Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft
File:                     Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft (raw, json)
Hash identifier:          DXUvO+tpLwEMxD7nyIpS9XrRIld3Y8GLE9WBNJHJzX4=
Subject key identifier:   16:2B:23:2C:CD:57:D6:E6:0A:2E:3B:A2:99:1D:D1:62:44:1D:37:F7
Authority key identifier: 56:AF:1C:D0:B4:E0:7D:00:0C:64:AB:01:6C:33:F7:86:A0:DD:90:FA
Certificate issuer:       /CN=A914F22A/serialNumber=56AF1CD0B4E07D000C64AB016C33F786A0DD90FA
Certificate serial:       1404
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft
Manifest number:          13FC
Signing time:             Sat 28 Feb 2026 16:59:09 +0000
Manifest this update:     Sat 28 Feb 2026 16:59:08 +0000
Manifest next update:     Sat 07 Mar 2026 16:59:08 +0000
Files and hashes:         1: Vq8c0LTgfQAMZKsBbDP3hqDdkPo.crl (hash: reUoPhiE/miT7uZ9SOGt1iELOin+1YOfINMqAWz55Z0=)
                          2: 8B2E3BA270BD11ED970C535FC4F9AE02.roa (hash: 5VH2eBCf4hkjUtJHqHQPv/5yN4SkQaCzRWcunhO07pE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.crl
                          rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 16:59:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5124 (0x1404)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914F22A, serialNumber=56AF1CD0B4E07D000C64AB016C33F786A0DD90FA
        Validity
            Not Before: Feb 28 16:59:08 2026 GMT
            Not After : Mar  7 16:59:08 2026 GMT
        Subject: CN=69a31edd-719c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b3:ea:66:aa:0d:1d:1d:4a:5d:51:08:f0:54:
                    44:ed:f5:72:cf:2d:c4:3e:28:d3:00:8b:50:cd:24:
                    83:d9:44:e1:41:fa:89:a8:f3:e0:56:06:40:01:8b:
                    5a:d5:e7:2b:7f:2c:63:c4:17:5f:1d:07:0d:b9:ec:
                    72:b4:73:ad:50:5b:c0:e6:46:c7:22:85:a2:b6:c4:
                    dc:57:ee:ec:f8:ec:58:e2:44:9a:2c:d0:0e:f6:3d:
                    ef:6e:87:1f:37:dd:b1:64:84:7c:95:82:1b:8e:87:
                    78:85:37:c0:e7:98:05:d3:29:80:2e:aa:e5:d1:d0:
                    e9:a1:f2:67:d6:19:63:04:a6:fe:83:7c:60:82:d2:
                    3d:61:98:cf:e5:da:70:04:d4:5a:3d:19:59:ca:51:
                    c1:0f:ae:80:4b:a6:6e:fa:19:6c:18:e5:22:85:93:
                    66:aa:3d:09:b3:ec:3b:c5:7f:27:22:c2:71:0f:fb:
                    62:3f:da:5b:ae:cc:d6:77:7a:17:b3:ef:59:bf:dc:
                    fb:b7:45:4a:04:b3:e9:16:28:94:66:de:2c:42:6e:
                    5e:48:55:f6:0c:b3:5c:e7:ec:6a:db:7c:69:9e:d3:
                    31:32:5b:b0:5a:8c:2f:68:5b:68:f6:8a:94:ce:6d:
                    7d:22:90:31:bc:00:e3:ac:a1:23:bc:dd:f1:dd:b5:
                    0b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:2B:23:2C:CD:57:D6:E6:0A:2E:3B:A2:99:1D:D1:62:44:1D:37:F7
