Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134167/B42267F43E8E11EF97A8557DC4F9AE02/VaNt8khLtGWsMwGcBws5J0UkAic.mft
File:                     VaNt8khLtGWsMwGcBws5J0UkAic.mft (raw, json)
Hash identifier:          Amm8UmCn0iv6DQLKjG1SC0aaEvy6lxi4g0JBJK+bNf8=
Subject key identifier:   6F:F1:94:CA:70:94:AD:AD:87:F7:0F:6E:8D:C8:04:CF:B2:D7:EB:8B
Authority key identifier: 55:A3:6D:F2:48:4B:B4:65:AC:33:01:9C:07:0B:39:27:45:24:02:27
Certificate issuer:       /CN=A9134167/serialNumber=55A36DF2484BB465AC33019C070B392745240227
Certificate serial:       013D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VaNt8khLtGWsMwGcBws5J0UkAic.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134167/B42267F43E8E11EF97A8557DC4F9AE02/VaNt8khLtGWsMwGcBws5J0UkAic.mft
Manifest number:          0138
Signing time:             Sun 01 Mar 2026 22:57:44 +0000
Manifest this update:     Sun 01 Mar 2026 22:57:44 +0000
Manifest next update:     Sun 08 Mar 2026 22:57:44 +0000
Files and hashes:         1: VaNt8khLtGWsMwGcBws5J0UkAic.crl (hash: QHShA0TPCJYdxz/PiXPEuWuPljN6EcOkuhyNFCpY4BQ=)
                          2: A1A1946E3E8F11EF90A1D97EC4F9AE02.roa (hash: /ld513D22vtDsKI/GzmgQ3EYNXuMSF+WLy8acFoQpVY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134167/B42267F43E8E11EF97A8557DC4F9AE02/VaNt8khLtGWsMwGcBws5J0UkAic.crl
                          rsync://rpki.apnic.net/member_repository/A9134167/B42267F43E8E11EF97A8557DC4F9AE02/VaNt8khLtGWsMwGcBws5J0UkAic.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VaNt8khLtGWsMwGcBws5J0UkAic.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:57:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 317 (0x13d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134167, serialNumber=55A36DF2484BB465AC33019C070B392745240227
        Validity
            Not Before: Mar  1 22:57:44 2026 GMT
            Not After : Mar  8 22:57:44 2026 GMT
        Subject: CN=69a4c468-d315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e8:d4:c9:e6:af:a7:01:d6:e1:1c:70:51:db:
                    d8:bc:49:eb:24:17:74:bc:c8:d8:12:d2:38:c3:71:
                    cf:3a:c4:8b:3b:f5:e3:40:04:d6:4f:30:a3:6d:38:
                    5d:54:9f:d4:0b:19:02:71:58:7c:72:e6:3a:10:99:
                    a4:7a:7b:08:03:c9:87:d2:40:69:da:1b:ef:07:65:
                    74:f3:2b:01:78:f1:0e:e0:0f:c0:ff:27:dc:12:c9:
                    59:a1:1e:e6:66:10:09:2b:01:09:f4:e4:21:1c:9e:
                    b1:9c:a3:18:e7:80:64:aa:53:d3:a1:93:28:ab:42:
                    64:23:9c:a8:b1:4a:84:a4:cb:9b:eb:25:d5:f5:93:
                    c5:07:03:63:3c:7e:f5:d2:89:e7:55:c7:a6:2a:29:
                    c0:57:82:a7:dd:3f:ca:c3:99:71:85:9f:27:13:78:
                    06:79:8c:18:d2:db:4b:3c:90:b8:7d:5e:d3:ba:f5:
                    16:dd:d3:fb:37:ad:42:31:1a:4a:dd:20:cf:31:96:
                    a8:12:82:a8:42:3d:94:f7:46:e2:70:cf:1f:4c:f8:
                    fe:2a:dc:42:98:e7:ea:07:7c:1b:ca:e4:55:c3:32:
                    c4:ab:94:f6:e8:b1:31:dd:e3:a4:38:a5:5d:61:8d:
                    65:64:d6:19:03:8b:e1:7a:fa:13:1e:2f:30:46:be:
