Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.mft
File:                     VXiaNBbn71Fc4I8Fo28d7YNETAk.mft (raw, json)
Hash identifier:          vfcDnJFLROZgRb4GzlFn3sLxtqh0oNMyRc6DlcxAqBw=
Subject key identifier:   96:55:97:A2:C1:3B:89:10:74:68:18:12:43:2F:A7:5D:10:03:D5:19
Authority key identifier: 55:78:9A:34:16:E7:EF:51:5C:E0:8F:05:A3:6F:1D:ED:83:44:4C:09
Certificate issuer:       /CN=A91F43F2/serialNumber=55789A3416E7EF515CE08F05A36F1DED83444C09
Certificate serial:       B1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXiaNBbn71Fc4I8Fo28d7YNETAk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.mft
Manifest number:          AE
Signing time:             Sat 13 Jun 2026 07:15:28 +0000
Manifest this update:     Sat 13 Jun 2026 07:15:28 +0000
Manifest next update:     Sat 20 Jun 2026 07:15:28 +0000
Files and hashes:         1: VXiaNBbn71Fc4I8Fo28d7YNETAk.crl (hash: Gu9kLfW8xQYKV+RiCLSYgUxCyKWCSOI3NQK5zC2KDx8=)
                          2: A19F973C60C011F0A28C7F2CC4F9AE02.roa (hash: 1+gWdAZ37YIBU2iFVY3fHe/eCmXpEhHdoc6OKpG9wTE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.crl
                          rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXiaNBbn71Fc4I8Fo28d7YNETAk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 07:15:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177 (0xb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F43F2, serialNumber=55789A3416E7EF515CE08F05A36F1DED83444C09
        Validity
            Not Before: Jun 13 07:15:28 2026 GMT
            Not After : Jun 20 07:15:28 2026 GMT
        Subject: CN=6a2d0390-ac1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:64:a9:d7:f5:89:b4:b5:63:86:2d:7f:56:e3:
                    0e:18:43:03:0a:de:7a:39:cc:39:fc:ce:0d:da:dc:
                    15:76:c1:01:a2:03:9a:56:1b:18:f2:28:21:de:e7:
                    3d:4d:2d:9f:be:af:6d:ef:fd:5a:d0:d9:53:85:87:
                    b9:3e:5a:bc:33:c2:30:53:5a:4f:cf:a0:53:f3:84:
                    b6:ce:a6:c4:2c:67:4d:84:91:b7:e3:94:e9:82:a0:
                    af:2c:cb:31:d8:4f:f3:53:26:2f:c3:a9:86:d6:f5:
                    20:b8:0f:a4:f3:89:8b:7b:6d:0a:9b:13:92:f4:9d:
                    f4:aa:a2:38:e4:db:b0:b7:1b:5a:8e:56:9a:5e:7a:
                    0b:23:37:2f:95:18:85:23:eb:d1:e4:8a:06:dd:15:
                    9b:35:86:cd:e5:4a:f4:63:4e:e1:18:e0:bd:b0:a2:
                    3a:6b:b0:44:51:53:1f:b6:5e:1c:e2:1e:ae:30:9d:
                    0d:09:8c:3b:a5:85:b0:12:16:d2:e4:41:29:2f:8a:
                    7a:22:69:86:08:1b:50:c7:7a:e0:59:0e:ee:a2:34:
                    06:22:a3:ac:a9:23:10:07:0b:a2:87:3b:3b:69:95:
                    b1:b5:32:52:37:5b:de:c0:c2:f3:f9:b9:0d:90:a3:
                    a2:dc:b5:54:35:f8:c6:39:ae:9d:db:76:86:01:6b:
                    b6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:55:97:A2:C1:3B:89:10:74:68:18:12:43:2F:A7:5D:10:03:D5:19
            X509v3 Authority Key Identifier:
                keyid:55:78:9A:34:16:E7:EF:51:5C:E0:8F:05:A3:6F:1D:ED:83:44:4C:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXiaNBbn71Fc4I8Fo28d7YNETAk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:a2:81:ca:4d:64:ea:bd:18:a1:49:5d:67:d1:a9:bb:dc:ef:
         c7:74:e3:86:38:fb:d1:e9:d0:5d:db:6f:a1:b6:92:38:77:3f:
         47:48:53:0d:76:49:8d:ed:4c:e1:30:d8:03:70:76:16:68:8a:
         c0:7a:c6:f1:60:9b:a6:d9:6e:e4:aa:41:e9:50:72:23:70:c4:
         cd:b2:af:51:2f:8f:68:76:f1:a6:d0:94:6b:5e:66:ca:6a:dc:
         7d:09:6e:0b:35:65:68:60:ea:4a:56:6f:7a:fb:36:68:4e:37:
         d8:60:26:ef:e0:04:36:0b:7c:93:a9:e6:29:67:cb:4e:5a:c4:
         6f:ed:8e:d3:63:22:a5:21:33:bc:a3:7d:0f:1c:0c:45:73:1d:
         06:c6:49:17:e6:d2:0c:9b:a9:9d:af:b5:8b:9a:29:bf:ec:f3:
         47:03:fa:09:9e:e3:b9:ba:90:96:40:9f:f5:a9:8e:5e:88:9a:
         24:0a:77:ec:7d:3f:56:fe:45:4c:92:4d:9c:a2:5b:a5:29:98:
         dd:22:b7:13:b3:2b:d9:08:8c:d3:64:e3:67:b2:87:a3:25:f1:
         5e:f8:df:90:73:33:7e:8c:18:3e:88:98:78:d4:39:4e:ea:4b:
         25:59:fc:74:f5:f8:e5:fe:8d:fb:b3:f2:6d:1c:5f:8d:9b:77:
         61:18:76:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:41:05 2026 by rpki-client