Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft
File:                     VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft (raw, json)
Hash identifier:          J1zKdBOfUzXF8SOkh24S++qzG4YSnMqNIgT3D+IO++8=
Subject key identifier:   BB:FF:66:EF:DF:70:57:15:03:B7:D6:76:17:2C:8F:18:A3:9F:8E:E9
Authority key identifier: 55:E4:85:18:8C:5C:9D:2E:24:C8:34:5C:97:BC:34:62:72:1C:98:CE
Certificate issuer:       /CN=A912FBD2/serialNumber=55E485188C5C9D2E24C8345C97BC3462721C98CE
Certificate serial:       04B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VeSFGIxcnS4kyDRcl7w0YnIcmM4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft
Manifest number:          04B3
Signing time:             Thu 16 Apr 2026 23:49:09 +0000
Manifest this update:     Thu 16 Apr 2026 23:49:09 +0000
Manifest next update:     Thu 23 Apr 2026 23:49:09 +0000
Files and hashes:         1: VeSFGIxcnS4kyDRcl7w0YnIcmM4.crl (hash: +S56f4SwZIAA/e/EWLIoacF83h9DOYD0w8wLFrqCaOA=)
                          2: 8A7E8D5C6F5511ECB5FAA20FC4F9AE02.roa (hash: Ye+a8GT+XgDN4u+M9N9k3FjrUxRsvTyLwzxddvL9o4Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.crl
                          rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VeSFGIxcnS4kyDRcl7w0YnIcmM4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 23:49:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1209 (0x4b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912FBD2, serialNumber=55E485188C5C9D2E24C8345C97BC3462721C98CE
        Validity
            Not Before: Apr 16 23:49:09 2026 GMT
            Not After : Apr 23 23:49:09 2026 GMT
        Subject: CN=69e17575-9e4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:33:2d:66:34:04:2e:24:dc:25:a5:aa:c5:69:
                    cb:ad:3d:bd:c4:3d:1c:f8:4c:b4:4b:99:d2:1f:1e:
                    86:1d:00:0f:4e:62:4c:ad:d4:da:af:ff:25:b1:38:
                    7d:42:87:44:1e:d5:e9:87:14:ac:9f:f5:db:67:9e:
                    3b:81:98:b5:01:09:5d:c6:77:8d:e4:1c:ab:28:77:
                    4d:01:80:d5:61:5f:94:d7:dc:9c:a0:7e:58:38:b7:
                    c4:51:e7:eb:0c:db:07:f4:9e:07:de:22:bc:ec:66:
                    9e:cb:a0:20:1b:95:35:5f:8f:de:86:b8:fd:43:ea:
                    90:fb:26:79:9e:da:5d:f1:ff:81:8b:61:6b:b6:94:
                    ff:55:db:74:5d:ea:76:2f:26:b2:fc:f9:54:a6:d4:
                    85:0f:71:82:4b:33:43:68:78:a0:ad:b5:0e:ae:73:
                    27:0f:c3:f1:0d:b4:6b:9e:b4:b0:dc:af:e8:af:20:
                    8b:75:0a:fd:66:11:2d:06:86:52:80:1f:91:0d:e0:
                    24:97:e5:e0:45:41:fb:dd:a3:9b:4e:fb:16:8d:38:
                    cd:e2:b3:03:f9:d4:dd:6f:38:88:64:3e:b5:47:45:
                    08:6d:b8:39:f2:71:08:b7:d0:9e:6e:58:2b:f6:2b:
                    fd:88:cb:27:68:c6:d4:cf:71:04:32:31:19:bd:b1:
                    13:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:FF:66:EF:DF:70:57:15:03:B7:D6:76:17:2C:8F:18:A3:9F:8E:E9
            X509v3 Authority Key Identifier:
                keyid:55:E4:85:18:8C:5C:9D:2E:24:C8:34:5C:97:BC:34:62:72:1C:98:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VeSFGIxcnS4kyDRcl7w0YnIcmM4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:62:da:25:f0:6d:29:1d:4b:02:9d:5c:95:cd:59:e4:3b:41:
         cd:3d:21:da:ec:24:39:fa:b1:ac:2d:e0:46:29:ad:c3:97:67:
         ac:85:61:02:e2:22:d9:34:68:11:ee:3e:f4:fc:0b:21:92:4e:
         0f:10:9d:ab:cc:2c:fa:22:4b:42:98:b2:4b:00:b3:2a:f7:2e:
         d5:88:9f:5e:8f:6d:71:20:1e:c9:6e:32:cf:92:59:f4:24:a3:
         38:4d:ab:79:2f:15:85:88:89:3a:8c:8f:71:dd:2f:9c:ba:f7:
         c7:9e:47:01:b5:5b:6f:c6:eb:21:ea:63:99:5c:0f:81:19:79:
         8e:1a:6a:c8:34:a8:22:0b:e9:c5:89:a4:9b:53:6d:a4:9e:b6:
         4b:a0:93:5c:fe:48:dd:e3:bc:6f:7b:07:e2:49:d4:57:b7:2b:
         5a:be:b5:8b:07:36:c0:f1:41:80:35:e4:07:80:11:b7:5e:1d:
         47:fd:c9:82:67:72:45:0f:79:66:22:bd:29:92:1e:38:ff:f9:
         15:ba:44:90:ae:e5:ca:d3:11:64:21:d3:f6:d7:d4:0a:b4:9f:
         3f:f6:48:9e:c1:e5:a6:bb:9f:da:75:73:f0:2c:5d:d7:02:cc:
         82:87:db:af:7d:f6:2d:a9:bb:d0:62:c7:e8:a6:0f:93:9a:74:
         d2:92:51:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:10:21 2026 by rpki-client