Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft
File:                     vNWr2ckcoefyxFVXBbKUBPUFvcU.mft (raw, json)
Hash identifier:          VHkFe5YwBxLl/h0YEGYkC4kvZ4Wf/Dn9u9sk9N4hE/Q=
Subject key identifier:   02:63:DD:79:64:A4:BA:97:EE:8B:55:ED:70:D9:8B:9C:32:B7:99:81
Authority key identifier: BC:D5:AB:D9:C9:1C:A1:E7:F2:C4:55:57:05:B2:94:04:F5:05:BD:C5
Certificate issuer:       /CN=A912F281/serialNumber=BCD5ABD9C91CA1E7F2C4555705B29404F505BDC5
Certificate serial:       014C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vNWr2ckcoefyxFVXBbKUBPUFvcU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft
Manifest number:          0148
Signing time:             Fri 25 Sep 2026 05:23:31 +0000
Manifest this update:     Fri 25 Sep 2026 05:23:31 +0000
Manifest next update:     Fri 02 Oct 2026 05:23:31 +0000
Files and hashes:         1: vNWr2ckcoefyxFVXBbKUBPUFvcU.crl (hash: ramAe0evRvFhpaMGqilP2/HQ3ng/bI4r77o2bv5vtG4=)
                          2: 89EA22F0C67011EFAE929D0DC4F9AE02.roa (hash: QoSObG+7a268+sX8T2Z5nD2wpsEf/h3WqHnAbvclosE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.crl
                          rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vNWr2ckcoefyxFVXBbKUBPUFvcU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 05:23:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 332 (0x14c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F281, serialNumber=BCD5ABD9C91CA1E7F2C4555705B29404F505BDC5
        Validity
            Not Before: Sep 25 05:23:31 2026 GMT
            Not After : Oct  2 05:23:31 2026 GMT
        Subject: CN=6ab60553-530d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7d:c4:f7:d6:6e:7a:e7:cb:ea:76:e7:10:b3:
                    89:8c:c3:89:20:0c:d6:a8:c8:f1:1a:ea:60:10:0d:
                    b5:bb:72:ba:60:aa:3b:e9:8c:dd:fe:6c:40:da:4a:
                    23:d9:05:86:4d:b9:22:8f:d4:1f:8a:82:7e:51:34:
                    0c:82:f4:88:cc:a3:52:c1:f9:82:11:17:fe:82:aa:
                    c8:15:91:a5:ce:89:b3:e5:2e:00:a7:0b:2b:7b:6f:
                    cc:9f:d9:57:1e:d2:d8:8a:99:f6:d7:19:c2:e9:a8:
                    9c:f0:05:db:cc:91:f6:e2:3b:74:6c:0f:f7:c0:f9:
                    87:a5:69:0e:b0:ea:5b:39:bb:a7:9e:06:14:05:2c:
                    b8:72:93:79:db:f4:e8:bb:07:52:cd:e3:93:9e:ae:
                    79:b6:fe:1d:f6:ae:fa:54:6e:79:d1:07:62:51:27:
                    ff:33:42:d9:4a:bf:73:2f:0e:f9:ee:18:b4:8b:13:
                    ca:72:d2:49:58:f9:44:ed:d1:17:4e:88:55:4b:33:
                    36:f8:ea:80:4e:f4:6e:38:7a:99:b5:8c:97:a8:1b:
                    a8:a4:71:cd:ed:a2:a9:14:a4:e3:ab:61:4f:58:ef:
                    75:d1:d1:e3:13:31:b3:52:49:39:b6:08:f5:c8:9b:
                    1a:14:90:7b:6c:d9:6f:16:24:c2:f5:1a:33:f8:23:
                    71:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:63:DD:79:64:A4:BA:97:EE:8B:55:ED:70:D9:8B:9C:32:B7:99:81
            X509v3 Authority Key Identifier:
                keyid:BC:D5:AB:D9:C9:1C:A1:E7:F2:C4:55:57:05:B2:94:04:F5:05:BD:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vNWr2ckcoefyxFVXBbKUBPUFvcU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:6f:3d:53:39:29:8a:8f:ab:78:16:8f:73:57:da:e4:03:fe:
         e5:fb:07:37:cd:b5:2a:77:4d:34:75:b5:3d:12:c1:d5:41:f0:
         9d:4b:cc:fe:39:e4:89:10:0d:a6:71:b1:4b:9e:1c:2d:15:8e:
         23:d0:38:85:0d:78:69:64:e3:8f:f0:30:a4:8f:c5:aa:20:38:
         ff:cc:ca:62:61:8a:1c:7c:a9:c8:da:2d:aa:09:e5:63:f4:3f:
         81:a5:06:62:4c:27:6d:a1:e6:32:bc:79:cf:cf:52:15:83:94:
         94:50:54:32:2b:fd:be:2f:e8:a1:92:8a:ac:90:4e:74:d9:ae:
         a9:4e:74:7a:1f:09:43:66:ca:94:79:1a:bf:2c:64:44:3b:88:
         20:09:9b:15:e0:a8:94:03:58:25:5a:b8:3b:df:89:48:2d:71:
         bf:57:c4:3e:2f:e5:ce:40:40:d0:fc:59:bb:c1:08:e5:8b:fa:
         b6:16:de:4d:34:82:2c:4e:ca:54:02:c8:e9:a4:9c:eb:5e:72:
         25:d0:59:f0:b4:ad:80:81:b6:ce:46:9e:f9:66:dd:3e:81:b2:
         fb:f9:e8:55:d9:89:01:b6:d8:92:15:1f:71:ee:6a:06:c4:f8:
         2a:22:68:ae:ee:24:09:b3:a6:47:02:76:99:3c:ce:cd:83:ef:
         e9:25:f5:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:50:53 2026 by rpki-client