Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916537A/9F817BB6276A11F1A891B17FC2833773/VqcyG_yMPsLpkWD6MztPVMGClGo.mft
File:                     VqcyG_yMPsLpkWD6MztPVMGClGo.mft (raw, json)
Hash identifier:          qOP1/Cai5EPoFSxXXxwkvlB95MrRJYi3+lEpo/DGm7Q=
Subject key identifier:   A5:81:34:6E:05:82:5F:53:E4:1F:1B:4B:CC:CD:22:9A:DF:9F:AE:50
Authority key identifier: 56:A7:32:1B:FC:8C:3E:C2:E9:91:60:FA:33:3B:4F:54:C1:82:94:6A
Certificate issuer:       /CN=A916537A/serialNumber=56A7321BFC8C3EC2E99160FA333B4F54C182946A
Certificate serial:       05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqcyG_yMPsLpkWD6MztPVMGClGo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916537A/9F817BB6276A11F1A891B17FC2833773/VqcyG_yMPsLpkWD6MztPVMGClGo.mft
Manifest number:          04
Signing time:             Wed 25 Mar 2026 08:26:50 +0000
Manifest this update:     Wed 25 Mar 2026 08:26:49 +0000
Manifest next update:     Wed 01 Apr 2026 08:26:49 +0000
Files and hashes:         1: VqcyG_yMPsLpkWD6MztPVMGClGo.crl (hash: C196bfs6Ei/vNO7p7AnbT1dOA0WrcKJP4k6vpQbPEl0=)
                          2: 955C204027D911F183CCD80FA7833773.roa (hash: tYXGyBLXGMJ9TEdThJmPAhWV7Kw3QjVCE7lJviid3as=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916537A/9F817BB6276A11F1A891B17FC2833773/VqcyG_yMPsLpkWD6MztPVMGClGo.crl
                          rsync://rpki.apnic.net/member_repository/A916537A/9F817BB6276A11F1A891B17FC2833773/VqcyG_yMPsLpkWD6MztPVMGClGo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqcyG_yMPsLpkWD6MztPVMGClGo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 08:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916537A, serialNumber=56A7321BFC8C3EC2E99160FA333B4F54C182946A
        Validity
            Not Before: Mar 25 08:26:49 2026 GMT
            Not After : Apr  1 08:26:49 2026 GMT
        Subject: CN=69c39c49-13c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3f:ca:e4:b6:27:17:0d:dc:5c:9a:02:f2:47:
                    a6:e8:dd:fc:d3:0c:5e:2c:4e:37:88:58:ec:dd:15:
                    e7:da:db:28:c6:04:23:b7:01:f2:2d:32:32:2e:d1:
                    9e:80:bf:50:aa:2e:ba:64:46:ce:96:c2:6e:16:f9:
                    4d:82:d8:37:90:ad:81:2e:d9:52:43:56:2d:6c:c5:
                    15:21:24:e3:b1:01:e7:cc:5d:31:e0:fc:d9:23:55:
                    69:ef:7b:91:bd:40:d9:2d:50:e0:f0:19:67:31:c4:
                    2f:2b:d8:4e:ce:05:c5:bb:b7:22:50:53:eb:2d:39:
                    e7:e7:67:b0:db:68:04:e7:1e:24:15:53:62:a7:af:
                    c1:a6:2b:36:60:12:5b:a7:76:0d:3b:d8:d5:80:40:
                    90:53:ba:74:aa:1b:04:52:e1:69:9f:d5:f4:82:3e:
                    28:df:2d:07:8b:4e:c3:08:60:14:bf:a4:cc:cf:3b:
                    b0:40:e4:a9:68:63:10:7c:36:79:0b:5d:24:7f:2e:
                    d7:20:bb:c3:f0:0e:c1:ce:c2:e5:87:bd:91:96:63:
                    c9:a7:30:ba:82:df:17:f9:72:30:7d:40:2e:21:3d:
                    dd:5c:49:6b:eb:1e:e1:7e:95:a7:d3:6b:e7:44:3d:
                    14:89:cd:22:92:90:72:02:61:41:d6:19:d6:b3:cc:
                    07:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:81:34:6E:05:82:5F:53:E4:1F:1B:4B:CC:CD:22:9A:DF:9F:AE:50
            X509v3 Authority Key Identifier:
                keyid:56:A7:32:1B:FC:8C:3E:C2:E9:91:60:FA:33:3B:4F:54:C1:82:94:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916537A/9F817BB6276A11F1A891B17FC2833773/VqcyG_yMPsLpkWD6MztPVMGClGo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqcyG_yMPsLpkWD6MztPVMGClGo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916537A/9F817BB6276A11F1A891B17FC2833773/VqcyG_yMPsLpkWD6MztPVMGClGo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:6a:a7:3e:4e:85:54:31:6b:c9:c4:f9:62:7a:77:65:d5:80:
         a7:ce:8b:0a:22:a1:6b:a7:d0:bd:4c:d7:32:bf:e6:bf:42:75:
         f9:ee:1f:3b:ed:22:74:fa:ce:d5:3e:8a:6d:e0:e5:36:3c:f2:
         d4:6c:82:fb:2c:5b:88:f6:b6:e9:6b:ce:ab:a5:9e:60:c6:ee:
         9d:3a:f9:36:94:be:69:19:69:0e:41:ad:08:26:b2:8d:af:b9:
         94:61:84:b3:6f:43:35:61:29:80:2d:f0:9d:52:24:0d:76:18:
         c5:e7:35:00:09:da:9e:d9:68:8d:d0:77:de:58:2f:ed:6f:52:
         ec:51:39:4e:c6:c3:49:41:45:8e:74:af:43:d1:d8:07:22:e0:
         d6:2a:24:33:e2:4e:22:b3:7f:ca:80:9c:70:74:c7:5a:39:d8:
         19:24:33:48:09:9e:b8:be:1d:26:f0:e3:b1:b2:f9:1e:a8:56:
         49:be:5f:56:68:01:91:1d:02:28:df:80:13:52:39:b4:b0:8a:
         6f:51:1c:d6:09:a3:31:03:e6:e7:e3:bf:26:63:82:af:7f:06:
         1e:fe:52:b1:2d:4a:6b:e4:74:ca:ee:42:21:32:12:7d:22:73:
         ae:e6:fc:03:49:5e:18:cc:61:42:de:de:2b:da:f2:a1:8c:23:
         15:67:f5:e8
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
NTM3QTExMC8GA1UEBRMoNTZBNzMyMUJGQzhDM0VDMkU5OTE2MEZBMzMzQjRGNTRD
MTgyOTQ2QTAeFw0yNjAzMjUwODI2NDlaFw0yNjA0MDEwODI2NDlaMBgxFjAUBgNV
BAMTDTY5YzM5YzQ5LTEzYzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC7P8rkticXDdxcmgLyR6bo3fzTDF4sTjeIWOzdFefa2yjGBCO3AfItMjIu0Z6A
v1CqLrpkRs6Wwm4W+U2C2DeQrYEu2VJDVi1sxRUhJOOxAefMXTHg/NkjVWnve5G9
QNktUODwGWcxxC8r2E7OBcW7tyJQU+stOefnZ7DbaATnHiQVU2Knr8GmKzZgElun
dg072NWAQJBTunSqGwRS4Wmf1fSCPijfLQeLTsMIYBS/pMzPO7BA5KloYxB8NnkL
XSR/Ltcgu8PwDsHOwuWHvZGWY8mnMLqC3xf5cjB9QC4hPd1cSWvrHuF+lafTa+dE
PRSJzSKSkHICYUHWGdazzAexAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUpYE0bgWC
X1PkHxtLzM0imt+frlAwHwYDVR0jBBgwFoAUVqcyG/yMPsLpkWD6MztPVMGClGow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1MzdBLzlGODE3QkI2Mjc2
QTExRjFBODkxQjE3RkMyODMzNzczL1ZxY3lHX3lNUHNMcGtXRDZNenRQVk1HQ2xH
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvVnFjeUdfeU1Qc0xwa1dENk16dFBWTUdDbEdvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1
MzdBLzlGODE3QkI2Mjc2QTExRjFBODkxQjE3RkMyODMzNzczL1ZxY3lHX3lNUHNM
cGtXRDZNenRQVk1HQ2xHby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAgaqc+ToVUMWvJxPliendl1YCnzosKIqFrp9C9TNcyv+a/QnX57h877SJ0+s7V
Popt4OU2PPLUbIL7LFuI9rbpa86rpZ5gxu6dOvk2lL5pGWkOQa0IJrKNr7mUYYSz
b0M1YSmALfCdUiQNdhjF5zUACdqe2WiN0HfeWC/tb1LsUTlOxsNJQUWOdK9D0dgH
IuDWKiQz4k4is3/KgJxwdMdaOdgZJDNICZ64vh0m8OOxsvkeqFZJvl9WaAGRHQIo
34ATUjm0sIpvURzWCaMxA+bn478mY4KvfwYe/lKxLUpr5HTK7kIhMhJ9InOu5vwD
SV4YzGFC3t4r2vKhjCMVZ/Xo
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:11:49 2026 by rpki-client