Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft
File:                     Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft (raw, json)
Hash identifier:          YkjgIgvhrMSBhe62y9jLVtOw2BuXa3L6Dn0rj+J+lfw=
Subject key identifier:   6E:C9:DF:C5:74:91:73:29:95:D2:A1:11:E4:B1:43:CB:47:9A:8E:C5
Authority key identifier: 56:AF:1C:D0:B4:E0:7D:00:0C:64:AB:01:6C:33:F7:86:A0:DD:90:FA
Certificate issuer:       /CN=A914F22A/serialNumber=56AF1CD0B4E07D000C64AB016C33F786A0DD90FA
Certificate serial:       1414
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft
Manifest number:          140A
Signing time:             Tue 24 Mar 2026 16:48:58 +0000
Manifest this update:     Tue 24 Mar 2026 16:48:57 +0000
Manifest next update:     Tue 31 Mar 2026 16:48:57 +0000
Files and hashes:         1: Vq8c0LTgfQAMZKsBbDP3hqDdkPo.crl (hash: b9/YwE5d9em7phJ/iMUWBB29sSU32GEMdpvw5++w8o4=)
                          2: 8B2E3BA270BD11ED970C535FC4F9AE02.roa (hash: pZDso9pRkBCdjYnQayG6F+mIDGdpaJlOt1WudQ6yZcY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.crl
                          rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 16:48:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5140 (0x1414)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914F22A, serialNumber=56AF1CD0B4E07D000C64AB016C33F786A0DD90FA
        Validity
            Not Before: Mar 24 16:48:57 2026 GMT
            Not After : Mar 31 16:48:57 2026 GMT
        Subject: CN=69c2c07a-602a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:86:21:d9:a4:30:f4:56:a3:b8:f6:6e:be:40:
                    d8:8f:21:6a:1d:14:e8:8e:c0:8c:87:2a:ac:8d:17:
                    0f:73:18:85:2f:13:ca:bc:1e:81:df:43:6c:54:70:
                    60:f3:47:06:6d:38:ce:69:ac:e9:85:51:2f:e2:53:
                    29:1b:46:ac:19:92:c1:b1:b2:50:19:07:5e:8f:58:
                    fd:f3:2d:49:ab:18:94:0f:a2:c5:93:61:1b:9f:0c:
                    e1:0f:60:d8:84:c6:f6:a0:78:65:d8:9e:f4:63:8a:
                    bc:b6:56:e7:ea:77:c6:11:cf:6d:8a:ca:a0:7b:24:
                    03:bb:a5:e9:eb:39:20:f3:63:16:6d:99:e0:8e:59:
                    ae:61:d8:7a:9a:1d:71:49:aa:64:35:fb:82:23:d1:
                    e6:be:b2:78:8c:1c:f9:f0:e0:a8:d6:13:bf:1e:81:
                    a8:63:32:45:f5:bf:ec:06:c0:c1:a5:73:16:d0:11:
                    39:d3:1f:de:97:d7:4e:d9:19:c9:3d:49:99:23:14:
                    44:00:8a:63:a9:44:4d:6c:94:dd:42:ef:ee:b8:b7:
                    39:25:65:ef:0f:13:14:75:c9:15:4b:ed:2f:69:48:
                    cc:53:61:1e:1b:7a:28:48:10:44:b2:22:9e:b3:a8:
                    a3:24:48:4d:b2:f0:67:c7:a4:c2:95:e5:c0:6f:c9:
                    5a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:C9:DF:C5:74:91:73:29:95:D2:A1:11:E4:B1:43:CB:47:9A:8E:C5
            X509v3 Authority Key Identifier:
                keyid:56:AF:1C:D0:B4:E0:7D:00:0C:64:AB:01:6C:33:F7:86:A0:DD:90:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:4f:c4:65:cd:cc:d1:ca:46:99:82:40:50:c7:a5:86:0e:3e:
         01:16:8e:af:0e:92:77:ff:57:5d:65:18:23:5f:66:b5:d7:4c:
         49:28:12:22:5f:ea:98:ed:b9:56:bc:09:55:aa:0d:de:e7:af:
         37:37:aa:ea:18:6d:d2:65:ee:8a:a7:f2:87:0e:cf:6d:bf:25:
         05:0f:5c:1a:de:df:34:cb:00:80:87:63:ff:43:4e:76:18:66:
         3b:da:f9:60:e3:b5:4e:c1:3c:c1:47:78:bb:ff:c6:27:cc:b4:
         ce:ed:5c:f8:c0:9e:65:4d:c9:0a:6a:29:06:84:6c:e6:1c:8b:
         6d:f2:61:1c:4b:1b:91:42:a3:0d:33:cb:3e:52:e6:a1:b9:ca:
         3c:7d:89:07:16:49:4f:73:24:43:30:08:53:64:20:dd:3f:4a:
         d5:7d:32:ca:96:76:a0:ca:fe:21:61:52:96:83:45:e6:08:27:
         7c:ae:1e:74:75:64:91:4d:48:ac:a5:7a:9c:5d:58:e0:3d:37:
         9c:60:1e:cf:b1:e6:ba:cd:bf:bc:52:e0:9b:15:1e:eb:e0:50:
         e3:3a:e3:3e:75:49:2e:91:f8:f6:41:59:d8:93:64:23:ab:c0:
         9b:87:d1:65:74:1e:c5:ca:33:5b:c0:0b:26:59:37:54:e9:9d:
         c7:f7:b3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:19 2026 by rpki-client