Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft
File:                     VCRPZF3qDVCWaFgNE46CUnn7Vng.mft (raw, json)
Hash identifier:          qeSF4NKvaA2tr+aFApfnvyBYQgGfsdXdIYjfzQmY5LI=
Subject key identifier:   2E:5C:98:68:F3:14:51:80:D5:5B:A1:D4:DE:1E:3F:4A:DC:52:9A:DA
Authority key identifier: 54:24:4F:64:5D:EA:0D:50:96:68:58:0D:13:8E:82:52:79:FB:56:78
Certificate issuer:       /CN=A91B624E/serialNumber=54244F645DEA0D509668580D138E825279FB5678
Certificate serial:       0D99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCRPZF3qDVCWaFgNE46CUnn7Vng.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft
Manifest number:          0D8F
Signing time:             Sat 28 Feb 2026 18:05:23 +0000
Manifest this update:     Sat 28 Feb 2026 18:05:23 +0000
Manifest next update:     Sat 07 Mar 2026 18:05:23 +0000
Files and hashes:         1: VCRPZF3qDVCWaFgNE46CUnn7Vng.crl (hash: qkteWFNUc9jkirjmyo7OEAz+rnt4kmgbyxs2g03zGLY=)
                          2: 690390E80FAA11EB8B893F1EC4F9AE02.roa (hash: 9FxIJk5By9GC/1mM3LBBThqiUIJi3J3T7y2yMdVI55E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.crl
                          rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCRPZF3qDVCWaFgNE46CUnn7Vng.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 18:05:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3481 (0xd99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B624E, serialNumber=54244F645DEA0D509668580D138E825279FB5678
        Validity
            Not Before: Feb 28 18:05:23 2026 GMT
            Not After : Mar  7 18:05:23 2026 GMT
        Subject: CN=69a32e63-c1f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:33:4d:4f:7c:5a:27:0f:00:9e:67:f5:e5:24:
                    7a:af:8d:2d:62:82:de:83:ad:7e:50:3d:2c:29:92:
                    a3:82:92:bf:f3:87:96:2a:0f:d7:dd:0a:1f:3b:24:
                    13:e1:75:59:e1:0a:13:a6:15:d4:91:b2:7f:d1:e0:
                    cc:67:4b:e5:7b:b6:08:af:a6:ac:0b:28:22:61:48:
                    ba:1d:a5:10:a5:6d:38:04:9c:53:d6:93:9c:e3:e7:
                    19:09:99:04:ac:3b:b1:71:37:d7:ee:f8:93:cc:ea:
                    1e:bf:15:c1:c8:87:a7:6d:39:1f:be:d4:d9:9c:72:
                    cb:4d:9a:51:32:97:af:9e:60:47:48:1c:13:8e:fc:
                    84:d0:70:d0:4f:27:1b:8b:e3:3d:c2:7a:54:2e:db:
                    fc:62:98:48:b7:41:dc:d3:0c:44:21:31:38:28:5b:
                    1d:86:42:7e:61:0a:a0:7d:4c:5d:b0:7c:b4:58:e1:
                    d1:80:c2:2b:23:cb:2c:1e:fe:58:0a:f7:63:bc:c3:
                    37:bf:cc:8b:b3:d5:98:a8:9a:b9:cf:1e:82:b9:77:
                    cb:55:e2:10:4c:e5:1c:e2:78:40:c9:f2:a9:13:d0:
                    bc:b3:90:fa:e8:44:32:0b:a7:25:b8:f9:5f:9f:41:
                    07:84:8f:03:b7:f9:b0:5a:e1:6d:a8:b9:e0:9d:10:
                    17:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:5C:98:68:F3:14:51:80:D5:5B:A1:D4:DE:1E:3F:4A:DC:52:9A:DA
            X509v3 Authority Key Identifier:
                keyid:54:24:4F:64:5D:EA:0D:50:96:68:58:0D:13:8E:82:52:79:FB:56:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCRPZF3qDVCWaFgNE46CUnn7Vng.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:73:f4:bd:e1:38:61:0a:f7:64:bb:5e:40:34:d8:d2:15:ce:
         42:c9:9e:0d:47:93:e8:ce:9a:a0:2a:a7:5c:c2:f4:bb:83:ec:
         58:14:2d:ea:bf:0f:6f:f0:c2:34:8f:36:82:7d:29:94:96:0e:
         d4:d3:4f:9b:1a:96:ad:0c:01:7a:e7:97:95:bc:aa:c7:fb:1d:
         b2:fb:16:8d:29:11:76:b0:b1:d3:0b:a9:b6:0c:82:1d:00:2f:
         2d:92:84:04:9a:29:03:79:7c:a6:1b:f3:1b:ee:3b:0d:95:8c:
         2a:a2:d3:1a:09:16:f3:be:ab:e6:7a:50:3e:19:f4:28:20:59:
         cc:eb:d6:aa:2e:a2:e2:50:c5:2b:aa:d3:df:37:d1:71:fd:f6:
         17:5c:21:eb:d8:b7:c8:68:48:41:67:1e:c2:8c:65:7b:69:80:
         4e:f7:92:03:d3:c1:9c:ea:09:c0:38:be:39:c7:28:0d:e7:f3:
         36:c7:5d:48:a3:68:69:56:6c:95:28:3b:f7:07:13:00:73:43:
         dd:4e:47:2e:b0:77:a3:eb:9a:24:c9:07:94:46:f9:45:1f:db:
         3b:2a:ff:87:01:84:cf:61:de:3f:dd:6f:e0:ed:da:24:7d:8b:
         cb:4f:ad:74:c5:a8:05:1a:d1:e1:16:8c:7c:af:d4:a2:5f:0c:
         d8:2b:45:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:26:52 2026 by rpki-client