Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft
File:                     vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft (raw, json)
Hash identifier:          Y8CH/mZ3Pn3vMxhmlldqI/QtbXvRGD6B5XcjvguYcPc=
Subject key identifier:   76:E0:88:10:AB:36:D3:06:3B:FD:5E:B1:4E:93:D0:E0:DE:19:63:B4
Authority key identifier: BD:63:E0:DD:CB:5C:D4:1B:34:50:1D:F2:E8:1A:2A:72:CE:E3:6E:F2
Certificate issuer:       /CN=A917B503/serialNumber=BD63E0DDCB5CD41B34501DF2E81A2A72CEE36EF2
Certificate serial:       0140
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft
Manifest number:          0139
Signing time:             Mon 02 Mar 2026 03:10:37 +0000
Manifest this update:     Mon 02 Mar 2026 03:10:36 +0000
Manifest next update:     Mon 09 Mar 2026 03:10:36 +0000
Files and hashes:         1: vWPg3ctc1Bs0UB3y6Boqcs7jbvI.crl (hash: NbFwMKIx0Zcu64yJ2h2g27GUVKpf7otn/kG3GeUZS1Y=)
                          2: FF7048A08BB111EF8981B871C4F9AE02.roa (hash: Pf4vtsycRl7uQ7TRSuhW3ZPGeuFhV8pttTvvgiVqOIo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.crl
                          rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:10:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 320 (0x140)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B503, serialNumber=BD63E0DDCB5CD41B34501DF2E81A2A72CEE36EF2
        Validity
            Not Before: Mar  2 03:10:36 2026 GMT
            Not After : Mar  9 03:10:36 2026 GMT
        Subject: CN=69a4ffad-98a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:82:a6:f1:a3:14:0f:16:70:a5:24:17:ca:df:
                    c3:da:8a:da:4d:df:67:29:81:be:2a:2b:46:38:79:
                    74:7c:c5:91:ac:bf:60:47:f9:38:39:99:af:d0:95:
                    83:bf:ba:61:10:b1:19:89:59:4a:b5:d7:47:ad:1d:
                    78:0f:45:d0:e7:54:1f:bd:a4:24:71:98:c1:29:a7:
                    9f:ac:b0:31:ec:f0:e6:bb:4c:e5:ab:5b:5d:da:87:
                    37:4a:ff:00:71:f9:18:19:e8:97:9e:70:45:82:dd:
                    60:71:89:e0:19:22:ec:e2:90:b7:44:dc:df:93:51:
                    29:3c:52:15:7d:99:ac:29:5f:72:39:81:90:7e:bf:
                    5d:c6:86:a3:46:31:d2:31:a0:e5:1f:b2:09:39:7a:
                    86:9b:0a:e6:d4:c1:23:b1:9e:e4:b5:15:57:70:1b:
                    8e:a6:c2:f1:67:60:00:e1:0c:7b:5c:7f:6b:5c:44:
                    3c:d9:52:8d:22:64:e0:c2:f3:1d:cd:b1:27:ad:87:
                    bb:98:d8:2c:fc:fe:b5:32:39:7d:c5:b7:a2:7a:55:
                    f1:0d:01:94:2f:2c:bf:b9:64:5a:00:ee:27:74:46:
                    99:fb:9f:6e:8e:04:b4:02:e8:e3:10:f8:5a:2c:9c:
                    8a:c0:38:ba:2e:cf:f6:91:2b:bc:73:8b:0b:52:be:
                    78:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:E0:88:10:AB:36:D3:06:3B:FD:5E:B1:4E:93:D0:E0:DE:19:63:B4
            X509v3 Authority Key Identifier:
                keyid:BD:63:E0:DD:CB:5C:D4:1B:34:50:1D:F2:E8:1A:2A:72:CE:E3:6E:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:d3:49:4c:e0:92:27:a9:a3:92:9a:08:5f:4b:3d:ea:e4:e4:
         c7:b9:85:9c:f8:ad:68:9e:4a:83:45:53:f9:c5:cc:a9:09:14:
         59:f4:89:4a:3c:34:82:b8:31:2d:86:fa:f8:00:70:24:cb:27:
         9a:21:b8:44:4b:84:be:92:36:7f:27:0d:08:f3:ae:64:a4:47:
         62:5b:5a:ae:53:2e:52:41:41:40:b6:59:57:c1:a1:8f:42:43:
         42:49:79:c1:d9:5c:27:36:2d:ae:ee:5d:97:a5:93:0b:4b:14:
         f7:db:52:09:9c:88:20:11:6f:8b:ba:e7:cf:f2:43:74:06:0d:
         9e:5d:bf:6d:ce:4b:61:de:97:68:ff:c9:47:ef:87:22:9a:94:
         43:5d:64:4e:96:df:9d:1c:c0:fd:c3:fe:65:b2:ed:8c:40:be:
         3c:d8:67:69:09:5a:24:13:51:95:a0:a3:51:5d:fd:cc:39:bc:
         d3:a0:fc:26:4f:9a:bf:94:49:12:54:b9:2e:4f:21:23:53:2a:
         d0:2e:7e:ea:92:be:97:71:b7:b6:a9:40:4d:0e:28:ba:6c:32:
         3f:0f:96:52:c2:6b:c5:62:f4:31:a1:f8:51:a1:0b:02:7c:1d:
         ba:ce:51:80:e3:b0:41:db:8d:27:c4:ad:d5:d2:b6:ba:a1:d1:
         5f:84:9a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:47:40 2026 by rpki-client