Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.mft
File:                     VngmFidUtGDLWGbawxSIDHA1Rh0.mft (raw, json)
Hash identifier:          fnm0X21YiUBUSx92KSDt88J1cTiwcR9BkkA2M6cBH0Q=
Subject key identifier:   AD:E7:5E:4C:D4:4B:BD:5A:3A:66:13:3A:83:66:28:1B:31:A2:40:40
Authority key identifier: 56:78:26:16:27:54:B4:60:CB:58:66:DA:C3:14:88:0C:70:35:46:1D
Certificate issuer:       /CN=A917D9B8/serialNumber=567826162754B460CB5866DAC314880C7035461D
Certificate serial:       0184
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VngmFidUtGDLWGbawxSIDHA1Rh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.mft
Manifest number:          017E
Signing time:             Mon 11 May 2026 04:39:08 +0000
Manifest this update:     Mon 11 May 2026 04:39:07 +0000
Manifest next update:     Mon 18 May 2026 04:39:07 +0000
Files and hashes:         1: VngmFidUtGDLWGbawxSIDHA1Rh0.crl (hash: 2kYsFovOgGfsNWnrzbMR2wMYnklg1hW+s0Qsxn73EoM=)
                          2: DFDEC4D007A411EFAB20A473C4F9AE02.roa (hash: Fo6G42v/BxJaM+8hXE5j5ItHaeTwpSb0xNKMz1Q9O28=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.crl
                          rsync://rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VngmFidUtGDLWGbawxSIDHA1Rh0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 04:39:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 388 (0x184)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D9B8, serialNumber=567826162754B460CB5866DAC314880C7035461D
        Validity
            Not Before: May 11 04:39:07 2026 GMT
            Not After : May 18 04:39:07 2026 GMT
        Subject: CN=6a015d6c-ba87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:26:91:19:38:47:27:1e:88:17:33:bd:b3:63:
                    95:05:00:78:2a:52:26:44:56:f6:75:ba:84:c8:69:
                    d5:7f:27:13:ca:fa:f3:a8:0c:b7:42:b2:72:9e:dd:
                    0a:47:0b:b0:55:43:a9:16:e3:da:e1:b1:5f:0f:aa:
                    92:1d:f4:a4:17:74:92:98:e7:ac:47:2d:4c:4c:dd:
                    5d:cd:3a:4e:f5:11:bd:1b:f6:f7:23:77:98:8f:34:
                    0b:53:e3:d1:21:db:9b:73:ff:f3:4b:31:07:ed:f1:
                    02:d7:33:32:97:95:ce:18:cf:44:9f:c0:68:cf:df:
                    c9:3d:46:02:29:f8:3f:fd:6f:4e:29:6f:13:74:11:
                    b1:98:11:b9:66:9b:a4:fb:02:dd:81:c3:07:00:99:
                    b5:8c:96:73:77:09:f5:f1:9b:00:42:74:29:24:1c:
                    91:6d:a5:6b:dd:72:65:b5:f6:26:6f:7b:46:d0:01:
                    21:4a:14:3e:3e:37:4f:17:a0:ca:2b:05:c3:cf:c8:
                    09:3c:bf:02:77:68:64:43:20:cf:90:e5:b6:ae:db:
                    6a:dc:f0:d6:f7:e7:cc:13:ae:51:ca:3e:66:37:94:
                    35:43:c7:7b:ff:bd:08:8d:c5:86:15:1a:0e:14:81:
                    fe:2f:b1:b2:a0:c9:27:39:20:89:86:1d:8e:87:a2:
                    bc:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:E7:5E:4C:D4:4B:BD:5A:3A:66:13:3A:83:66:28:1B:31:A2:40:40
            X509v3 Authority Key Identifier:
                keyid:56:78:26:16:27:54:B4:60:CB:58:66:DA:C3:14:88:0C:70:35:46:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VngmFidUtGDLWGbawxSIDHA1Rh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:1e:07:1b:a8:03:cb:96:0d:67:ea:cc:57:6d:88:80:de:a2:
         e5:ed:d6:25:78:4b:5d:f1:a8:7b:24:f4:e6:35:37:c4:c3:d1:
         99:76:42:51:7f:45:5b:23:aa:3d:c3:b7:1a:7e:37:7c:9b:8f:
         2f:c0:45:8a:7a:47:ff:13:8a:e5:30:77:20:04:21:66:f4:a5:
         29:c1:d4:e5:4f:90:a7:2d:f2:37:f0:34:45:51:d4:7f:4c:61:
         42:33:f4:40:5e:bc:5b:9f:38:33:01:61:7a:4f:90:8b:c9:45:
         c3:d1:79:be:4e:92:e8:79:32:0f:68:e7:99:41:9f:1e:ec:c9:
         fa:4d:b2:a0:b4:7b:91:b4:57:97:19:6c:21:db:9f:f5:85:38:
         58:7e:9d:1d:0b:a4:fd:f3:ea:68:73:e3:1d:95:80:12:27:6a:
         e0:91:44:f5:6d:3a:99:36:51:17:5b:14:fb:50:59:56:b8:a8:
         1f:d3:1f:43:9c:a1:48:7a:36:4e:31:8e:a9:46:2e:9e:b1:93:
         ec:e4:c2:10:5f:18:51:55:03:50:24:40:99:12:e6:35:42:22:
         e1:84:d5:ea:2a:5a:d3:78:95:84:27:f9:15:81:c9:31:b4:fd:
         1d:48:1f:1f:b8:86:77:29:31:b9:1a:61:9f:0f:e6:3d:61:92:
         0c:0d:44:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:33:01 2026 by rpki-client