Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.mft
File:                     VXcPY6DmX0wvyWrxmLxXhNznikY.mft (raw, json)
Hash identifier:          mh6miuDuZvxxkQ8b7LnRtV7T2Bz9V0IRUPsGbbWQhuk=
Subject key identifier:   32:AA:E0:FB:27:9D:6E:AA:53:D9:A7:2C:41:18:9B:74:E1:C7:A0:31
Authority key identifier: 55:77:0F:63:A0:E6:5F:4C:2F:C9:6A:F1:98:BC:57:84:DC:E7:8A:46
Certificate issuer:       /CN=A912B75A/serialNumber=55770F63A0E65F4C2FC96AF198BC5784DCE78A46
Certificate serial:       014E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXcPY6DmX0wvyWrxmLxXhNznikY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.mft
Manifest number:          0134
Signing time:             Wed 25 Mar 2026 04:44:20 +0000
Manifest this update:     Wed 25 Mar 2026 04:44:20 +0000
Manifest next update:     Wed 01 Apr 2026 04:44:20 +0000
Files and hashes:         1: VXcPY6DmX0wvyWrxmLxXhNznikY.crl (hash: GxHmgZ3m8nwybg9H96be9UwHtLPwzEAvkx3cgd8d2oA=)
                          2: 3590B0F65B9B11EFB90EBF42C4F9AE02.roa (hash: hSeIp929vHi0Xgq96P+KYhFORbkTXCu0ObyLBiOE7yE=)
                          3: 8A54B9326F0C11EF866A7A83C4F9AE02.roa (hash: Al8YtI295Qv3VLO+dWvpu3tZeFYQjhzt57J20RQFzEM=)
                          4: 887E73265B9A11EF80F47C41C4F9AE02.roa (hash: y6lsTAzxceftnb0UckbxcnuqjkGYgeTxQZKU2zv7Tfc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.crl
                          rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXcPY6DmX0wvyWrxmLxXhNznikY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:44:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 334 (0x14e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B75A, serialNumber=55770F63A0E65F4C2FC96AF198BC5784DCE78A46
        Validity
            Not Before: Mar 25 04:44:20 2026 GMT
            Not After : Apr  1 04:44:20 2026 GMT
        Subject: CN=69c36824-6e71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:93:ad:b4:b3:5c:d5:af:c1:13:f2:fc:9d:5a:
                    84:00:f1:8d:1d:e5:a6:05:10:7c:9b:85:06:6b:9d:
                    35:61:45:2f:4b:7f:04:87:72:4c:79:40:bb:b4:76:
                    a8:0e:5b:c0:4f:29:06:0f:01:48:c8:e0:fd:08:93:
                    16:50:70:18:93:8c:e9:42:fa:b7:bb:e4:b2:b1:02:
                    88:df:ef:e6:13:51:1a:0a:68:79:cb:9b:7f:13:ac:
                    e6:9e:9f:d6:5d:af:d7:d0:4c:c6:4e:22:0f:d1:3b:
                    7c:6b:99:d1:78:22:f1:05:bd:32:a0:2a:a7:3d:9d:
                    15:ed:47:0b:35:b4:b2:8c:b0:13:86:5d:ff:6e:a5:
                    33:85:6d:04:f3:19:5c:37:b6:ca:a2:7c:0e:e4:ac:
                    8c:64:bb:71:ff:03:ae:f0:bf:d4:64:41:65:4f:b6:
                    be:04:7c:19:73:e3:36:99:a8:14:3d:0e:15:4b:58:
                    22:9e:11:66:ff:53:ba:47:21:4d:8a:2f:25:b3:57:
                    7c:4c:b1:ec:0c:fe:3e:a4:67:77:f1:c9:11:f7:a2:
                    8e:b0:6a:e0:5b:9d:d4:22:f0:d1:0b:23:39:72:09:
                    2b:f8:16:8d:5a:57:26:dc:dc:fb:04:e2:26:66:85:
                    54:0c:29:f9:07:ef:08:db:19:55:bb:77:04:92:2b:
                    58:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:AA:E0:FB:27:9D:6E:AA:53:D9:A7:2C:41:18:9B:74:E1:C7:A0:31
            X509v3 Authority Key Identifier:
                keyid:55:77:0F:63:A0:E6:5F:4C:2F:C9:6A:F1:98:BC:57:84:DC:E7:8A:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXcPY6DmX0wvyWrxmLxXhNznikY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:11:89:82:bf:0e:ad:83:5d:59:02:10:f5:9d:93:ea:88:be:
         c3:8a:ec:43:14:95:5a:b0:79:20:9a:74:3f:b3:58:2a:ae:ec:
         e7:00:f1:bb:5d:a6:78:bc:56:46:22:6c:5f:10:22:63:64:17:
         65:1f:c6:7a:e6:86:d2:b2:56:ff:18:0d:28:f4:9e:df:30:f6:
         d1:1e:ba:02:a4:42:3d:58:a7:2d:6a:63:0e:cc:e2:e4:4c:ff:
         75:49:18:9c:cf:2b:41:3a:d7:20:b4:12:c4:1c:7c:69:5e:46:
         41:86:63:5b:4d:68:cf:46:05:3f:c2:28:1a:8b:85:b0:0d:a1:
         68:d0:19:ec:d7:7c:08:54:48:4d:07:c7:62:1a:9b:63:22:f5:
         38:1a:9f:16:da:7e:32:07:fc:bc:ed:42:46:95:33:df:38:6f:
         94:1c:6d:d4:71:42:ce:90:c2:ef:bc:90:e1:80:16:c5:58:4a:
         16:85:30:9e:d4:67:35:f6:04:8e:dd:16:f7:ab:85:cd:67:4f:
         7a:d4:f1:87:90:3b:a3:a6:b1:ed:83:81:24:5b:9c:27:da:08:
         f2:eb:cc:bd:e6:60:59:ac:2e:cb:4c:2e:72:37:5c:6e:f6:4b:
         2e:99:2e:5e:f8:97:cc:f7:f5:01:53:a0:34:f7:a0:ce:6a:01:
         f1:38:8d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:07:06 2026 by rpki-client