Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913CB06/8A4D76BE07E411F1A34718A5213D8C67/VC3eAu1c1aeKWFAwa556fpn8Jgs.mft
File:                     VC3eAu1c1aeKWFAwa556fpn8Jgs.mft (raw, json)
Hash identifier:          ETEFeHvGCi8UhOdymGp1/kAyJ7rVPCoed+s6PXcbKJc=
Subject key identifier:   00:1E:1E:8F:8D:3B:D0:CF:3D:FE:A3:67:DD:08:89:10:A1:06:3D:36
Authority key identifier: 54:2D:DE:02:ED:5C:D5:A7:8A:58:50:30:6B:9E:7A:7E:99:FC:26:0B
Certificate issuer:       /CN=A913CB06/serialNumber=542DDE02ED5CD5A78A5850306B9E7A7E99FC260B
Certificate serial:       1D
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/VC3eAu1c1aeKWFAwa556fpn8Jgs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913CB06/8A4D76BE07E411F1A34718A5213D8C67/VC3eAu1c1aeKWFAwa556fpn8Jgs.mft
Manifest number:          1B
Signing time:             Wed 25 Mar 2026 08:10:05 +0000
Manifest this update:     Wed 25 Mar 2026 08:10:04 +0000
Manifest next update:     Wed 01 Apr 2026 08:10:04 +0000
Files and hashes:         1: VC3eAu1c1aeKWFAwa556fpn8Jgs.crl (hash: EyCnfLZ038S9JOwwgtPwqWXzhbQ3G6NflgizBiY0J+4=)
                          2: D111CFB407E411F1ADC4A5A5213D8C67.roa (hash: lUmpfgR/p5W8luIbaZ+1ADUqFYn/T6101vy4MSXsnuo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913CB06/8A4D76BE07E411F1A34718A5213D8C67/VC3eAu1c1aeKWFAwa556fpn8Jgs.crl
                          rsync://rpki.apnic.net/member_repository/A913CB06/8A4D76BE07E411F1A34718A5213D8C67/VC3eAu1c1aeKWFAwa556fpn8Jgs.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/VC3eAu1c1aeKWFAwa556fpn8Jgs.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 08:10:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913CB06, serialNumber=542DDE02ED5CD5A78A5850306B9E7A7E99FC260B
        Validity
            Not Before: Mar 25 08:10:04 2026 GMT
            Not After : Apr  1 08:10:04 2026 GMT
        Subject: CN=69c3985c-05aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:dd:6a:1d:97:4b:7e:1e:0a:35:c8:85:37:03:
                    2a:2b:3b:f0:3e:19:13:11:f8:be:d4:fe:f8:80:81:
                    65:9f:d6:9e:19:e2:c8:69:8f:14:e9:2b:c1:54:c4:
                    96:d8:34:21:0c:35:15:0f:60:4b:f3:d3:69:06:68:
                    4b:c7:be:c0:6f:fc:84:5a:1a:c0:70:a0:d5:a2:57:
                    a6:16:3f:4f:93:a4:ea:57:8c:c6:ac:ee:15:a8:ab:
                    7c:54:60:8b:ae:5f:50:6b:04:5d:7a:2f:3c:de:39:
                    ea:02:46:4f:57:d1:da:c5:cf:2e:fd:be:95:01:8c:
                    2f:6a:83:08:ef:76:ae:1b:c5:9c:33:2c:0a:dc:4d:
                    f7:6e:26:38:ef:75:74:49:5d:42:ca:dc:12:72:bb:
                    df:b0:0a:8b:e5:ae:47:04:85:25:28:ec:62:00:95:
                    c8:3a:5f:48:f1:e2:b5:2a:03:5d:7f:d7:b4:f1:09:
                    9c:cc:d9:bd:73:86:a1:d2:f2:6e:42:15:5e:ce:8c:
                    cd:3e:73:f9:fe:ad:bb:36:35:eb:6b:24:19:18:fa:
                    11:92:19:07:ad:d8:32:16:b0:5c:f1:2c:64:8b:f9:
                    69:e8:1d:c1:2b:f7:aa:b5:76:3a:2c:2e:50:6a:7e:
                    ce:0c:14:e4:8e:e7:dc:a1:fd:69:2e:56:33:32:09:
                    8a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:1E:1E:8F:8D:3B:D0:CF:3D:FE:A3:67:DD:08:89:10:A1:06:3D:36
            X509v3 Authority Key Identifier:
                keyid:54:2D:DE:02:ED:5C:D5:A7:8A:58:50:30:6B:9E:7A:7E:99:FC:26:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913CB06/8A4D76BE07E411F1A34718A5213D8C67/VC3eAu1c1aeKWFAwa556fpn8Jgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/VC3eAu1c1aeKWFAwa556fpn8Jgs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CB06/8A4D76BE07E411F1A34718A5213D8C67/VC3eAu1c1aeKWFAwa556fpn8Jgs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:9a:6c:37:4c:8e:28:3f:e8:8e:9d:16:9e:2f:80:be:68:ac:
         92:b8:26:3c:e1:06:dd:69:5f:f2:bb:72:86:49:b5:16:f2:cc:
         4a:0a:ce:de:92:11:b7:03:26:a3:c6:84:a4:b3:ff:67:6c:86:
         94:f2:33:a7:3f:53:59:6d:5e:6f:6f:1a:a6:8c:04:01:d7:66:
         69:64:0a:61:7e:da:7c:48:7b:4b:29:8f:53:5d:25:ec:60:74:
         14:12:40:14:a6:ed:e0:0d:48:3d:6c:c6:50:1d:a9:53:12:a4:
         01:39:b7:48:30:3e:0d:d6:8c:a6:2f:ee:e9:76:dd:02:ad:d4:
         a5:cc:7e:58:b8:77:d6:fb:c7:4d:06:92:21:fd:db:3c:db:00:
         a9:07:2b:1d:8c:1e:c7:30:0d:77:59:1a:4b:1a:3b:a0:34:a3:
         90:fa:6d:b1:b7:53:1a:04:97:f9:32:1b:ba:51:17:8d:d1:ac:
         96:41:24:6b:7c:ae:f8:e8:6e:d4:4e:dd:72:c5:49:17:c7:09:
         0e:fb:67:fe:62:6b:40:3c:de:cc:1d:13:e5:7e:0c:47:c8:c3:
         c6:c5:d6:ea:b8:ed:db:0a:90:1e:40:3e:30:54:25:d2:17:da:
         71:8f:2f:b8:73:e3:13:8b:24:df:fc:8f:a5:49:e3:ba:4f:8f:
         37:9a:0f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:25:18 2026 by rpki-client