Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft
File:                     VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft (raw, json)
Hash identifier:          WbonhIy2teqTP3vlhSEWRW2JldwYGcoh2rJBZQOiu/8=
Subject key identifier:   0B:C4:74:47:8A:06:E9:C0:7E:D2:92:7F:7F:6D:2C:C9:7C:A1:AB:A6
Authority key identifier: 55:C4:68:55:CC:91:AC:54:AC:07:5C:29:7B:75:31:FA:88:A7:35:D9
Certificate issuer:       /CN=A9154534/serialNumber=55C46855CC91AC54AC075C297B7531FA88A735D9
Certificate serial:       0BD8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VcRoVcyRrFSsB1wpe3Ux-oinNdk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft
Manifest number:          0BCE
Signing time:             Mon 02 Mar 2026 01:05:57 +0000
Manifest this update:     Mon 02 Mar 2026 01:05:56 +0000
Manifest next update:     Mon 09 Mar 2026 01:05:56 +0000
Files and hashes:         1: VcRoVcyRrFSsB1wpe3Ux-oinNdk.crl (hash: ZsPAfWLNeZATFv6Euy9A8+KaIkypiJjh+BrPgumVdBA=)
                          2: 8789C45E384311EAAA40EE51C4F9AE02.roa (hash: c7U9E4x7HWCTnVuZ6VGp81T+MLLhMyYu6vQNMBF1IL4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.crl
                          rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VcRoVcyRrFSsB1wpe3Ux-oinNdk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:05:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3032 (0xbd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154534, serialNumber=55C46855CC91AC54AC075C297B7531FA88A735D9
        Validity
            Not Before: Mar  2 01:05:56 2026 GMT
            Not After : Mar  9 01:05:56 2026 GMT
        Subject: CN=69a4e275-23f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a3:6b:e5:03:2e:6a:29:70:a7:c5:87:94:ab:
                    0f:5a:6f:3f:c2:cd:08:b2:97:bd:3c:5b:46:a9:dc:
                    35:2a:3e:31:6d:8c:d9:c1:11:99:16:c9:ca:25:2a:
                    cf:2e:98:6d:9b:f5:5d:82:37:48:fd:06:21:6a:19:
                    85:ff:8d:62:fb:d5:f5:97:8d:a9:5e:7f:29:dd:28:
                    2c:3b:e4:fa:a8:40:62:f4:7b:da:d1:22:16:82:72:
                    57:6c:39:95:f6:f7:20:7b:ff:ef:7c:5f:e9:af:f0:
                    49:4a:25:e9:10:67:41:07:d1:c4:22:b5:40:0c:8b:
                    8a:6e:55:a1:49:ef:6d:83:6e:72:01:8b:8a:6a:31:
                    c5:46:58:49:42:4c:05:20:29:1d:18:e1:18:56:94:
                    af:3a:35:11:d2:ef:86:da:2e:7d:20:8b:19:9b:c9:
                    46:6f:9d:14:72:f5:6c:d7:0c:4a:62:e4:df:86:c7:
                    aa:a6:45:23:37:18:a6:6f:7a:88:a3:48:01:c0:f1:
                    b6:59:1e:06:3d:fb:c1:e3:72:9f:95:d2:36:06:5b:
                    58:cb:ea:a1:db:79:90:7e:eb:57:ab:5a:12:fe:85:
                    d6:fa:36:26:3c:6f:a9:ed:88:5a:30:c7:7f:7e:27:
                    4e:ac:aa:25:42:1e:bd:99:40:82:aa:f8:08:42:d9:
                    6d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:C4:74:47:8A:06:E9:C0:7E:D2:92:7F:7F:6D:2C:C9:7C:A1:AB:A6
            X509v3 Authority Key Identifier:
                keyid:55:C4:68:55:CC:91:AC:54:AC:07:5C:29:7B:75:31:FA:88:A7:35:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VcRoVcyRrFSsB1wpe3Ux-oinNdk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:a4:fa:a1:50:d5:d1:de:8a:f9:64:2d:51:81:1b:02:c9:61:
         aa:3b:26:65:88:d2:85:77:87:37:ee:76:bc:1c:d7:e5:df:c0:
         dd:44:6e:e6:e9:e1:91:e5:69:a5:3a:f1:18:38:c4:e1:a4:6e:
         b4:8e:41:00:2e:14:b0:f1:31:f8:42:8c:97:c3:8a:42:98:75:
         fc:6e:61:61:16:71:bd:10:3f:16:a8:0f:38:e3:8a:98:ae:19:
         63:1b:e8:51:b0:2d:15:de:40:d6:71:5c:d2:70:0e:dd:23:3d:
         68:19:6d:68:24:fb:b1:95:54:b8:34:26:dd:73:39:55:82:ee:
         1a:a0:08:62:c8:b1:68:d5:dc:89:78:ff:4a:1f:ae:f8:ee:23:
         cf:01:0b:02:2b:cf:a8:74:f0:bc:74:d0:48:d6:c5:65:e4:b5:
         bb:16:4b:dc:15:0a:8a:42:84:0c:00:d5:9f:e9:0a:b3:e0:89:
         f4:17:ab:f1:30:25:de:e3:22:a8:34:02:83:e6:b0:8d:20:2c:
         be:f9:e8:33:9e:06:4a:89:8a:6f:cc:9f:d4:63:11:92:d4:77:
         91:72:d0:6a:b8:39:19:2b:f5:10:3f:f1:9d:e3:6d:b5:2b:b2:
         23:18:ce:42:63:70:90:5d:00:15:0d:c5:9a:98:0a:21:d5:c2:
         7b:69:46:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:10:43 2026 by rpki-client