:63:c5:80:d5:06:6b:fb:dc:0d:52:1e:
         3e:dc:54:c8:89:f8:83:00:c9:03:77:fc:87:87:cf:fc:42:ef:
         95:d7:c8:1b:d1:b0:8f:ef:b8:aa:90:0f:fa:dd:92:44:36:2c:
         2a:e3:4e:f6:b8:17:a6:d3:46:b3:71:24:03:38:32:4b:b1:3e:
         d8:ab:04:50:f1:ce:8b:f3:a2:d9:dc:da:d9:9e:99:13:b6:ae:
         69:82:88:a2:e3:74:a1:8f:6b:a4:ce:c2:83:db:1c:0e:89:06:
         e0:9a:25:41:1e:ec:c3:58:cb:db:0e:bd:8c:48:0a:f8:25:a5:
         2e:cd:4d:a4:8f:6d:a6:4b:41:5c:52:4e:14:72:e2:68:4f:6e:
         77:ca:33:fc:2a:11:24:59:8f:99:db:82:34:fe:45:0c:f6:4e:
         bc:03:0f:f0:d8:cf:b2:bc:28:2d:a8:c2:be:8b:40:20:49:43:
         19:5f:3d:74:af:a7:7d:41:43:3c:db:0f:09:37:53:67:93:27:
         ea:e3:4e:73:1f:44:a2:3f:fd:69:a6:5e:28:10:6c:2f:95:4f:
         01:df:a3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:51:29 2026 by rpki-client