Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft
File:                     vvMhsD2CRd537IDdAzG_uo0IWdg.mft (raw, json)
Hash identifier:          6ykZmaFPo+RkQgyfKgooej+Nimx9RHePWYCIespXybA=
Subject key identifier:   95:D9:E5:30:8B:8A:26:E5:3A:29:6D:9C:61:70:47:06:44:69:70:61
Authority key identifier: BE:F3:21:B0:3D:82:45:DE:77:EC:80:DD:03:31:BF:BA:8D:08:59:D8
Certificate issuer:       /CN=A91EE8AC/serialNumber=BEF321B03D8245DE77EC80DD0331BFBA8D0859D8
Certificate serial:       0178
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft
Manifest number:          03CC
Signing time:             Mon 02 Mar 2026 00:21:24 +0000
Manifest this update:     Mon 02 Mar 2026 00:21:23 +0000
Manifest next update:     Mon 09 Mar 2026 00:21:23 +0000
Files and hashes:         1: vvMhsD2CRd537IDdAzG_uo0IWdg.crl (hash: SllFSytYzejRV+2UOavw6mfVxJPGs9JQaLrJIXMG2HI=)
                          2: 5F3C0F26EAEF11EE8CCDB375C4F9AE02.roa (hash: iqq89iXsMkjAcx6f+H8qgQsfKuzOgvixAUFvX+cUdpk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.crl
                          rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:21:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 376 (0x178)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE8AC, serialNumber=BEF321B03D8245DE77EC80DD0331BFBA8D0859D8
        Validity
            Not Before: Mar  2 00:21:23 2026 GMT
            Not After : Mar  9 00:21:23 2026 GMT
        Subject: CN=69a4d804-fe04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:be:8b:33:a8:9e:8b:e1:1b:59:76:44:a3:fc:
                    4e:02:ed:36:15:53:42:41:f0:85:22:98:eb:a6:63:
                    b6:f8:1f:57:10:80:80:0f:89:42:6d:6a:b7:4c:6c:
                    f7:af:2d:ba:63:d9:1e:ea:fc:ae:d9:b5:b2:3a:ab:
                    29:38:b2:a8:cb:bc:aa:d6:82:a5:aa:26:7b:41:5c:
                    38:99:c2:ad:51:98:12:13:a8:ef:bd:08:6d:2e:6e:
                    4f:13:7e:87:e2:91:3c:c1:08:7d:d8:96:60:b7:7e:
                    64:8d:19:21:d1:a8:8a:99:f2:55:c6:39:61:90:c3:
                    67:01:b4:20:a7:0c:00:b6:91:29:49:d8:a2:be:63:
                    c1:f7:87:b1:18:0d:91:55:73:1d:a7:a9:39:3c:73:
                    5b:31:35:5b:fc:82:4f:ab:40:81:2c:33:99:65:0c:
                    fb:89:83:c1:ac:5e:ca:14:e9:7a:f1:c8:fb:74:b6:
                    0d:77:ee:f3:91:cf:dd:2b:86:c6:61:5b:12:0e:e0:
                    54:b7:95:7b:61:f9:5d:19:42:b9:ac:2a:4e:88:f7:
                    ab:1e:38:82:8d:8d:c7:36:9d:88:9a:3c:b2:93:24:
                    b1:9b:73:24:b3:e1:83:c7:a5:49:b4:06:2f:31:6b:
                    c7:9b:3a:b1:7f:78:e8:a8:15:e7:9b:fd:cf:13:d1:
                    90:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:D9:E5:30:8B:8A:26:E5:3A:29:6D:9C:61:70:47:06:44:69:70:61
            X509v3 Authority Key Identifier:
                keyid:BE:F3:21:B0:3D:82:45:DE:77:EC:80:DD:03:31:BF:BA:8D:08:59:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:54:8c:a9:7a:30:4f:6f:6d:f3:dd:8f:1b:e5:22:84:9c:5d:
         32:64:49:f9:61:c4:2c:1c:e8:26:26:a2:a0:b5:c8:da:38:48:
         bd:ea:a6:c0:86:82:99:56:47:2a:96:e5:15:ae:a5:5f:b5:8b:
         65:68:db:9f:9c:34:5a:be:0c:23:f8:c7:e4:2e:a3:66:45:27:
         fb:f1:09:cf:cf:dc:cb:63:08:2b:2a:20:55:54:4d:a8:db:4f:
         11:e6:ad:b6:e4:12:01:bb:10:76:d2:68:8e:86:ff:ca:7e:62:
         78:62:ad:e5:93:bf:70:7f:ea:ca:31:3a:48:7e:87:63:9a:a5:
         13:ae:66:51:fc:4a:3c:58:e4:91:3f:ae:92:75:74:ea:d2:03:
         f9:86:c4:4c:03:d3:40:e6:7c:49:dc:5e:19:3b:cd:e8:37:de:
         53:0f:86:0f:e9:ba:f4:44:2c:55:9e:a3:de:82:25:a1:ca:35:
         5e:f9:ed:ac:3a:53:71:f1:ca:04:bc:ec:08:e1:30:94:30:44:
         81:9e:ce:26:02:7a:65:ae:62:56:49:a6:95:50:af:35:30:fe:
         9e:bf:f0:73:20:ce:b2:2c:72:3d:a3:88:31:b7:b8:82:a5:92:
         c6:f0:1c:fc:e7:c8:02:bb:a1:eb:20:c9:d3:4e:34:cd:a6:b8:
         1e:29:5f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:06:22 2026 by rpki-client