Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.mft
File:                     VFiH13GXSLRp0FP_MWpqV6uZYjM.mft (raw, json)
Hash identifier:          7urNtk7wiSVvy0b9ybCle5JpDj+546hWvxFxUodU2wY=
Subject key identifier:   D9:7E:90:1B:1B:86:8E:E9:08:A7:A8:E1:CD:12:F5:05:5D:82:62:80
Authority key identifier: 54:58:87:D7:71:97:48:B4:69:D0:53:FF:31:6A:6A:57:AB:99:62:33
Certificate issuer:       /CN=A91173B6/serialNumber=545887D7719748B469D053FF316A6A57AB996233
Certificate serial:       08B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFiH13GXSLRp0FP_MWpqV6uZYjM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.mft
Manifest number:          08A3
Signing time:             Tue 24 Mar 2026 20:17:40 +0000
Manifest this update:     Tue 24 Mar 2026 20:17:39 +0000
Manifest next update:     Tue 31 Mar 2026 20:17:39 +0000
Files and hashes:         1: VFiH13GXSLRp0FP_MWpqV6uZYjM.crl (hash: 3Hdl5ihNIlorBfKkeavOm1n1SINA1mNBVwEQenQ9jV8=)
                          2: CA290E34341311EFA3C99F09C4F9AE02.roa (hash: Lmyvk0vcgWzcP6eOSv9PteBlRHnjEaQSAccxNld/NQk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.crl
                          rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFiH13GXSLRp0FP_MWpqV6uZYjM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 20:17:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2225 (0x8b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91173B6, serialNumber=545887D7719748B469D053FF316A6A57AB996233
        Validity
            Not Before: Mar 24 20:17:39 2026 GMT
            Not After : Mar 31 20:17:39 2026 GMT
        Subject: CN=69c2f164-c22c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d1:30:ed:5c:6b:ec:2f:05:6b:60:fa:4c:58:
                    6d:e0:31:69:fb:07:3c:1c:e1:b6:7e:45:7d:05:d0:
                    d6:6e:c0:bb:89:d1:bc:96:cb:cf:2f:b2:34:39:a1:
                    d9:71:46:04:e0:c9:b1:28:65:59:74:ea:8b:db:b4:
                    5d:0a:b3:41:a6:f3:4b:4d:db:eb:ca:ae:14:32:cd:
                    7c:4f:5e:73:21:63:2d:32:5d:58:a3:31:48:e0:38:
                    6c:a4:12:44:4b:fa:d0:2f:52:8e:cd:ee:5f:24:94:
                    29:4a:3d:20:30:fe:e3:c0:fb:8c:77:e0:cc:b3:5c:
                    57:5b:6a:4c:3c:58:10:58:41:9d:05:70:2f:8c:af:
                    fc:e1:e5:41:e7:31:0b:3d:6c:79:9a:2d:4a:f4:a5:
                    78:5a:2a:a9:25:4b:27:f7:31:41:d8:42:73:42:5f:
                    f5:3f:c4:b5:6d:51:ef:0a:3e:25:e9:6a:c0:4f:3a:
                    94:2d:c1:9d:d6:b8:14:95:11:51:f2:11:49:ba:0f:
                    81:df:f8:40:33:43:3d:1a:5f:3a:4c:01:f3:ec:3e:
                    fb:a9:05:16:a3:95:29:9c:ad:25:77:0e:9c:88:eb:
                    87:32:01:8b:ad:ee:67:a4:e0:5a:46:74:36:28:48:
                    65:64:c6:be:1a:da:57:d4:b7:32:83:53:65:c4:2d:
