Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft
File:                     vKs-dvhO1DdC8qCBJCcI55nOG18.mft (raw, json)
Hash identifier:          KlcE+Yu/LVk6wu8UpVYe2nAwgveI02DD1r3bJvEx+sM=
Subject key identifier:   D6:8C:93:58:51:D8:F3:30:1F:D1:2B:D7:F6:3D:85:FB:2F:F5:41:6E
Authority key identifier: BC:AB:3E:76:F8:4E:D4:37:42:F2:A0:81:24:27:08:E7:99:CE:1B:5F
Certificate issuer:       /CN=A91AC532/serialNumber=BCAB3E76F84ED43742F2A081242708E799CE1B5F
Certificate serial:       0181
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft
Manifest number:          016B
Signing time:             Sun 01 Mar 2026 06:00:49 +0000
Manifest this update:     Sun 01 Mar 2026 06:00:49 +0000
Manifest next update:     Sun 08 Mar 2026 06:00:49 +0000
Files and hashes:         1: vKs-dvhO1DdC8qCBJCcI55nOG18.crl (hash: aPcoSaHBwsqBcsPIlp5LUoUWfZ15ncaT93LDwgWKTBI=)
                          2: 222F2952038511EFAF036327C4F9AE02.roa (hash: 0POds3yRjM0RD6yJRDt5kjZrzEVN1RcsA2tdedecI4c=)
                          3: E08658208D2D11F09327643FC4F9AE02.roa (hash: 41FC6Qh9FHv4UtlaWBSLbf5ObxYVTSL2scuznbl1Qds=)
                          4: A0AD48EA083011EF82AFFD44C4F9AE02.roa (hash: E2oXK+nP7XuyH0hDSL1uq1DEWcq+1W48Rez3w3+1ppw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.crl
                          rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 385 (0x181)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC532, serialNumber=BCAB3E76F84ED43742F2A081242708E799CE1B5F
        Validity
            Not Before: Mar  1 06:00:49 2026 GMT
            Not After : Mar  8 06:00:49 2026 GMT
        Subject: CN=69a3d611-77f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:54:c3:84:8e:51:de:4a:a4:85:de:bb:70:18:
                    42:dc:5f:49:72:72:c5:a3:be:41:19:ca:1b:b1:64:
                    51:ae:6a:0c:f1:56:03:dc:4f:cc:a8:c0:8c:63:07:
                    d0:05:59:6c:09:b2:69:6c:22:67:e3:76:b0:8c:37:
                    16:89:fc:29:b7:9a:9d:16:1c:f8:90:57:95:19:f9:
                    1b:43:31:ab:09:44:3e:59:1e:ae:77:2c:e8:9e:24:
                    0e:44:8b:d9:93:24:7e:94:7f:ae:5f:32:de:2a:ba:
                    2b:d4:3c:2d:dc:76:b0:9e:74:34:6f:5c:67:43:a5:
                    6f:5c:74:99:9f:1c:eb:eb:17:fa:f6:86:78:77:16:
                    0a:4d:15:dc:ef:24:90:89:c1:6f:3e:6b:58:f8:2b:
                    a8:50:2a:03:6d:2c:0e:98:56:ab:cf:bd:79:c0:2e:
                    d0:14:41:77:75:32:4e:1e:32:c5:e4:62:62:61:2c:
                    75:d6:cb:50:89:ff:fb:7b:65:86:86:bb:d2:86:54:
                    1e:0b:2d:da:d4:52:31:83:a5:c6:09:b1:1f:52:65:
                    5e:36:72:61:2a:b4:75:a3:f2:4a:ea:9a:88:44:d4:
                    b6:16:54:b8:09:23:0c:0d:26:26:e4:9b:92:66:ba:
                    72:3e:1d:15:0a:0d:73:c4:5f:0b:95:bc:58:ca:14:
                    24:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:8C:93:58:51:D8:F3:30:1F:D1:2B:D7:F6:3D:85:FB:2F:F5:41:6E
            X509v3 Authority Key Identifier:
                keyid:BC:AB:3E:76:F8:4E:D4:37:42:F2:A0:81:24:27:08:E7:99:CE:1B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:9e:e8:0a:03:00:8c:47:81:10:5f:86:1e:67:9c:b3:fb:31:
         cf:06:54:41:58:56:fb:44:bb:3e:91:56:fa:12:d5:23:87:ac:
         e3:31:76:04:46:99:ec:16:c3:25:a3:f8:bc:b0:13:46:46:a7:
         ba:b8:6c:f0:6e:11:42:8f:ba:7d:66:25:b5:22:89:fb:cd:0e:
         52:b4:7c:e0:c6:a4:a2:7d:35:35:55:4e:6d:bd:f8:5f:2a:6e:
         da:b5:67:bb:36:66:a6:e1:db:6d:bb:b5:a1:22:d2:4c:97:4f:
         38:22:f7:48:9e:25:4b:4d:de:20:eb:77:1f:7b:62:19:d4:63:
         76:28:dc:66:67:64:53:45:eb:cf:85:33:85:19:9d:3d:b1:22:
         65:43:34:d6:cd:07:e6:da:e4:6d:c6:d0:6e:37:37:c9:f2:5a:
         5e:ae:60:b6:59:4e:fd:d7:16:66:73:be:8d:fc:91:ac:a0:97:
         39:40:d0:d5:ad:70:1e:b7:bf:cb:52:eb:4e:07:78:c3:8b:60:
         06:9b:b5:5d:79:33:ab:1f:0c:d7:dc:f9:b0:4d:bf:f0:52:e1:
         4e:e8:f5:b8:1e:32:e8:8a:e0:66:b5:f5:8e:09:09:c2:b0:a7:
         0c:fc:7c:ee:42:40:fd:81:21:bb:d1:a3:1b:76:48:77:7e:41:
         83:55:45:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:23:29 2026 by rpki-client