Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.mft
File:                     vcSlFjMX9zCX8CejQrhgp5LX8dw.mft (raw, json)
Hash identifier:          6AId+NRr3wWlgKyCkzhQGzd3F2lugq8A6Qthlw8rFaA=
Subject key identifier:   C0:6B:7B:A0:2C:A2:EA:2F:06:5B:E9:67:A6:59:F1:0F:A7:96:C4:16
Authority key identifier: BD:C4:A5:16:33:17:F7:30:97:F0:27:A3:42:B8:60:A7:92:D7:F1:DC
Certificate issuer:       /CN=A9179F64/serialNumber=BDC4A5163317F73097F027A342B860A792D7F1DC
Certificate serial:       0138
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vcSlFjMX9zCX8CejQrhgp5LX8dw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.mft
Manifest number:          0130
Signing time:             Wed 25 Mar 2026 04:49:35 +0000
Manifest this update:     Wed 25 Mar 2026 04:49:35 +0000
Manifest next update:     Wed 01 Apr 2026 04:49:35 +0000
Files and hashes:         1: vcSlFjMX9zCX8CejQrhgp5LX8dw.crl (hash: tVuFpFZeBZO9KokY+t4K4ZdqxNlhc9HNbb9RswilMnE=)
                          2: DEF27D12B32111F0B1CD4673C4F9AE02.roa (hash: 3MuTQXoMCGH7h+cHWUuFWYlXQN1siuCSNhBtA5PHtcU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.crl
                          rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vcSlFjMX9zCX8CejQrhgp5LX8dw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:49:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 312 (0x138)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179F64, serialNumber=BDC4A5163317F73097F027A342B860A792D7F1DC
        Validity
            Not Before: Mar 25 04:49:35 2026 GMT
            Not After : Apr  1 04:49:35 2026 GMT
        Subject: CN=69c3695f-feee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e7:43:0d:dc:43:c9:3c:12:98:e9:64:0b:b2:
                    18:59:2c:77:67:71:43:07:c2:11:12:57:ac:58:5f:
                    cc:81:28:9c:98:15:5d:eb:5b:32:cb:50:97:ca:a1:
                    e0:85:51:b6:b3:27:7f:a0:ad:32:06:3a:c8:3b:b9:
                    43:f5:63:81:88:e1:e5:a7:1f:96:08:bd:3a:c6:2d:
                    d9:28:f4:58:51:46:af:0e:1b:86:81:c5:15:0f:a4:
                    c9:3f:dc:70:ce:d0:e2:e8:7c:63:f9:93:b2:cf:af:
                    2a:e2:cc:b5:4e:4e:f2:6b:e1:70:f0:ef:ab:5d:58:
                    97:66:19:a0:7d:92:7c:71:cd:0c:ad:60:a8:3a:94:
                    22:16:ce:0d:88:25:fe:9f:bf:f0:13:69:19:85:a1:
                    6d:81:1c:81:d4:fc:11:9a:93:2c:28:f8:05:79:7a:
                    6e:a8:dd:a6:09:17:7b:9d:07:ab:27:86:57:d7:c0:
                    57:ae:bf:5d:b3:59:39:f9:e9:3f:81:4a:a0:76:c7:
                    c4:e0:2f:f0:79:d1:92:6c:d2:1a:b7:b3:12:43:e3:
                    6e:23:59:1d:1b:0a:96:e6:11:72:b8:94:0a:01:c0:
                    ac:27:9f:17:14:dd:ae:af:a6:da:52:c6:94:29:82:
                    a6:bc:cb:62:07:43:ac:18:5f:67:21:f1:5c:19:6a:
                    29:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:6B:7B:A0:2C:A2:EA:2F:06:5B:E9:67:A6:59:F1:0F:A7:96:C4:16
            X509v3 Authority Key Identifier:
                keyid:BD:C4:A5:16:33:17:F7:30:97:F0:27:A3:42:B8:60:A7:92:D7:F1:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vcSlFjMX9zCX8CejQrhgp5LX8dw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:ff:59:28:8d:8e:b3:ac:b6:78:10:f7:66:d3:05:e4:11:c7:
         de:61:21:24:42:f4:a5:15:bc:8b:6f:06:49:bd:6f:cb:77:00:
         d1:c1:31:52:2b:d0:aa:f4:d7:09:e5:9f:d4:5f:f5:e3:a3:86:
         51:4c:02:7c:ad:d8:f9:d3:a8:dd:53:5a:6d:4a:f0:52:74:2b:
         d3:43:02:e4:05:eb:c9:6b:af:a8:96:ca:42:fb:e3:39:3b:3e:
         74:fc:28:63:86:cd:52:3e:ad:4f:54:4e:b0:a4:e9:43:c0:74:
         86:67:16:38:3b:67:f7:cd:d0:39:03:a6:ea:b5:15:2e:54:27:
         79:c9:56:09:e3:91:15:2d:4d:f3:61:07:c5:73:a3:71:af:57:
         09:d3:72:ee:6f:ea:39:e5:c3:05:83:1c:5d:51:38:cf:f7:b6:
         0b:5f:e3:12:b8:24:fc:8d:79:7a:5a:8e:90:e2:a7:ac:77:a1:
         71:dd:45:04:59:6e:8a:6b:89:e2:a0:20:a8:64:6a:cb:b4:e2:
         a4:06:0d:17:15:d5:a6:94:87:a6:39:57:00:74:97:e5:bd:4f:
         e0:46:ef:ce:4b:64:81:e1:c1:2a:35:da:ad:27:be:56:f8:ef:
         81:6e:9a:85:90:2d:6e:23:be:85:70:4c:31:3e:18:48:71:ad:
         3d:b8:5e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:31:15 2026 by rpki-client