                    80:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:7E:90:1B:1B:86:8E:E9:08:A7:A8:E1:CD:12:F5:05:5D:82:62:80
            X509v3 Authority Key Identifier:
                keyid:54:58:87:D7:71:97:48:B4:69:D0:53:FF:31:6A:6A:57:AB:99:62:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFiH13GXSLRp0FP_MWpqV6uZYjM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:ad:3a:8d:ee:9e:88:84:7e:56:9d:5e:85:5c:d0:5a:03:49:
         32:a9:84:07:76:3f:32:29:89:32:8e:5c:2c:c5:9d:16:05:22:
         9b:c8:42:fd:3c:b0:55:40:d5:c2:f7:45:da:30:70:fb:f7:2a:
         e2:6f:2e:c8:08:00:9a:62:2f:da:31:ba:a1:14:c0:cb:28:5f:
         db:5a:09:c5:c2:7e:f4:9a:f4:06:54:f4:a6:ae:d9:e8:33:6a:
         8f:1c:31:67:15:e2:fb:86:2c:15:6d:3b:9f:04:43:25:bf:c9:
         85:78:1c:4f:90:f2:bf:c2:59:50:30:01:7a:f1:69:91:84:85:
         99:b9:c0:8b:b8:23:97:5a:71:3b:2d:b2:62:7e:ab:82:0f:04:
         ce:a9:f5:d3:0a:9e:5b:ef:69:97:6a:6e:2c:38:88:db:fb:58:
         0b:65:7e:e3:27:27:74:21:4c:cf:06:46:ff:6c:ea:66:fa:7e:
         b3:25:63:d2:3a:4a:f5:02:24:5c:8f:a8:35:1b:f3:b5:3f:ee:
         4e:09:16:93:a0:c0:6a:ba:e9:41:a5:57:35:4a:45:0d:96:06:
         5e:7d:9c:e8:7c:d0:c1:8e:40:f0:40:ba:1b:20:94:82:5a:88:
         a7:20:24:2f:61:f6:74:67:4b:9e:15:e0:a9:e6:75:cd:8f:1c:
         a5:07:3e:0e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTczQjYxMTAvBgNVBAUTKDU0NTg4N0Q3NzE5NzQ4QjQ2OUQwNTNGRjMxNkE2QTU3
QUI5OTYyMzMwHhcNMjYwMzI0MjAxNzM5WhcNMjYwMzMxMjAxNzM5WjAYMRYwFAYD
VQQDEw02OWMyZjE2NC1jMjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlNEw7Vxr7C8Fa2D6TFht4DFp+wc8HOG2fkV9BdDWbsC7idG8lsvPL7I0OaHZ
cUYE4MmxKGVZdOqL27RdCrNBpvNLTdvryq4UMs18T15zIWMtMl1YozFI4DhspBJE
S/rQL1KOze5fJJQpSj0gMP7jwPuMd+DMs1xXW2pMPFgQWEGdBXAvjK/84eVB5zEL
PWx5mi1K9KV4WiqpJUsn9zFB2EJzQl/1P8S1bVHvCj4l6WrATzqULcGd1rgUlRFR
8hFJug+B3/hAM0M9Gl86TAHz7D77qQUWo5UpnK0ldw6ciOuHMgGLre5npOBaRnQ2
KEhlZMa+GtpX1Lcyg1NlxC2AWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNl+kBsb
ho7pCKeo4c0S9QVdgmKAMB8GA1UdIwQYMBaAFFRYh9dxl0i0adBT/zFqalermWIz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzNCNi8xMEY0ODQ4NkUx
OUYxMUVBQkQ0QTIzMTNDNEY5QUUwMi9WRmlIMTNHWFNMUnAwRlBfTVdwcVY2dVpZ
ak0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZGaUgxM0dYU0xScDBGUF9NV3BxVjZ1WllqTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NzNCNi8xMEY0ODQ4NkUxOUYxMUVBQkQ0QTIzMTNDNEY5QUUwMi9WRmlIMTNHWFNM
UnAwRlBfTVdwcVY2dVpZak0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAW606je6eiIR+Vp1ehVzQWgNJMqmEB3Y/MimJMo5cLMWdFgUim8hC/TywVUDV
wvdF2jBw+/cq4m8uyAgAmmIv2jG6oRTAyyhf21oJxcJ+9Jr0BlT0pq7Z6DNqjxwx
ZxXi+4YsFW07nwRDJb/JhXgcT5Dyv8JZUDABevFpkYSFmbnAi7gjl1pxOy2yYn6r
gg8Ezqn10wqeW+9pl2puLDiI2/tYC2V+4ycndCFMzwZG/2zqZvp+syVj0jpK9QIk
XI+oNRvztT/uTgkWk6DAarrpQaVXNUpFDZYGXn2c6HzQwY5A8EC6GyCUglqIpyAk
L2H2dGdLnhXgqeZ1zY8cpQc+Dg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:52:35 2026 by rpki-client