Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.mft
File:                     vIlHKy_1NJ5Maoqwmc745o3XuZU.mft (raw, json)
Hash identifier:          augxOP7p7LS+qNnLhHhu92vugx3co+kvrTqAwGlJsu4=
Subject key identifier:   0F:9E:C7:8D:50:1A:1F:90:83:AA:44:B5:C3:2B:97:B9:40:6C:47:09
Authority key identifier: BC:89:47:2B:2F:F5:34:9E:4C:6A:8A:B0:99:CE:F8:E6:8D:D7:B9:95
Certificate issuer:       /CN=A91495CF/serialNumber=BC89472B2FF5349E4C6A8AB099CEF8E68DD7B995
Certificate serial:       0878
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIlHKy_1NJ5Maoqwmc745o3XuZU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.mft
Manifest number:          0870
Signing time:             Mon 02 Mar 2026 00:18:22 +0000
Manifest this update:     Mon 02 Mar 2026 00:18:21 +0000
Manifest next update:     Mon 09 Mar 2026 00:18:21 +0000
Files and hashes:         1: vIlHKy_1NJ5Maoqwmc745o3XuZU.crl (hash: KCIBY+OQ0t04/ut5sDKmefHyuUfMbTtpEIGUQ4TXtX4=)
                          2: 27DCF5D6EBAC11EAA7A0FB1FC4F9AE02.roa (hash: vSMN7vA21QMy33UvTehc2BTEz+FGmUIUxczcI5GCg3s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.crl
                          rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIlHKy_1NJ5Maoqwmc745o3XuZU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:18:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2168 (0x878)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91495CF, serialNumber=BC89472B2FF5349E4C6A8AB099CEF8E68DD7B995
        Validity
            Not Before: Mar  2 00:18:21 2026 GMT
            Not After : Mar  9 00:18:21 2026 GMT
        Subject: CN=69a4d74e-cad1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:93:1f:75:c8:69:aa:1f:ed:9a:8f:88:c4:92:
                    0f:70:64:21:a6:12:32:fd:5b:16:9f:9b:81:05:1d:
                    23:a5:cd:39:e0:0b:d0:47:87:d1:56:9a:8a:98:91:
                    83:37:8f:d4:36:fe:fd:12:1e:e2:22:0c:28:4e:d1:
                    50:ae:56:ce:44:ac:12:c0:c8:13:fc:cd:46:e1:d4:
                    ec:51:94:70:ba:27:e4:99:14:a9:a8:86:10:ec:c8:
                    c5:55:61:61:b0:fe:a7:f8:17:3d:08:a9:87:f3:f6:
                    e9:3f:5a:24:e9:47:5c:ce:49:f1:17:75:6f:1f:dc:
                    23:37:39:dd:fe:78:3e:b8:8b:08:d2:3d:46:97:9b:
                    01:6f:6a:16:ee:9e:24:b6:0c:ce:03:87:06:55:f5:
                    82:0c:43:27:72:c3:8d:d1:e2:a0:97:d4:b0:08:09:
                    e3:d1:19:f6:9f:2c:10:40:a0:90:ab:03:1e:3f:ee:
                    65:9b:d0:fc:dc:e9:51:1b:97:89:e7:68:d3:14:14:
                    b3:37:07:05:57:fd:47:62:34:e2:c7:40:93:8a:a0:
                    7a:09:26:43:87:6a:02:c1:e8:65:7f:72:25:77:db:
                    49:f9:40:1b:a6:79:28:3b:7c:25:92:3a:3b:ad:66:
                    b2:90:2a:c3:3b:9f:0c:3f:3d:1f:33:16:3a:5a:cc:
                    0a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:9E:C7:8D:50:1A:1F:90:83:AA:44:B5:C3:2B:97:B9:40:6C:47:09
            X509v3 Authority Key Identifier:
                keyid:BC:89:47:2B:2F:F5:34:9E:4C:6A:8A:B0:99:CE:F8:E6:8D:D7:B9:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIlHKy_1NJ5Maoqwmc745o3XuZU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:46:c4:0f:03:79:ab:33:fa:3f:cc:14:fa:11:56:58:4b:29:
         fd:a3:d7:a9:a5:a4:5d:9e:50:48:a2:78:23:4a:35:6a:a6:27:
         9d:bb:bc:04:b0:cb:15:62:5a:97:79:03:ec:35:bf:6f:9b:25:
         7b:39:59:72:47:ee:a8:e6:b6:f9:df:a3:0d:da:aa:ea:5f:7a:
         cc:32:d8:54:3c:84:0d:10:4d:08:5c:9b:20:d2:88:9c:81:a9:
         8c:b6:40:4a:14:2d:42:49:bb:04:59:e9:0a:dd:e9:d8:b9:12:
         bf:23:10:c8:51:1c:d4:2d:5f:a3:57:1b:f7:90:80:a3:86:68:
         6a:4a:a0:82:a2:2a:fc:79:08:30:b6:5d:f9:fe:28:51:1b:e6:
         cf:61:8a:05:47:a0:bd:88:26:52:41:d6:7d:02:4e:57:54:43:
         30:24:78:29:5e:a4:38:8a:ed:c2:17:75:d4:27:49:97:d7:2a:
         e2:14:95:ad:72:51:ec:dd:af:5a:d7:bf:5c:a9:25:e0:89:5a:
         6c:75:ca:9b:92:68:a0:ba:b9:2b:93:3b:ea:54:47:67:1d:df:
         e6:59:55:13:7b:f9:c3:68:d6:3a:0a:3b:a5:00:fc:ae:cc:94:
         0d:2c:42:8d:45:e0:f8:ba:07:af:0c:00:3d:8b:06:21:2b:e6:
         ce:19:a8:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:28:43 2026 by rpki-client