Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.mft
File:                     VIw8AL4pDBZz22aZmFINcjeERcs.mft (raw, json)
Hash identifier:          Tvg7yvwxdTsC+2pKTaPBCYKk7l7cSo1Nia7mW0WKp1k=
Subject key identifier:   A5:41:C7:0C:09:75:16:DD:70:B5:DF:A1:DB:08:FC:66:04:02:0D:51
Authority key identifier: 54:8C:3C:00:BE:29:0C:16:73:DB:66:99:98:52:0D:72:37:84:45:CB
Certificate issuer:       /CN=A914B089/serialNumber=548C3C00BE290C1673DB669998520D72378445CB
Certificate serial:       0196
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIw8AL4pDBZz22aZmFINcjeERcs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.mft
Manifest number:          0193
Signing time:             Sun 01 Mar 2026 05:12:01 +0000
Manifest this update:     Sun 01 Mar 2026 05:12:01 +0000
Manifest next update:     Sun 08 Mar 2026 05:12:01 +0000
Files and hashes:         1: VIw8AL4pDBZz22aZmFINcjeERcs.crl (hash: wrn4r1U54gL8AiEE6AKd5RlXAFHfW82cBzh7fiRkkw4=)
                          2: 55F7C16CABDE11EEA9B44639C4F9AE02.roa (hash: EzuibzPOO+8t1plYknAfICufaWfgz0qLZSzZJ+reVtg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.crl
                          rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIw8AL4pDBZz22aZmFINcjeERcs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 05:12:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 406 (0x196)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B089, serialNumber=548C3C00BE290C1673DB669998520D72378445CB
        Validity
            Not Before: Mar  1 05:12:01 2026 GMT
            Not After : Mar  8 05:12:01 2026 GMT
        Subject: CN=69a3caa1-e3d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d3:70:22:ee:c6:95:18:04:63:ae:b5:35:8c:
                    76:14:6a:d2:d4:85:2a:54:1d:64:16:4d:15:08:da:
                    6a:03:f8:88:c8:40:35:6c:97:34:0d:cb:0a:38:ef:
                    b5:fe:4f:45:e5:f2:5e:d6:9a:9f:42:b7:52:b0:2f:
                    b3:c6:75:46:a9:31:e6:83:f8:25:29:49:ae:09:f3:
                    c8:fe:e7:20:2f:8e:40:2f:17:c0:64:94:a4:8f:d8:
                    fa:03:f1:a5:21:33:3a:0b:ad:d9:22:71:09:5c:e6:
                    37:49:ec:5a:72:f4:7d:c9:cd:d7:e7:76:16:03:55:
                    b0:25:3d:ba:84:64:38:a8:be:e9:d6:59:c1:94:a6:
                    2b:a2:be:ec:2e:6e:22:a3:1d:20:10:59:ed:3d:3d:
                    b9:1e:d1:a7:81:7f:d9:9f:a8:68:8d:ad:42:25:67:
                    50:b2:15:3d:a7:44:90:d6:ad:fb:4d:17:ad:14:32:
                    3c:b4:3d:27:72:3b:07:23:c1:ab:66:17:8c:a1:e3:
                    70:59:64:f0:85:99:60:47:ad:ae:84:ab:55:9a:1f:
                    43:4d:3e:6f:46:ee:3a:7b:4b:d6:37:e5:33:da:9b:
                    4c:6c:23:c9:9d:ee:0f:67:da:4c:75:8e:5a:09:2c:
                    8b:32:03:e9:51:55:d6:70:2e:9a:9c:ae:1d:12:02:
                    06:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:41:C7:0C:09:75:16:DD:70:B5:DF:A1:DB:08:FC:66:04:02:0D:51
            X509v3 Authority Key Identifier:
                keyid:54:8C:3C:00:BE:29:0C:16:73:DB:66:99:98:52:0D:72:37:84:45:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIw8AL4pDBZz22aZmFINcjeERcs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:2b:b8:25:e1:53:eb:e6:b0:a1:b0:1d:68:6b:68:cf:e3:3b:
         39:d1:e3:7c:c4:4c:c3:c3:a9:8b:c6:30:49:ab:c5:f3:c6:1d:
         8a:44:55:91:dd:b4:0c:06:6f:b6:a3:85:00:c0:4d:1a:2d:70:
         ee:53:d0:ef:35:35:66:3f:c6:bc:f2:87:9c:59:dd:43:2f:5c:
         8d:5a:b7:68:47:ee:99:34:4d:4d:29:60:a1:91:d5:c1:fe:f8:
         77:57:7d:bc:77:4e:80:29:eb:ec:12:49:e2:a8:20:fe:88:f1:
         b1:1e:bc:5b:1a:d8:dd:43:75:d0:80:92:99:ea:53:e3:ab:9e:
         d0:68:52:9e:65:4d:ba:e5:a0:bc:c3:04:5e:6e:f8:d5:4c:a9:
         cc:a6:e7:7e:5e:fd:24:1b:22:c2:e7:e4:77:4b:f7:87:1b:18:
         5c:1b:71:bc:0a:27:d0:58:a9:be:96:60:3b:2b:fe:20:8e:b1:
         c3:9a:56:6f:ca:ab:20:9d:54:08:29:63:11:76:a7:fc:38:4a:
         04:ac:4b:7a:2d:be:d1:95:3e:df:41:d1:66:2f:e5:74:e6:f0:
         c1:b2:7f:b0:dc:17:64:d5:af:ef:f4:e4:2d:24:76:62:ec:40:
         61:75:c5:d9:82:85:09:c3:d6:ee:a8:da:fe:c5:2c:83:85:94:
         71:5d:c0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:08:47 2026 by rpki-client