Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.mft
File:                     VKJNxo3yZA57s_8PNreO-IQAww8.mft (raw, json)
Hash identifier:          Q6Y3fBKqRbH7HGUE2lfngcQ8jf2dtsKxLZ3RMEWFiEs=
Subject key identifier:   33:E1:AD:A7:45:37:8C:23:BF:24:17:D6:2C:2B:DA:79:14:C8:3F:5E
Authority key identifier: 54:A2:4D:C6:8D:F2:64:0E:7B:B3:FF:0F:36:B7:8E:F8:84:00:C3:0F
Certificate issuer:       /CN=A91362EB/serialNumber=54A24DC68DF2640E7BB3FF0F36B78EF88400C30F
Certificate serial:       88
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VKJNxo3yZA57s_8PNreO-IQAww8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.mft
Manifest number:          86
Signing time:             Wed 25 Mar 2026 06:48:57 +0000
Manifest this update:     Wed 25 Mar 2026 06:48:56 +0000
Manifest next update:     Wed 01 Apr 2026 06:48:56 +0000
Files and hashes:         1: VKJNxo3yZA57s_8PNreO-IQAww8.crl (hash: mm3K3uxv85ni6f/cgByxYAmbjeNXsiAUzHvceTxJ2e4=)
                          2: 0E0A2B9A5C9C11F08CB7E148C4F9AE02.roa (hash: eGLRs5+xRo2yh8UxiEyYoaUHZFSoi/sB9xgpO/Oq4V8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.crl
                          rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VKJNxo3yZA57s_8PNreO-IQAww8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:48:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136 (0x88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91362EB, serialNumber=54A24DC68DF2640E7BB3FF0F36B78EF88400C30F
        Validity
            Not Before: Mar 25 06:48:56 2026 GMT
            Not After : Apr  1 06:48:56 2026 GMT
        Subject: CN=69c38558-1147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:65:24:30:2e:84:02:8d:a7:67:aa:8a:14:30:
                    fb:66:5d:b0:6d:e4:8e:cb:bc:00:9e:bd:3d:0e:c2:
                    2d:92:b6:21:c6:23:4b:08:91:51:a5:70:ee:f5:78:
                    ba:53:3c:71:bd:fe:71:94:fa:ee:f3:31:a4:80:e8:
                    ac:ea:2a:cc:15:9d:f8:66:7b:d4:bd:08:d2:c3:e3:
                    6a:a6:ac:ff:2f:6d:fb:97:f7:e4:23:90:a3:07:8d:
                    ec:3e:9f:93:63:27:b0:c0:ed:33:80:2d:e9:c0:7a:
                    1f:e5:a2:76:f6:44:c3:3c:ea:ee:2f:22:5a:c7:98:
                    46:cf:85:a1:a9:61:6e:ec:f3:26:15:61:04:6a:5e:
                    64:f7:d6:3d:c6:37:99:e7:56:9c:f2:5d:c5:55:48:
                    c3:33:67:30:26:bc:c7:5e:15:ea:49:32:b7:99:a2:
                    63:fc:cb:30:25:14:45:8c:46:9e:ba:a6:d6:78:6e:
                    50:3f:d3:51:5e:ab:15:e4:54:b9:ca:f8:77:f1:43:
                    02:84:e6:1e:e2:5d:0f:b7:6e:f2:b9:be:81:5a:c4:
                    10:cd:b9:75:13:34:7a:41:5d:56:39:ca:e6:f9:63:
                    85:67:16:69:8a:0f:ed:16:dc:55:bb:9f:6c:bc:1f:
                    91:51:b0:6e:20:56:09:70:4f:87:61:c4:6d:c1:2c:
                    ab:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:E1:AD:A7:45:37:8C:23:BF:24:17:D6:2C:2B:DA:79:14:C8:3F:5E
            X509v3 Authority Key Identifier:
                keyid:54:A2:4D:C6:8D:F2:64:0E:7B:B3:FF:0F:36:B7:8E:F8:84:00:C3:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VKJNxo3yZA57s_8PNreO-IQAww8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:22:53:c1:6d:3d:52:ce:8f:2f:e3:49:62:3b:ca:63:46:de:
         8e:0e:33:a6:52:3e:0c:f0:be:fd:8e:90:f7:4c:5a:0e:79:94:
         85:fd:d9:2a:29:24:99:9c:5a:c4:91:8b:7b:5d:c4:6c:5e:0a:
         89:8f:a9:c6:36:ae:ca:bd:0b:60:86:87:7f:26:a1:d5:e0:e9:
         1b:a5:d6:b3:14:66:4a:c2:bc:22:f8:38:51:3e:d5:37:01:b0:
         ab:42:30:04:db:ee:50:57:a5:58:3d:01:9d:bf:b9:a9:4b:f9:
         74:d7:ee:11:f1:81:3a:6c:5c:b1:1a:21:78:10:29:bd:9c:29:
         29:37:25:6c:11:eb:4e:fa:2e:6e:ea:c4:98:f8:7d:99:bf:ba:
         9a:58:84:0f:5f:a1:a7:97:e3:b2:d8:54:e7:9a:8d:af:22:91:
         2b:78:00:6c:9a:a0:99:69:52:cc:94:5b:4c:62:35:63:f2:17:
         1f:b2:9a:c6:c4:57:69:0b:00:40:30:18:07:0a:da:5b:9a:d2:
         68:19:cc:a5:63:5c:4b:29:94:9a:65:6d:83:52:e2:84:5e:ea:
         f6:4d:44:70:60:72:b8:ce:33:bb:ef:2c:3c:c4:68:fe:fa:b2:
         44:6e:3f:d5:1b:7c:19:ce:f8:d7:36:d3:47:9b:cd:7b:1d:1b:
         af:92:40:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:20:14 2026 by rpki-client