                    3d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:F1:94:CA:70:94:AD:AD:87:F7:0F:6E:8D:C8:04:CF:B2:D7:EB:8B
            X509v3 Authority Key Identifier:
                keyid:55:A3:6D:F2:48:4B:B4:65:AC:33:01:9C:07:0B:39:27:45:24:02:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134167/B42267F43E8E11EF97A8557DC4F9AE02/VaNt8khLtGWsMwGcBws5J0UkAic.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VaNt8khLtGWsMwGcBws5J0UkAic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134167/B42267F43E8E11EF97A8557DC4F9AE02/VaNt8khLtGWsMwGcBws5J0UkAic.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:63:ef:9c:fe:6f:d2:37:e5:61:fb:b9:c5:ed:27:d9:cf:9b:
         a7:c8:21:e6:72:b0:1c:70:55:11:5b:56:fa:87:07:c9:5d:fa:
         0b:dc:45:51:5e:6d:6f:8c:17:18:e1:d5:55:9b:d2:f5:64:b8:
         00:29:fd:0f:d9:60:14:d3:dd:c5:f5:79:cd:6b:a1:dd:7f:85:
         1a:80:51:6d:05:6d:03:c2:bf:21:30:ab:33:cb:e7:47:08:e8:
         7a:79:80:6c:b5:e1:71:5b:e3:ab:fc:1d:b5:8d:82:a9:15:4e:
         3b:71:33:b4:77:7f:5a:3b:4b:e1:09:a5:1d:13:d3:58:7b:80:
         72:aa:7b:23:fe:35:1a:f3:bf:41:65:41:ea:51:34:01:6c:2b:
         c7:02:85:14:fb:45:5d:3e:c0:b1:5f:21:cf:cb:a2:e3:24:d7:
         34:88:10:18:22:5f:29:61:2d:ff:ba:24:4e:8d:e1:20:cf:b6:
         60:b0:4c:96:ec:4f:34:9e:a8:59:bc:f6:68:bc:c1:6c:cd:78:
         36:79:ba:6d:7b:15:78:c5:d3:1f:40:dd:56:32:f5:a4:e4:4a:
         f2:83:08:8b:fa:c1:46:d3:67:4a:71:9d:1e:bd:a8:f4:66:07:
         7e:b5:97:7a:df:d1:8e:fa:e6:98:bf:bc:27:00:3c:95:79:11:
         af:14:85:25
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzQxNjcxMTAvBgNVBAUTKDU1QTM2REYyNDg0QkI0NjVBQzMzMDE5QzA3MEIzOTI3
NDUyNDAyMjcwHhcNMjYwMzAxMjI1NzQ0WhcNMjYwMzA4MjI1NzQ0WjAYMRYwFAYD
VQQDEw02OWE0YzQ2OC1kMzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmejUyeavpwHW4RxwUdvYvEnrJBd0vMjYEtI4w3HPOsSLO/XjQATWTzCjbThd
VJ/UCxkCcVh8cuY6EJmkensIA8mH0kBp2hvvB2V08ysBePEO4A/A/yfcEslZoR7m
ZhAJKwEJ9OQhHJ6xnKMY54BkqlPToZMoq0JkI5yosUqEpMub6yXV9ZPFBwNjPH71
0onnVcemKinAV4Kn3T/Kw5lxhZ8nE3gGeYwY0ttLPJC4fV7TuvUW3dP7N61CMRpK
3SDPMZaoEoKoQj2U90bicM8fTPj+KtxCmOfqB3wbyuRVwzLEq5T26LEx3eOkOKVd
YY1lZNYZA4vhevoTHi8wRr493wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG/xlMpw
lK2th/cPbo3IBM+y1+uLMB8GA1UdIwQYMBaAFFWjbfJIS7RlrDMBnAcLOSdFJAIn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDE2Ny9CNDIyNjdGNDNF
OEUxMUVGOTdBODU1N0RDNEY5QUUwMi9WYU50OGtoTHRHV3NNd0djQndzNUowVWtB
aWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZhTnQ4a2hMdEdXc013R2NCd3M1SjBVa0FpYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NDE2Ny9CNDIyNjdGNDNFOEUxMUVGOTdBODU1N0RDNEY5QUUwMi9WYU50OGtoTHRH
V3NNd0djQndzNUowVWtBaWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYGPvnP5v0jflYfu5xe0n2c+bp8gh5nKwHHBVEVtW+ocHyV36C9xFUV5tb4wX
GOHVVZvS9WS4ACn9D9lgFNPdxfV5zWuh3X+FGoBRbQVtA8K/ITCrM8vnRwjoenmA
bLXhcVvjq/wdtY2CqRVOO3EztHd/WjtL4QmlHRPTWHuAcqp7I/41GvO/QWVB6lE0
AWwrxwKFFPtFXT7AsV8hz8ui4yTXNIgQGCJfKWEt/7okTo3hIM+2YLBMluxPNJ6o
Wbz2aLzBbM14Nnm6bXsVeMXTH0DdVjL1pORK8oMIi/rBRtNnSnGdHr2o9GYHfrWX
et/RjvrmmL+8JwA8lXkRrxSFJQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:48:56 2026 by rpki-client