Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.mft
File:                     VfLp2yg8tFniZmj5Ik8ms6KkRk4.mft (raw, json)
Hash identifier:          EeOppw/jK7A+F+YLR2S23bxesM2tfRAj2e/dseUtXcM=
Subject key identifier:   F0:3E:7A:05:E0:A3:00:22:FC:AC:23:8F:97:42:E2:65:3A:2E:C0:1E
Authority key identifier: 55:F2:E9:DB:28:3C:B4:59:E2:66:68:F9:22:4F:26:B3:A2:A4:46:4E
Certificate issuer:       /CN=A915B878/serialNumber=55F2E9DB283CB459E26668F9224F26B3A2A4464E
Certificate serial:       063A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLp2yg8tFniZmj5Ik8ms6KkRk4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.mft
Manifest number:          0638
Signing time:             Tue 24 Mar 2026 22:25:33 +0000
Manifest this update:     Tue 24 Mar 2026 22:25:33 +0000
Manifest next update:     Tue 31 Mar 2026 22:25:33 +0000
Files and hashes:         1: VfLp2yg8tFniZmj5Ik8ms6KkRk4.crl (hash: xdKG860mVFOqVjQNCledZNcsowDtf3LSdzSKvjTddfw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.crl
                          rsync://rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLp2yg8tFniZmj5Ik8ms6KkRk4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:25:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1594 (0x63a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B878, serialNumber=55F2E9DB283CB459E26668F9224F26B3A2A4464E
        Validity
            Not Before: Mar 24 22:25:33 2026 GMT
            Not After : Mar 31 22:25:33 2026 GMT
        Subject: CN=69c30f5d-3f78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b2:2e:a0:0e:f7:cb:8a:b7:ca:e5:1e:1b:99:
                    47:14:45:54:bc:38:d0:6c:ad:23:dd:02:9f:dc:12:
                    b2:b1:ea:52:d0:1f:b1:8f:da:1e:0c:ac:20:e4:8e:
                    83:89:5b:14:89:1f:ea:69:dc:22:06:31:38:61:d4:
                    a6:24:b8:23:50:73:a1:fa:d0:cd:86:15:c9:fd:79:
                    c3:73:b5:33:f2:b3:77:25:98:6b:b4:e0:95:68:01:
                    a3:0e:53:a3:7e:2d:4c:7c:4a:71:11:a5:8f:e4:dc:
                    4b:0d:92:0c:0f:2e:91:29:60:43:59:1c:03:34:95:
                    af:14:35:c7:18:bc:20:cb:d5:3b:ab:b1:ba:3b:0d:
                    38:5d:04:4c:9d:85:0c:93:87:ca:e9:28:0c:69:b7:
                    c2:b3:ba:53:40:f5:ce:b3:56:ac:d4:59:33:8b:a5:
                    df:31:54:6d:a4:8c:c1:5b:a5:c8:d9:f3:db:ad:48:
                    18:f8:c1:b7:de:ee:8f:24:f0:38:6a:76:fb:e0:f7:
                    c2:09:cb:81:6f:a4:36:b0:81:70:0e:e7:db:e4:11:
                    fe:cb:80:5a:61:1b:a1:a7:f0:d5:56:d6:f3:8b:36:
                    2f:98:20:f6:2a:04:92:ef:d9:44:99:b2:d5:c9:63:
                    66:cf:af:a2:c9:14:79:80:6c:ad:66:6d:92:d3:a0:
                    43:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:3E:7A:05:E0:A3:00:22:FC:AC:23:8F:97:42:E2:65:3A:2E:C0:1E
            X509v3 Authority Key Identifier:
                keyid:55:F2:E9:DB:28:3C:B4:59:E2:66:68:F9:22:4F:26:B3:A2:A4:46:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLp2yg8tFniZmj5Ik8ms6KkRk4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:e8:58:64:7e:8d:83:41:e0:3b:bc:2a:66:c8:a1:48:17:4b:
         fa:3f:e4:89:fb:81:4d:78:ae:27:df:e2:6c:ac:45:40:e2:31:
         9e:35:0a:39:2c:11:99:20:04:c2:f3:5c:37:dc:2b:13:8c:ea:
         c7:35:a7:8a:91:b5:71:b2:d6:4d:6c:64:c5:98:e0:e7:9e:60:
         2d:b1:50:e3:e9:bf:d3:13:72:3a:07:62:4b:a2:43:66:f3:e8:
         08:cd:b1:a6:68:85:d4:89:fa:fb:88:3d:28:d0:d8:92:e3:e4:
         05:d0:f8:7c:31:7b:31:3c:31:82:ea:8e:30:4f:5e:88:0d:5a:
         30:ea:5a:de:cc:9d:45:a8:6d:85:f4:d7:d1:a6:86:91:1d:16:
         07:78:46:f8:51:1e:0b:ba:0c:af:42:01:0a:0a:6c:1d:8a:fc:
         e4:55:96:64:a3:f4:f0:09:74:75:55:57:96:81:af:df:45:52:
         a9:a1:ca:fa:5e:1f:ad:d9:5b:9b:9a:50:a2:da:c7:40:f5:41:
         3d:93:04:ad:26:ca:df:4e:63:98:56:c0:79:5b:3a:4f:bb:a6:
         34:46:22:c8:d2:0f:7a:db:f9:02:db:21:73:21:97:c6:04:16:
         1e:52:5c:1b:fe:48:9f:bb:a7:70:24:ed:9b:c6:b8:72:f6:34:
         80:9d:3d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:52:03 2026 by rpki-client