Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft
File:                     vaPoqCMceH9rfxi8FGuV-1wDjtk.mft (raw, json)
Hash identifier:          jVuhHnSdtbnL5IRMAtga5XsR783NEBUrDMkZdoIjPqo=
Subject key identifier:   89:98:A2:91:E5:A5:90:DA:46:CE:56:2C:C1:A0:C4:EC:CB:DF:3D:3D
Authority key identifier: BD:A3:E8:A8:23:1C:78:7F:6B:7F:18:BC:14:6B:95:FB:5C:03:8E:D9
Certificate issuer:       /CN=A91AE8D7/serialNumber=BDA3E8A8231C787F6B7F18BC146B95FB5C038ED9
Certificate serial:       0121
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vaPoqCMceH9rfxi8FGuV-1wDjtk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft
Manifest number:          0121
Signing time:             Mon 21 Sep 2026 05:46:42 +0000
Manifest this update:     Mon 21 Sep 2026 05:46:41 +0000
Manifest next update:     Mon 28 Sep 2026 05:46:41 +0000
Files and hashes:         1: vaPoqCMceH9rfxi8FGuV-1wDjtk.crl (hash: LN7sfqLi54RNt3LW7Djc8emHlVSP+DKOUxLjfil+zF0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.crl
                          rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vaPoqCMceH9rfxi8FGuV-1wDjtk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 05:46:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 289 (0x121)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE8D7, serialNumber=BDA3E8A8231C787F6B7F18BC146B95FB5C038ED9
        Validity
            Not Before: Sep 21 05:46:41 2026 GMT
            Not After : Sep 28 05:46:41 2026 GMT
        Subject: CN=6ab0c4c2-739b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:58:ea:40:f3:86:e2:52:f5:40:64:81:7c:f6:
                    2c:40:5f:13:f0:bd:fc:67:f6:df:a1:93:8c:dd:fe:
                    c5:32:0c:65:36:4d:c9:64:c4:0c:0d:24:67:21:ef:
                    51:24:b6:18:8a:50:29:6d:22:d9:35:46:52:d2:b1:
                    48:f5:fe:18:86:07:e7:ae:d1:50:5a:55:73:cc:32:
                    aa:a5:26:11:6a:ae:ed:6c:aa:c7:22:14:56:da:96:
                    a4:6a:b3:d7:e4:4a:06:c7:c4:2d:90:a9:6c:ec:c2:
                    e5:d3:4d:72:c3:13:f6:7a:9a:7f:db:3e:26:86:d0:
                    7d:a3:67:6e:e6:38:aa:e1:8e:7e:12:19:46:29:f0:
                    43:f5:ec:86:a0:55:88:03:f9:94:bf:26:8a:75:99:
                    f7:80:f8:61:cc:c9:6a:05:82:a2:10:66:b8:96:21:
                    9e:d4:9e:ea:54:40:af:d4:ce:0a:3d:b1:c2:e3:23:
                    c7:8f:51:3f:9f:f7:3b:22:8f:d4:0b:c9:49:54:f7:
                    59:2c:e3:c5:3c:dc:ca:60:80:b0:b7:7d:60:ec:9d:
                    7d:b8:ac:d3:6e:76:6a:27:56:f0:53:db:b6:d2:8d:
                    d1:24:87:0c:80:b1:8a:a7:8b:c8:2f:24:88:a6:93:
                    6e:63:71:74:92:66:0b:12:37:ea:d7:d9:f8:e9:dd:
                    db:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:98:A2:91:E5:A5:90:DA:46:CE:56:2C:C1:A0:C4:EC:CB:DF:3D:3D
            X509v3 Authority Key Identifier:
                keyid:BD:A3:E8:A8:23:1C:78:7F:6B:7F:18:BC:14:6B:95:FB:5C:03:8E:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vaPoqCMceH9rfxi8FGuV-1wDjtk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:3c:40:50:da:94:78:df:1d:8f:35:39:26:89:a8:9a:e3:4c:
         33:79:4d:c8:d8:ed:66:3f:4c:3c:c5:8d:b3:54:96:14:e7:32:
         ff:33:44:ae:a0:a6:4d:a2:d0:c8:cf:fe:58:11:66:1b:60:66:
         ad:47:27:7d:58:bf:14:b1:81:f2:92:3b:03:32:bd:58:33:17:
         9e:7a:7b:56:cb:79:1c:07:6b:41:ef:f3:99:d1:b0:ee:d4:a5:
         3b:d8:50:5e:2b:77:34:dc:8c:6e:65:03:81:10:78:b2:ee:1a:
         14:9d:df:e9:4f:6b:12:d4:2f:61:c2:19:22:b6:b2:f5:28:84:
         ad:d1:79:74:a8:bf:2b:39:3d:c6:81:61:3c:4a:5c:e6:de:85:
         8b:90:0c:59:27:34:3e:0a:0f:96:43:06:46:77:32:a8:54:f7:
         74:6b:af:8a:f3:e0:ea:ed:07:79:cf:fc:99:44:1a:7b:53:a0:
         c2:4e:8c:24:2f:61:f3:0b:29:ce:d8:2d:7b:86:b0:02:cb:1a:
         99:64:d2:a8:61:56:94:ad:7e:2b:20:ea:ec:47:71:bd:b2:f9:
         d5:1a:9d:7e:13:f9:ab:7b:59:8c:1d:44:39:a5:4f:f8:0d:cd:
         26:c0:d3:db:27:53:2e:e9:93:d4:40:7e:67:17:7d:cf:ba:36:
         29:51:a3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:36:44 2026 by rpki-client