Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.mft
File:                     VVzqN0EM0oazHxoArfYlPUzgUjI.mft (raw, json)
Hash identifier:          3Mv6V+KyPiwU0cT7iBm1wDuBQ72eXRGn6abP0LGxI1I=
Subject key identifier:   28:26:AC:C0:BF:C4:33:CD:CC:0C:BC:B1:3F:30:61:04:43:23:EA:CB
Authority key identifier: 55:5C:EA:37:41:0C:D2:86:B3:1F:1A:00:AD:F6:25:3D:4C:E0:52:32
Certificate issuer:       /CN=A9137522/serialNumber=555CEA37410CD286B31F1A00ADF6253D4CE05232
Certificate serial:       351F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVzqN0EM0oazHxoArfYlPUzgUjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.mft
Manifest number:          3517
Signing time:             Mon 02 Mar 2026 15:05:54 +0000
Manifest this update:     Mon 02 Mar 2026 15:05:54 +0000
Manifest next update:     Mon 09 Mar 2026 15:05:54 +0000
Files and hashes:         1: VVzqN0EM0oazHxoArfYlPUzgUjI.crl (hash: a6zzNjhlfRg7Btg8y+xSaT7QBQ4ZU5FbTqOH+7bu0/w=)
                          2: FF9802D6FE3911EBBCE1485DC4F9AE02.roa (hash: Zqu39Uw0HncOG5VI+5Ts7HDsov6x0MYg0Iq+gNjyWCk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.crl
                          rsync://rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVzqN0EM0oazHxoArfYlPUzgUjI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:05:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13599 (0x351f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137522, serialNumber=555CEA37410CD286B31F1A00ADF6253D4CE05232
        Validity
            Not Before: Mar  2 15:05:54 2026 GMT
            Not After : Mar  9 15:05:54 2026 GMT
        Subject: CN=69a5a752-da09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:35:37:b1:45:14:12:d6:2a:91:41:d9:13:b2:
                    ff:3d:da:8a:f5:79:0c:9a:11:47:f1:ad:ff:b8:41:
                    e9:72:7a:7b:09:6a:b3:3f:70:5f:36:ac:6e:54:96:
                    d8:13:a6:6c:6b:ab:4f:e7:7f:15:55:47:4d:47:4d:
                    0a:02:68:bc:f8:b1:2d:29:67:d6:2a:9d:44:0b:c4:
                    76:8b:84:47:e3:38:49:be:10:48:7e:37:90:0d:30:
                    52:a7:40:97:df:69:61:c8:da:01:ac:e6:3c:76:9e:
                    6c:d3:06:0e:de:c5:68:f1:f2:e8:a8:bb:21:39:5e:
                    82:c1:5d:6b:a3:51:0a:38:b6:c3:18:f6:9a:9d:97:
                    55:0c:86:70:b9:1f:3e:45:5d:fc:93:f0:c5:98:9e:
                    84:20:74:69:96:20:36:98:4d:2f:ad:3d:db:c6:c0:
                    59:96:be:89:fd:26:0c:03:8e:11:2a:e7:dc:c0:38:
                    24:40:f8:64:ea:8c:24:51:d0:3e:74:3c:f6:49:1d:
                    67:6a:44:b5:62:bc:75:a3:cb:5e:60:0b:09:b2:07:
                    1d:86:28:07:51:8d:2f:19:6d:b0:e0:d6:18:f9:fc:
                    8d:09:55:76:9e:8f:b4:64:7a:90:49:88:e3:b5:ca:
                    df:72:f0:ce:2a:9e:ed:d3:43:29:8b:c1:8e:29:52:
                    03:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:26:AC:C0:BF:C4:33:CD:CC:0C:BC:B1:3F:30:61:04:43:23:EA:CB
            X509v3 Authority Key Identifier:
                keyid:55:5C:EA:37:41:0C:D2:86:B3:1F:1A:00:AD:F6:25:3D:4C:E0:52:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVzqN0EM0oazHxoArfYlPUzgUjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:54:fe:b9:8a:b0:2e:a2:a0:e4:4b:33:82:95:71:b0:9a:3f:
         8a:4e:a0:e5:55:b1:c5:54:86:cf:f6:c3:ee:62:ad:a7:6e:2f:
         9d:0b:21:a5:d4:11:0c:05:b3:53:e4:08:48:00:42:2e:75:e4:
         a6:06:3e:7f:de:da:4a:b5:b3:78:86:cf:f8:c7:e2:f9:c0:27:
         e6:a5:17:de:04:67:2f:94:67:29:dc:d0:4d:25:d4:cc:41:eb:
         34:84:7c:9b:fe:7d:24:82:56:d0:2c:c4:5b:94:ec:2e:e4:08:
         c1:8b:b1:00:e1:95:72:92:f6:ec:40:b2:63:65:35:05:4d:43:
         c0:36:18:77:2f:3c:ab:e0:76:c4:27:21:da:67:f7:b0:9e:43:
         fa:8f:c0:08:15:84:de:6d:33:a3:47:5e:19:37:87:49:a5:a2:
         1c:df:a6:7f:42:5f:38:5c:37:62:36:b2:52:8c:48:b4:60:ce:
         92:86:46:80:2f:22:fe:3a:89:a5:85:72:27:40:ef:5c:c2:4c:
         4b:dc:e1:2d:e1:be:3b:4f:1a:a3:3b:5e:49:af:07:a0:17:04:
         cb:aa:90:f8:dd:a5:27:4b:75:4b:a7:19:85:44:42:8f:0a:e3:
         54:4f:ad:e4:a3:8b:75:b3:8d:8e:7a:d0:76:5f:b6:6e:1e:0d:
         80:c5:f6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:16:59 2026 by rpki-client