Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161B37/5AEC0C30ABBC11EFB3D9CE6EC4F9AE02/vc-jy52E0VT-MqVOm0uJXlyNWR4.mft
File:                     vc-jy52E0VT-MqVOm0uJXlyNWR4.mft (raw, json)
Hash identifier:          iW9dMKPvMZyhVlKvJ8xgqumoWJILGVMae1wzrD6GGgA=
Subject key identifier:   8C:E0:12:A8:09:F5:A0:D6:E1:59:13:CB:E3:6A:C9:5E:E8:F6:24:17
Authority key identifier: BD:CF:A3:CB:9D:84:D1:54:FE:32:A5:4E:9B:4B:89:5E:5C:8D:59:1E
Certificate issuer:       /CN=A9161B37/serialNumber=BDCFA3CB9D84D154FE32A54E9B4B895E5C8D591E
Certificate serial:       ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vc-jy52E0VT-MqVOm0uJXlyNWR4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161B37/5AEC0C30ABBC11EFB3D9CE6EC4F9AE02/vc-jy52E0VT-MqVOm0uJXlyNWR4.mft
Manifest number:          ED
Signing time:             Sun 01 Mar 2026 07:28:37 +0000
Manifest this update:     Sun 01 Mar 2026 07:28:36 +0000
Manifest next update:     Sun 08 Mar 2026 07:28:36 +0000
Files and hashes:         1: vc-jy52E0VT-MqVOm0uJXlyNWR4.crl (hash: zRue9fk2TvU8RZNEjmfMitjwk6rtTuyJg7xK6+wHr7A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161B37/5AEC0C30ABBC11EFB3D9CE6EC4F9AE02/vc-jy52E0VT-MqVOm0uJXlyNWR4.crl
                          rsync://rpki.apnic.net/member_repository/A9161B37/5AEC0C30ABBC11EFB3D9CE6EC4F9AE02/vc-jy52E0VT-MqVOm0uJXlyNWR4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vc-jy52E0VT-MqVOm0uJXlyNWR4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:28:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 237 (0xed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161B37, serialNumber=BDCFA3CB9D84D154FE32A54E9B4B895E5C8D591E
        Validity
            Not Before: Mar  1 07:28:36 2026 GMT
            Not After : Mar  8 07:28:36 2026 GMT
        Subject: CN=69a3eaa5-cd04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f5:ae:14:d0:8e:90:91:9c:cb:a9:03:e9:61:
                    2c:14:00:eb:2f:4d:aa:d4:ec:20:c4:ce:68:fa:81:
                    c2:f3:5a:85:e4:ca:a6:16:27:f0:6c:9c:29:4b:cd:
                    27:d3:45:ce:73:38:79:e6:21:d3:09:fc:b8:70:b7:
                    f7:b9:b2:ee:7b:9d:91:f6:fd:f0:bb:e0:60:83:b5:
                    3f:36:03:e2:dd:90:54:ba:a8:38:43:91:fd:78:17:
                    f4:8a:38:47:b5:01:65:a4:7e:12:ff:b7:a4:4e:e6:
                    b7:fc:e2:be:c8:d1:92:fc:38:8d:66:a0:1a:36:d8:
                    9a:90:c5:aa:d0:00:96:05:95:c6:7f:a9:cc:75:50:
                    a3:bf:60:0d:4b:6a:b6:aa:e1:70:65:83:a9:7c:e8:
                    eb:d7:59:55:32:ad:c6:ef:9b:20:69:f2:46:bd:59:
                    bf:7e:70:35:02:26:ec:8b:17:68:bf:21:bc:cf:4c:
                    00:94:24:3a:de:e6:fe:de:36:9a:c2:5c:e7:fd:d6:
                    b4:1d:3b:d3:b7:1d:8f:92:ef:12:2b:fd:4b:45:84:
                    4f:45:5d:cb:60:a8:74:f3:d8:24:e4:74:c7:39:61:
                    3e:0a:7f:d2:dd:3b:44:66:94:40:de:6b:32:26:0f:
                    42:e3:83:55:8f:a1:0a:9b:b1:d3:cc:b8:01:d2:35:
                    0e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:E0:12:A8:09:F5:A0:D6:E1:59:13:CB:E3:6A:C9:5E:E8:F6:24:17
            X509v3 Authority Key Identifier:
                keyid:BD:CF:A3:CB:9D:84:D1:54:FE:32:A5:4E:9B:4B:89:5E:5C:8D:59:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161B37/5AEC0C30ABBC11EFB3D9CE6EC4F9AE02/vc-jy52E0VT-MqVOm0uJXlyNWR4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vc-jy52E0VT-MqVOm0uJXlyNWR4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161B37/5AEC0C30ABBC11EFB3D9CE6EC4F9AE02/vc-jy52E0VT-MqVOm0uJXlyNWR4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:5f:e8:1c:f1:e6:04:d9:5f:4f:ab:2f:70:7b:3e:53:93:8b:
         28:76:48:03:4a:94:f4:3d:2a:ee:20:d2:2f:87:bd:25:bf:89:
         82:89:ca:ea:28:9b:0a:9a:9c:06:be:74:d5:a4:1c:df:42:10:
         5b:3b:e3:98:55:35:58:ce:07:ed:42:8e:48:b7:94:4f:e9:e6:
         c2:93:f0:45:65:bc:0b:0b:45:31:cc:98:61:3b:c2:ee:12:e7:
         3e:d8:f9:43:1a:3c:8c:ae:8d:7b:dd:71:b6:02:4e:c1:ee:ec:
         4c:75:16:94:e7:a8:fa:cc:ac:af:f0:53:ab:35:b7:ef:ab:c5:
         f9:82:73:e4:6e:ba:9b:dd:0d:55:a6:bd:2b:19:54:fe:28:72:
         9f:c6:cd:b8:a7:cd:cc:cb:bd:0d:56:c9:23:4a:f2:7f:1b:b5:
         25:c5:87:43:ad:93:0c:09:cb:26:cf:4d:c4:87:8f:5e:10:c4:
         57:e4:9f:44:c7:73:1a:0f:e0:fa:3f:b9:83:69:7e:10:5e:44:
         42:75:40:08:21:56:0e:73:4b:b6:fd:d5:e8:c9:da:d7:8b:e4:
         e7:32:05:15:fd:3e:af:d1:04:00:58:90:a6:b6:a1:c0:3d:82:
         c2:a1:c0:7a:29:17:1d:ae:fd:60:a9:8a:16:cb:39:f3:4e:da:
         a2:3d:7e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:31:16 2026 by rpki-client