Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.mft
File:                     vpHAXiGMfmbqb5T50kV3cEGRveI.mft (raw, json)
Hash identifier:          Tjg+fbedc3JV7XkZ9iCSKD/AlHElSHN9jtd9dpAYh9M=
Subject key identifier:   96:1A:D2:9B:95:6F:A2:28:8A:2B:77:1B:AA:1A:4E:89:F5:9E:91:8A
Authority key identifier: BE:91:C0:5E:21:8C:7E:66:EA:6F:94:F9:D2:45:77:70:41:91:BD:E2
Certificate issuer:       /CN=A912FCBB/serialNumber=BE91C05E218C7E66EA6F94F9D24577704191BDE2
Certificate serial:       013F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vpHAXiGMfmbqb5T50kV3cEGRveI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.mft
Manifest number:          0136
Signing time:             Wed 25 Mar 2026 04:39:38 +0000
Manifest this update:     Wed 25 Mar 2026 04:39:37 +0000
Manifest next update:     Wed 01 Apr 2026 04:39:37 +0000
Files and hashes:         1: vpHAXiGMfmbqb5T50kV3cEGRveI.crl (hash: MPdjw9ok3x5nEZHbV646afr4P0vPSaZmlGz3LEsK35A=)
                          2: 8F80C48E531211EFAB0B8726C4F9AE02.roa (hash: Y0yGffv3HexM685zLf2PONDZDzu0jITDWUgqDOHLKVM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.crl
                          rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vpHAXiGMfmbqb5T50kV3cEGRveI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:39:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 319 (0x13f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912FCBB, serialNumber=BE91C05E218C7E66EA6F94F9D24577704191BDE2
        Validity
            Not Before: Mar 25 04:39:37 2026 GMT
            Not After : Apr  1 04:39:37 2026 GMT
        Subject: CN=69c3670a-83af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3e:5e:7c:9e:25:8e:d0:29:f2:8c:7f:7c:2b:
                    78:fc:c5:64:a4:a7:49:26:11:62:87:46:87:20:49:
                    91:71:db:c3:e2:81:0c:b8:16:0c:af:7b:68:e9:e4:
                    b8:7e:7b:14:fc:da:0c:42:16:d3:fb:07:94:fc:cc:
                    0c:ee:29:9f:8b:47:97:46:e5:de:87:75:d1:01:c3:
                    62:1e:de:2e:04:d9:4f:8f:38:e4:31:61:8e:fa:96:
                    a5:7b:a3:14:8f:50:cc:fa:e1:a0:a0:71:46:9d:aa:
                    35:e9:f1:52:7f:fe:b7:87:69:c9:ee:20:82:d6:f4:
                    49:64:ec:f1:20:7b:e2:04:56:21:5e:7d:94:de:1a:
                    60:2b:27:a2:a5:d9:fc:21:66:f6:eb:79:2f:dc:d8:
                    17:33:da:ea:6f:18:71:a2:ae:5a:7a:ed:68:2f:5e:
                    6a:b3:f6:e2:32:78:1d:bb:3f:f5:d3:c6:5c:96:41:
                    7d:ed:29:c0:ae:11:37:4f:90:ca:77:94:c1:3b:64:
                    32:77:f5:d3:1e:5b:78:34:41:a1:dc:41:31:6d:00:
                    22:1d:c6:8c:cf:f6:67:28:d2:f5:0d:b6:b7:af:e6:
                    54:3d:c3:a3:50:e0:44:70:08:55:87:b4:6e:21:38:
                    d0:66:af:61:42:22:3b:1e:72:9f:82:1c:63:dd:d6:
                    6b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:1A:D2:9B:95:6F:A2:28:8A:2B:77:1B:AA:1A:4E:89:F5:9E:91:8A
            X509v3 Authority Key Identifier:
                keyid:BE:91:C0:5E:21:8C:7E:66:EA:6F:94:F9:D2:45:77:70:41:91:BD:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vpHAXiGMfmbqb5T50kV3cEGRveI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:f2:ed:71:72:65:7f:9a:51:b6:5b:22:80:de:56:bc:e7:15:
         2f:0c:0f:aa:e8:04:5f:05:c9:87:3a:b3:30:83:6e:8c:84:49:
         e2:ff:6f:3d:3a:6e:ea:8d:85:79:f8:bc:54:6e:33:5c:de:81:
         6b:58:c3:3b:87:aa:6d:99:21:82:2c:be:75:b0:36:83:54:4a:
         f9:11:9e:f3:40:f7:74:17:6b:0c:04:1d:84:b1:4a:d6:53:f3:
         53:cd:a6:90:6a:29:87:3c:61:5d:1c:91:2f:a9:c7:df:2a:40:
         6b:33:ab:54:91:cd:60:d6:41:4f:11:f0:40:6d:c8:22:48:2f:
         cc:72:e0:15:71:d5:37:95:fd:84:28:c3:27:4b:61:83:d6:4b:
         ae:80:1f:da:ca:6c:9d:b6:89:5a:59:12:ba:75:3f:22:e2:91:
         96:d0:9b:8f:a7:1d:25:c4:54:a3:90:40:74:0e:47:37:f8:08:
         bb:c1:4f:61:1d:0d:45:da:d4:d5:67:77:d8:1e:f8:c9:04:ba:
         62:14:a6:f0:ca:57:2e:be:1c:17:d9:e9:41:73:b7:d2:47:0d:
         15:d2:6d:28:9e:bf:ba:94:5a:b3:99:06:00:48:37:76:90:4f:
         0f:dd:33:b6:62:7e:8b:a0:95:cd:f4:96:71:bf:f4:8f:f2:91:
         b7:9d:23:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:34:19 2026 by rpki-client