Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft
File:                     VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft (raw, json)
Hash identifier:          hI+vP1vIyDJPXXctlAWhPI4nB15VG8bLxy2gNunZkeM=
Subject key identifier:   0D:8D:91:9E:C0:BA:52:17:52:1E:30:7D:11:BC:CF:83:56:36:94:7F
Authority key identifier: 56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3
Certificate issuer:       /CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
Certificate serial:       06F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft
Manifest number:          05FB
Signing time:             Sun 01 Mar 2026 00:20:47 +0000
Manifest this update:     Sun 01 Mar 2026 00:20:46 +0000
Manifest next update:     Sun 08 Mar 2026 00:20:46 +0000
Files and hashes:         1: VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl (hash: juIHuqtZ8h7COmDjJ5GvJmCm+gKqfAfY/6RAEthy+LA=)
                          2: 6A05B7C8D34F11F0879CFC0EC4F9AE02.roa (hash: jiwDe7E+6oQ/NYQS+P3R9/wg4GDqG2E45jgEd+C7XTU=)
                          3: 48CB7422E27911ED88B5A641C4F9AE02.roa (hash: KA9nI7ftvpXVQRaJtdElzzf8IGXCidp2hICVELUi4VE=)
                          4: 8DEEDC96E6B511EF9FEF6436C4F9AE02.roa (hash: RFHWotDjHz9IyTVgQhqPMzU4NUGIMGbK3Tq94su3l+4=)
                          5: D359E238716B11ED9F349A49C4F9AE02.roa (hash: aucFf1dFg8E6sXkaQ0WchDFiOUdAA+vJ4MxjhxqpTl0=)
                          6: 0C5EDCDA716911EDA03D4A50C4F9AE02.roa (hash: 2TfYAVAgEQTTv0ZFyHze1Mxtp39JFJQp/vIAA/v9auQ=)
                          7: 041C4116C47C11F0A98A0F0AC4F9AE02.roa (hash: DHEoMyBHtdzHtWhhIwch3SQMxsfyWzvpKfIC6T/xUns=)
                          8: D4FCF92C716B11ED9F349A49C4F9AE02.roa (hash: /KBmH27+liNc7Je6lmfQARcUNzZ4vENS/K//UAYXxEs=)
                          9: B7342ECA555B11F0B35B1E0DC4F9AE02.roa (hash: tO9TjdAM9kqAlyXyGaL9ydPBbH+LTLSX2O9lwj1it88=)
                          10: 0D0517EE716911EDA03D4A50C4F9AE02.roa (hash: b8V6p0JJ741AoKpmotD0KOEuJJzSr+FlBeL8aS5wkPg=)
                          11: 0BD4BBC2716911EDA03D4A50C4F9AE02.roa (hash: +q4ii3kFAs8ACqEZ6BjSckD3NU5EafvQgYfuiybgjtg=)
                          12: ECC41AD2748A11ED80EF3436C4F9AE02.roa (hash: C/4N4YGAPMXTvMQ0VDNg++F7ZNkUv6rU6rWqLzDBgzw=)
                          13: 9A1D8B2E867D11ED856A8E54C4F9AE02.roa (hash: AO1r1mv/StKzJWk1m3WYBwdxsvoQjpb8Rj+HgNAs/Oo=)
                          14: 038A3E10C47C11F092370F0AC4F9AE02.roa (hash: R6ZWg78kRuVdQEvjckkV5CrRltvEccJZf3UzS4WTXw0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl
                          rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 00:20:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1780 (0x6f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD39D, serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
        Validity
            Not Before: Mar  1 00:20:46 2026 GMT
            Not After : Mar  8 00:20:46 2026 GMT
        Subject: CN=69a3865e-8ec9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:da:b6:a1:02:73:f0:92:41:b5:5d:8e:09:33:
                    c2:6c:0a:fb:58:46:19:8f:13:84:a0:30:3a:e9:16:
                    c7:d9:3d:31:a1:8f:62:86:ec:aa:14:cc:2f:90:ac:
                    a8:9f:c0:62:15:1e:9a:1c:99:8a:fc:45:03:e1:3a:
                    18:ef:99:f9:cc:a4:19:85:7e:94:0b:f3:da:ad:8c:
                    85:05:98:34:00:f4:12:43:b0:91:f2:5b:08:bf:cc:
                    89:b2:a8:ea:22:85:a8:35:11:23:60:7b:b2:4b:af:
                    01:64:c6:5a:5f:8f:33:7f:b2:1c:67:e1:20:4d:1a:
                    ff:50:3c:4b:4a:2f:9b:5b:13:97:ce:01:02:24:32:
                    fe:50:a5:c8:8e:6f:b6:6a:7b:f4:c5:39:31:ae:30:
                    dc:f5:0f:66:a9:61:41:87:26:fd:d3:14:d2:13:b5:
                    75:b3:fa:0c:ad:61:be:d0:aa:46:48:79:1d:78:e4:
                    01:f9:c3:14:73:ab:59:4e:2c:b7:66:7d:94:14:5c:
                    60:33:79:a6:7c:aa:d2:da:b7:bf:7a:5d:0c:38:ac:
                    e3:9d:e7:fd:5b:4a:6a:40:52:97:af:30:b9:11:b5:
                    a2:bc:15:fc:2f:88:14:14:6a:79:2b:e7:ee:d9:62:
                    16:a1:96:78:44:e5:ab:05:02:9f:03:1c:40:a0:66:
                    30:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:8D:91:9E:C0:BA:52:17:52:1E:30:7D:11:BC:CF:83:56:36:94:7F
            X509v3 Authority Key Identifier:
                keyid:56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:34:d5:d0:7e:1d:1c:bd:d7:c8:4e:ab:05:78:ca:3e:dc:52:
         6b:2c:c8:a3:6b:19:ca:59:3c:b0:8a:a0:00:78:6d:65:63:ab:
         7c:65:dc:14:b5:18:37:a6:70:92:87:4d:33:2b:40:ed:a9:3e:
         a6:ab:f7:ce:d9:40:54:7c:20:f7:47:fc:c4:bf:ac:e8:af:de:
         1b:c9:24:b0:b1:aa:04:21:df:a5:41:34:43:0a:6b:73:75:18:
         19:40:89:c1:99:9d:ba:18:98:01:cf:60:31:6b:cc:2d:1a:bd:
         e1:ab:00:16:4b:cd:a6:af:b1:a3:fc:c9:36:7b:4b:47:5b:2a:
         fe:bf:28:8f:64:c4:b1:52:ef:0b:c7:92:54:ec:58:e9:05:3c:
         df:86:b0:03:9f:7b:5e:c9:ba:7d:52:8b:22:bc:57:0f:f5:53:
         9b:36:8d:fd:05:73:34:36:14:fb:0c:31:03:d9:b1:52:65:cf:
         19:14:95:75:19:3d:3e:c2:4d:a2:5c:8c:c5:80:24:72:9b:3b:
         ca:52:85:54:99:fe:a2:4e:d2:3b:0c:fa:0c:7f:74:7c:6a:c6:
         aa:a0:2b:0b:c4:57:27:00:ee:24:f3:e2:59:b1:13:04:33:e6:
         3a:6a:5b:f2:24:12:3e:f0:f4:8b:3e:c7:db:0f:b5:40:e1:34:
         ad:e1:7b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:30:00 2026 by rpki-client