Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171172/886B9A1C18BE11EBAC10DE46C4F9AE02/Vgu9YAbOzXMA0VJMiidDmrvxWX4.mft
File:                     Vgu9YAbOzXMA0VJMiidDmrvxWX4.mft (raw, json)
Hash identifier:          ATxMWlMcbb94zH6IIVk0we+naFQ0NrIIhGrBJ9NqhEo=
Subject key identifier:   C2:D8:BA:BB:1D:43:38:8B:D1:2E:8E:AA:55:36:96:A0:46:70:A4:FA
Authority key identifier: 56:0B:BD:60:06:CE:CD:73:00:D1:52:4C:8A:27:43:9A:BB:F1:59:7E
Certificate issuer:       /CN=A9171172/serialNumber=560BBD6006CECD7300D1524C8A27439ABBF1597E
Certificate serial:       0805
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vgu9YAbOzXMA0VJMiidDmrvxWX4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171172/886B9A1C18BE11EBAC10DE46C4F9AE02/Vgu9YAbOzXMA0VJMiidDmrvxWX4.mft
Manifest number:          0805
Signing time:             Thu 26 Mar 2026 20:59:42 +0000
Manifest this update:     Thu 26 Mar 2026 20:59:41 +0000
Manifest next update:     Thu 02 Apr 2026 20:59:41 +0000
Files and hashes:         1: Vgu9YAbOzXMA0VJMiidDmrvxWX4.crl (hash: FOenjUKruy8wVIzflqZFUYdQ26/wRO8b81xlZm5aFlI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171172/886B9A1C18BE11EBAC10DE46C4F9AE02/Vgu9YAbOzXMA0VJMiidDmrvxWX4.crl
                          rsync://rpki.apnic.net/member_repository/A9171172/886B9A1C18BE11EBAC10DE46C4F9AE02/Vgu9YAbOzXMA0VJMiidDmrvxWX4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vgu9YAbOzXMA0VJMiidDmrvxWX4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 20:59:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2053 (0x805)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171172, serialNumber=560BBD6006CECD7300D1524C8A27439ABBF1597E
        Validity
            Not Before: Mar 26 20:59:41 2026 GMT
            Not After : Apr  2 20:59:41 2026 GMT
        Subject: CN=69c59e3d-d523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c2:4f:e1:40:66:fc:88:e7:f2:32:ca:89:ae:
                    d2:c4:f7:1d:ae:6f:9c:b7:5b:da:5f:69:c1:60:fa:
                    5d:df:71:d4:f8:50:95:78:d9:6e:87:21:e2:bd:3f:
                    12:3b:4a:e5:83:04:37:5e:22:51:21:92:ea:3e:46:
                    d7:c9:a5:b9:64:63:8a:8d:25:d9:fb:02:f4:78:82:
                    af:d7:7e:57:6e:79:fb:de:95:ab:db:7d:58:38:1c:
                    75:4b:7a:e0:a2:e1:e0:5f:40:ef:6a:4f:ce:38:8c:
                    b2:03:07:9c:3a:7c:7f:ce:6d:ff:f5:64:30:a1:38:
                    ed:76:61:1e:6e:45:6e:95:d7:e3:1d:2b:92:1f:40:
                    ec:1d:4e:50:3e:d3:35:cd:d9:72:1a:37:62:d2:d1:
                    6a:21:78:32:d1:01:a5:f1:f0:af:0e:d7:e6:d1:5a:
                    a7:b4:2d:4c:7a:d5:cb:7e:c3:d8:7a:87:04:33:d5:
                    3b:f8:53:ff:b2:90:59:d0:25:0c:6c:d1:69:4a:35:
                    fd:eb:5b:92:06:2e:f6:e1:c4:88:64:ec:6a:f6:28:
                    c7:f9:1c:64:35:93:cb:47:32:6b:36:f6:d9:01:7e:
                    fa:4c:a7:8f:e2:aa:83:46:57:7f:f0:42:ec:8d:28:
                    c5:1f:0e:42:cc:1b:f9:a4:9e:46:c2:60:a4:31:13:
                    fd:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:D8:BA:BB:1D:43:38:8B:D1:2E:8E:AA:55:36:96:A0:46:70:A4:FA
            X509v3 Authority Key Identifier:
                keyid:56:0B:BD:60:06:CE:CD:73:00:D1:52:4C:8A:27:43:9A:BB:F1:59:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171172/886B9A1C18BE11EBAC10DE46C4F9AE02/Vgu9YAbOzXMA0VJMiidDmrvxWX4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vgu9YAbOzXMA0VJMiidDmrvxWX4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171172/886B9A1C18BE11EBAC10DE46C4F9AE02/Vgu9YAbOzXMA0VJMiidDmrvxWX4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:74:0c:86:fa:bd:a4:d7:49:e2:28:c3:f0:f6:b8:2b:a4:67:
         76:93:5f:a6:1c:9e:54:03:64:b4:ed:ea:6f:21:d0:e1:95:f9:
         cd:ea:74:5f:56:45:b8:78:1e:02:b1:f3:2b:cf:48:a8:7f:17:
         01:f9:3f:c8:fd:7f:9b:20:f2:bd:3c:b6:ca:f9:1f:ae:f6:db:
         1a:bd:ee:60:88:eb:d7:7c:03:6f:e6:5e:4b:99:1d:1a:72:fd:
         aa:62:d0:b8:0a:76:eb:bb:d2:d2:ba:e2:e5:04:08:e4:c8:42:
         93:2b:68:f2:87:16:62:18:e7:83:eb:6b:ba:53:bb:0e:ce:f3:
         e9:8a:f8:8f:d9:4b:9e:d5:b2:f0:3b:a0:5a:92:fa:33:49:1e:
         00:76:f6:1a:58:cc:1d:36:71:27:93:34:d1:e3:01:e7:91:2d:
         c7:5f:f0:88:de:67:b9:15:a9:89:f4:8a:76:b2:20:1c:57:1e:
         ee:e2:8b:e5:07:7a:96:dd:14:48:60:ff:ac:d6:f8:e0:d2:56:
         8c:19:d5:74:49:1e:ee:85:79:dc:7c:97:f7:1c:b7:3f:82:33:
         88:4f:77:e3:e5:33:a3:23:c3:c9:46:32:25:fd:16:99:02:cb:
         1f:e8:a1:78:32:33:b0:e7:8b:ad:f3:36:40:d7:d9:1e:2a:71:
         36:ab:8f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:14:19 2026 by rpki-client