            X509v3 Authority Key Identifier:
                keyid:56:AF:1C:D0:B4:E0:7D:00:0C:64:AB:01:6C:33:F7:86:A0:DD:90:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:b4:b9:2a:88:d9:54:b7:48:b7:d7:a3:2a:dc:2f:05:83:59:
         1d:50:ef:75:c6:a3:9d:c1:10:06:c8:dc:30:18:68:dd:4d:f6:
         8b:5e:1a:47:bf:67:64:8c:e4:ab:a9:03:08:1d:45:7a:10:4c:
         97:55:73:71:00:04:89:b0:f6:aa:5a:00:ef:ec:4b:fd:de:70:
         cb:6c:d8:d7:4b:84:88:65:ad:46:d8:ed:19:97:f6:f2:17:51:
         62:8a:cd:ae:a9:a6:e6:dd:95:d1:4f:19:6d:c7:ba:e9:96:68:
         3b:4b:ed:05:b4:c7:63:4f:74:c6:47:ac:c9:f6:a3:17:3d:be:
         4d:06:fd:d7:a9:e6:91:ac:a9:bf:80:15:5e:06:53:ac:42:f7:
         d3:1f:3e:24:69:f9:ed:42:6b:5d:b0:fe:72:b6:46:a8:9c:84:
         ec:97:f1:08:57:8d:26:86:ae:ba:44:66:ec:6b:7e:9b:b1:76:
         88:6c:23:b9:75:9c:2c:10:10:24:21:cd:74:a5:f7:f2:2e:42:
         5f:4a:ca:9c:c6:f5:fd:85:ed:9b:e6:9b:a2:5b:82:6c:76:1e:
         59:c4:3d:34:43:a7:db:6b:73:27:6c:cd:42:fa:d1:34:17:49:
         cd:ba:ba:92:64:e5:c7:19:9b:eb:46:1c:f5:d0:52:22:b1:e2:
         4a:d2:72:42
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICFAQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEYyMkExMTAvBgNVBAUTKDU2QUYxQ0QwQjRFMDdEMDAwQzY0QUIwMTZDMzNGNzg2
QTBERDkwRkEwHhcNMjYwMjI4MTY1OTA4WhcNMjYwMzA3MTY1OTA4WjAYMRYwFAYD
VQQDDA02OWEzMWVkZC03MTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtbPqZqoNHR1KXVEI8FRE7fVyzy3EPijTAItQzSSD2UThQfqJqPPgVgZAAYta
1ecrfyxjxBdfHQcNuexytHOtUFvA5kbHIoWitsTcV+7s+OxY4kSaLNAO9j3vbocf
N92xZIR8lYIbjod4hTfA55gF0ymALqrl0dDpofJn1hljBKb+g3xggtI9YZjP5dpw
BNRaPRlZylHBD66AS6Zu+hlsGOUihZNmqj0Js+w7xX8nIsJxD/tiP9pbrszWd3oX
s+9Zv9z7t0VKBLPpFiiUZt4sQm5eSFX2DLNc5+xq23xpntMxMluwWowvaFto9oqU
zm19IpAxvADjrKEjvN3x3bULcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBYrIyzN
V9bmCi47opkd0WJEHTf3MB8GA1UdIwQYMBaAFFavHNC04H0ADGSrAWwz94ag3ZD6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjIyQS83RUVDMUU0QzlD
RDAxMUU4QjE2MTJCN0RDNEY5QUUwMi9WcThjMExUZ2ZRQU1aS3NCYkRQM2hxRGRr
UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZxOGMwTFRnZlFBTVpLc0JiRFAzaHFEZGtQby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RjIyQS83RUVDMUU0QzlDRDAxMUU4QjE2MTJCN0RDNEY5QUUwMi9WcThjMExUZ2ZR
QU1aS3NCYkRQM2hxRGRrUG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgbS5KojZVLdIt9ejKtwvBYNZHVDvdcajncEQBsjcMBho3U32i14aR79nZIzk
q6kDCB1FehBMl1VzcQAEibD2qloA7+xL/d5wy2zY10uEiGWtRtjtGZf28hdRYorN
rqmm5t2V0U8Zbce66ZZoO0vtBbTHY090xkesyfajFz2+TQb916nmkaypv4AVXgZT
rEL30x8+JGn57UJrXbD+crZGqJyE7JfxCFeNJoauukRm7Gt+m7F2iGwjuXWcLBAQ
JCHNdKX38i5CX0rKnMb1/YXtm+aboluCbHYeWcQ9NEOn22tzJ2zNQvrRNBdJzbq6
kmTlxxmb60Yc9dBSIrHiStJyQg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:27:50 2026 by rpki-client