Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.mft
File:                     vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.mft (raw, json)
Hash identifier:          65LyQbRurYSSLJ91vnn9AL/BvfL4Nn16qGKsmBZqvHg=
Subject key identifier:   16:89:78:05:13:B3:AE:E2:D2:D7:EF:25:4A:84:04:44:97:05:31:44
Authority key identifier: BE:A7:E9:8C:5A:3F:B5:FB:D8:30:A4:35:94:41:B4:22:47:27:C7:2D
Certificate issuer:       /CN=A91C612E/serialNumber=BEA7E98C5A3FB5FBD830A4359441B4224727C72D
Certificate serial:       C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.mft
Manifest number:          1487
Signing time:             Mon 02 Mar 2026 02:12:20 +0000
Manifest this update:     Mon 02 Mar 2026 02:12:19 +0000
Manifest next update:     Mon 09 Mar 2026 02:12:19 +0000
Files and hashes:         1: vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.crl (hash: ivXUL9x+vWTX0wkwAnZkA+CN9Jz1wJH/I+wsl2sfjFg=)
                          2: 7C0FB3666B7F11F0A9B64752C4F9AE02.roa (hash: nHHzFrXJRcXIb2I9fczhxDS1jU+m1O4shauWLpm0dzk=)
                          3: CE9A1068FD0B11F0B45A79BF3A6F56BC.roa (hash: NKMZFolC9Hm7C/oEEm0Kbb0cMaxbYq9rJ+XoFzJAzo0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.crl
                          rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 193 (0xc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C612E, serialNumber=BEA7E98C5A3FB5FBD830A4359441B4224727C72D
        Validity
            Not Before: Mar  2 02:12:19 2026 GMT
            Not After : Mar  9 02:12:19 2026 GMT
        Subject: CN=69a4f204-413e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:97:3d:0d:e8:f8:ed:b6:e1:e5:ea:80:f9:e1:
                    84:13:b7:99:4d:ae:ec:9d:63:e9:86:d5:7d:88:cd:
                    a2:7a:d8:a4:c6:6c:8e:19:a2:ed:0a:e4:21:db:7a:
                    89:d8:c8:8e:31:37:50:79:50:bd:4d:a6:78:01:22:
                    ed:7d:13:15:29:9a:f8:48:1c:2d:13:c0:d9:31:ba:
                    fb:44:41:81:c7:b0:a0:65:8f:de:d8:ab:f3:d1:25:
                    aa:96:99:2a:8a:1d:8b:1f:6f:9c:97:5a:93:2a:82:
                    83:1b:05:6c:8f:5f:9a:0b:d3:1b:74:e7:37:d4:5c:
                    12:65:a9:fc:47:f2:82:c8:e3:93:76:e8:98:80:18:
                    8b:44:ee:cd:f6:93:01:57:78:4c:fc:64:13:7a:2f:
                    e2:96:d3:81:c1:a6:fb:bf:af:b9:da:ba:a3:19:38:
                    c1:01:25:b9:ef:80:fb:dd:03:8c:27:d8:23:a9:3b:
                    e1:c4:6e:24:98:e5:5d:f1:57:79:e7:b8:aa:2b:35:
                    51:d0:1d:d1:5b:2d:b4:e8:7a:12:74:6d:2e:23:db:
                    dc:f1:56:33:87:37:73:fe:a1:c9:80:e8:c2:83:78:
                    fc:75:08:f5:0c:3a:36:9c:66:81:f0:1b:e9:97:f6:
                    90:54:1e:24:79:76:de:cf:5c:e7:36:fb:ed:82:4a:
                    e5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:89:78:05:13:B3:AE:E2:D2:D7:EF:25:4A:84:04:44:97:05:31:44
            X509v3 Authority Key Identifier:
                keyid:BE:A7:E9:8C:5A:3F:B5:FB:D8:30:A4:35:94:41:B4:22:47:27:C7:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:b4:a7:3e:f1:09:e3:ae:3c:86:ca:2c:34:29:60:95:5a:33:
         54:ea:86:ed:85:d7:70:74:43:ff:cc:d8:82:1f:d4:33:6c:ea:
         63:a5:06:7b:87:a6:6d:a3:d3:1a:ef:f2:dd:87:d0:df:e5:4b:
         9c:ff:5c:dc:e3:73:c6:91:87:8b:be:91:32:8c:8d:55:a6:2e:
         76:05:5e:03:c2:56:bf:dc:88:9d:22:0d:bb:7f:1d:48:b0:11:
         ea:db:ca:49:68:8a:5c:16:9d:17:ad:f3:5e:3f:f3:86:1b:0f:
         34:cd:ab:4d:f5:67:0d:72:b8:a3:a5:33:16:6e:15:eb:98:8d:
         c5:33:12:a1:5a:16:2a:52:8c:6c:5c:73:85:c0:eb:ec:17:af:
         5a:7a:c7:34:12:81:e2:18:a4:d6:a4:38:98:55:df:9c:66:cc:
         d3:11:6b:b6:c7:ea:75:05:f9:39:d1:e5:80:31:03:da:98:37:
         dc:f5:de:a0:2b:f0:b7:9e:c9:b1:e9:09:aa:e5:72:68:3f:23:
         80:3f:b4:d9:2f:08:c0:e0:71:51:b7:9a:d8:f7:fe:13:25:37:
         ac:68:33:df:26:cc:61:e8:fb:32:38:23:15:85:af:4f:5c:de:
         e8:a4:a7:1a:00:50:79:db:e8:09:5b:fe:8c:d8:dd:25:a8:b1:
         87:fa:57:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:00:51 2026 by rpki-client