Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCA34/6FAA367833B211EBA88A0A6FC4F9AE02/vBRJ7peREatw2N-Y2rpOJrprxls.mft
File:                     vBRJ7peREatw2N-Y2rpOJrprxls.mft (raw, json)
Hash identifier:          hZEtqUvdeu4D+9UKVADHkJeH1WS4ICIkY+LGRRPcU0I=
Subject key identifier:   43:18:86:6B:67:F8:26:35:06:AF:7C:13:31:45:CB:50:50:37:11:C4
Authority key identifier: BC:14:49:EE:97:91:11:AB:70:D8:DF:98:DA:BA:4E:26:BA:6B:C6:5B
Certificate issuer:       /CN=A91CCA34/serialNumber=BC1449EE979111AB70D8DF98DABA4E26BA6BC65B
Certificate serial:       07C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBRJ7peREatw2N-Y2rpOJrprxls.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCA34/6FAA367833B211EBA88A0A6FC4F9AE02/vBRJ7peREatw2N-Y2rpOJrprxls.mft
Manifest number:          07B9
Signing time:             Mon 02 Mar 2026 02:43:12 +0000
Manifest this update:     Mon 02 Mar 2026 02:43:10 +0000
Manifest next update:     Mon 09 Mar 2026 02:43:10 +0000
Files and hashes:         1: vBRJ7peREatw2N-Y2rpOJrprxls.crl (hash: rEt4n3x3qEuwnzQ+EAorHE8/HJq3wAt68KevckcPf40=)
                          2: 7633392033B411EB98035F74C4F9AE02.roa (hash: p6hXF7E6xlvbRKYmPzeG7CcENSLwetloa0sJ8/RE+N0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCA34/6FAA367833B211EBA88A0A6FC4F9AE02/vBRJ7peREatw2N-Y2rpOJrprxls.crl
                          rsync://rpki.apnic.net/member_repository/A91CCA34/6FAA367833B211EBA88A0A6FC4F9AE02/vBRJ7peREatw2N-Y2rpOJrprxls.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBRJ7peREatw2N-Y2rpOJrprxls.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:43:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1987 (0x7c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCA34, serialNumber=BC1449EE979111AB70D8DF98DABA4E26BA6BC65B
        Validity
            Not Before: Mar  2 02:43:10 2026 GMT
            Not After : Mar  9 02:43:10 2026 GMT
        Subject: CN=69a4f940-5a18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:82:81:d2:03:0d:08:cb:4e:77:b4:42:e8:95:
                    75:69:b2:a9:e6:1b:a1:a6:78:6b:8f:07:28:c7:a3:
                    65:e2:db:9f:5b:b2:d6:63:36:0e:55:e7:64:9f:dc:
                    57:0d:b1:f8:57:c1:ba:16:f7:46:58:bd:ac:ac:41:
                    a7:27:04:b3:9c:b5:3c:47:04:08:4c:2c:d9:c1:79:
                    8a:36:e7:89:91:6a:f7:b3:54:20:7a:d1:1e:ad:3a:
                    42:94:7f:af:9e:6a:00:9c:12:ed:e7:86:c3:c1:73:
                    1e:d6:f6:46:d1:1a:d9:cf:3f:72:f4:27:6f:43:d7:
                    e5:2b:e6:f9:35:30:0c:2c:4b:5a:a0:ce:ad:51:ea:
                    a2:de:10:38:2c:8a:aa:37:28:90:38:77:52:b4:6d:
                    80:4c:a1:08:ff:49:98:2b:31:18:5f:51:37:0d:d8:
                    5c:74:03:ed:27:2a:a5:47:05:2f:7a:6c:1b:a4:b9:
                    0a:32:3a:3a:f6:3f:bb:41:5b:a6:67:9a:42:76:ae:
                    26:a6:77:a8:da:1a:72:53:b5:33:c1:16:79:48:16:
                    be:21:c9:78:1c:b6:7e:96:19:8d:41:e1:d3:e9:9d:
                    22:37:f1:4c:8f:09:33:d6:78:34:ee:ad:c3:2d:15:
                    c1:e6:a6:5a:15:a3:9b:4c:5b:46:54:81:56:65:51:
                    7a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:18:86:6B:67:F8:26:35:06:AF:7C:13:31:45:CB:50:50:37:11:C4
            X509v3 Authority Key Identifier:
                keyid:BC:14:49:EE:97:91:11:AB:70:D8:DF:98:DA:BA:4E:26:BA:6B:C6:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCA34/6FAA367833B211EBA88A0A6FC4F9AE02/vBRJ7peREatw2N-Y2rpOJrprxls.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBRJ7peREatw2N-Y2rpOJrprxls.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCA34/6FAA367833B211EBA88A0A6FC4F9AE02/vBRJ7peREatw2N-Y2rpOJrprxls.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:64:8d:ad:59:36:b2:06:d6:19:0e:32:09:36:1b:99:20:87:
         35:69:ea:46:fc:29:5b:ee:df:f2:4e:25:83:a6:c2:51:11:7e:
         84:8e:d7:27:a5:5c:45:81:84:11:88:20:83:92:92:03:4a:65:
         63:aa:07:d3:de:ef:c7:4a:ba:5b:2d:19:54:1b:e9:61:66:f6:
         94:b0:28:2f:f1:d7:5e:4f:bc:af:ce:13:2f:05:fe:5a:e0:c2:
         9d:72:96:6c:d8:06:52:d2:87:53:47:d8:ec:85:85:5c:12:58:
         86:e4:b8:73:69:96:c0:3c:65:90:e1:d9:1b:24:92:42:a4:5c:
         2b:e3:b8:b1:88:fe:b5:e9:9d:74:54:31:77:d5:19:93:40:53:
         e4:1b:57:06:5a:b5:0b:b0:91:26:02:d5:a4:7e:85:3a:19:00:
         10:1d:bb:04:27:a8:5d:27:73:71:c0:4e:bf:29:b4:d3:c2:74:
         82:69:20:ce:2b:9b:a3:a5:19:0b:44:59:09:f7:87:8c:7f:4d:
         dc:75:f0:29:5f:3d:81:89:8b:84:17:d6:8e:37:35:f5:fc:4c:
         8c:09:2c:8b:61:cd:1d:ec:8a:d6:d0:0e:66:9a:bc:f2:7f:0d:
         8a:f0:86:01:af:cb:97:b7:0b:63:f3:85:4f:65:8d:79:a7:67:
         91:e4:b6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:46:51 2026 by rpki-client