Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft
File:                     M-VCXQNo-C_4W5uEf0EjitWNTlA.mft (raw, json)
Hash identifier:          /0Pnm1zQRRAvhbHhokoDXgNTo68cCvWi0pPnx28BwZU=
Subject key identifier:   B2:63:14:3A:D5:27:B3:66:2E:33:CA:B1:B1:8E:DF:0D:8B:9F:68:07
Authority key identifier: 33:E5:42:5D:03:68:F8:2F:F8:5B:9B:84:7F:41:23:8A:D5:8D:4E:50
Certificate issuer:       /CN=A91CFD5A/serialNumber=33E5425D0368F82FF85B9B847F41238AD58D4E50
Certificate serial:       0192
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M-VCXQNo-C_4W5uEf0EjitWNTlA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft
Manifest number:          018E
Signing time:             Sun 01 Mar 2026 05:23:01 +0000
Manifest this update:     Sun 01 Mar 2026 05:23:00 +0000
Manifest next update:     Sun 08 Mar 2026 05:23:00 +0000
Files and hashes:         1: M-VCXQNo-C_4W5uEf0EjitWNTlA.crl (hash: tHorCAXOcz3Zh5HdyFSs8pfI8tDqIVWTqIURpnMWEYk=)
                          2: D677E18AB9AF11EE97EEDB49C4F9AE02.roa (hash: dbemmz7+vRJzVcvUqESCltZVHwIJJBG6Z1uPWbudaXk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.crl
                          rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M-VCXQNo-C_4W5uEf0EjitWNTlA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 05:22:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 402 (0x192)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFD5A, serialNumber=33E5425D0368F82FF85B9B847F41238AD58D4E50
        Validity
            Not Before: Mar  1 05:23:00 2026 GMT
            Not After : Mar  8 05:23:00 2026 GMT
        Subject: CN=69a3cd35-a55d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:59:94:d0:02:dd:5f:70:2a:61:4b:0d:65:f7:
                    b2:95:60:13:d8:83:0e:26:55:eb:2a:38:73:a6:75:
                    19:dc:6a:d4:88:86:e1:b0:f3:16:48:36:9c:42:ce:
                    36:fa:94:80:fb:f3:6d:26:ed:4b:32:4c:80:28:62:
                    e5:51:eb:b1:fa:16:af:64:bd:3a:2b:4e:e3:f9:a6:
                    4a:2b:b8:76:58:e8:b9:b4:89:ee:ab:29:6b:b2:d2:
                    1c:83:38:2c:4b:30:f1:74:31:61:58:a6:3d:28:e5:
                    cf:7e:d3:af:44:77:cb:05:71:c8:3f:b3:e6:6e:de:
                    d5:b3:8b:38:9f:ab:61:3a:d2:bd:bd:e2:57:37:32:
                    9e:cc:4e:1f:ad:d9:7d:fe:18:74:78:a0:0d:2e:d4:
                    d3:f2:88:01:d6:ac:20:1a:c6:81:db:6c:4e:d1:52:
                    e8:29:b0:7c:69:5c:1c:49:60:2c:92:ee:c9:af:77:
                    8e:7a:91:c1:b9:6b:35:6a:9e:2c:28:0b:a0:3b:a8:
                    71:a7:e6:ee:83:7c:b4:6a:37:6d:8a:de:ef:3b:6f:
                    35:59:b5:fa:93:81:48:ec:bb:89:c1:93:90:d6:9b:
                    64:9e:eb:0f:97:25:0d:e7:16:db:02:23:63:5b:67:
                    c3:8b:fe:1f:64:73:c7:30:62:66:0b:ee:96:5a:53:
                    3d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:63:14:3A:D5:27:B3:66:2E:33:CA:B1:B1:8E:DF:0D:8B:9F:68:07
            X509v3 Authority Key Identifier:
                keyid:33:E5:42:5D:03:68:F8:2F:F8:5B:9B:84:7F:41:23:8A:D5:8D:4E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M-VCXQNo-C_4W5uEf0EjitWNTlA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:36:d1:8c:79:71:24:52:82:91:17:84:a1:1f:b1:6a:20:df:
         1a:d8:5d:91:6f:ed:91:a6:d4:5f:77:74:92:90:28:e6:ec:0f:
         56:1b:2d:e6:8a:4e:9b:d9:0f:03:1a:fc:a7:43:6f:cf:e2:b8:
         b3:93:8e:eb:6f:3b:5a:6c:b1:d0:5a:a6:d5:19:aa:4b:34:96:
         2e:c5:2a:40:1c:2a:20:9e:48:e8:a3:3b:38:a0:48:fb:18:aa:
         01:53:41:88:b5:83:6c:c1:e2:8a:40:88:97:5b:c6:aa:32:25:
         5e:9b:d6:6b:a2:b7:ec:fd:21:60:1c:e1:47:18:d8:f0:ae:15:
         04:6e:42:fa:42:36:cf:fe:b5:9b:7e:f4:74:13:d5:5e:b5:0a:
         4b:47:a9:bf:80:cf:f6:d0:15:65:2c:1e:4f:1d:cc:f9:03:6a:
         dc:65:0d:9e:21:a3:b0:16:03:c6:a1:c3:eb:fe:60:d9:eb:87:
         22:83:b5:78:0f:81:ed:a3:3b:10:04:09:22:9a:70:5b:9f:a6:
         3e:33:be:23:09:95:45:40:6b:c4:68:1d:d0:06:b9:d6:fa:71:
         2d:dd:a6:51:ad:dc:e0:a4:e9:22:60:e7:b2:6e:ef:32:2a:8a:
         8e:52:d2:68:9a:33:85:40:51:08:5d:90:54:70:1d:6e:53:76:
         40:04:f3:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:06:41 2026 by rpki-client