Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/vwxRAalGDasWiyHwJOMMiVoCjEI.mft
File:                     vwxRAalGDasWiyHwJOMMiVoCjEI.mft (raw, json)
Hash identifier:          7BqhEB8rXCjof1egCvxiFBG+xxKTUQh5ImbBaIK2pls=
Subject key identifier:   85:36:8E:09:33:CC:E3:6A:05:5D:6B:85:3F:C2:0B:D8:25:2D:E5:C4
Authority key identifier: BF:0C:51:01:A9:46:0D:AB:16:8B:21:F0:24:E3:0C:89:5A:02:8C:42
Certificate issuer:       /CN=A9180307/serialNumber=BF0C5101A9460DAB168B21F024E30C895A028C42
Certificate serial:       05A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vwxRAalGDasWiyHwJOMMiVoCjEI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/vwxRAalGDasWiyHwJOMMiVoCjEI.mft
Manifest number:          059F
Signing time:             Tue 24 Mar 2026 22:54:03 +0000
Manifest this update:     Tue 24 Mar 2026 22:54:02 +0000
Manifest next update:     Tue 31 Mar 2026 22:54:02 +0000
Files and hashes:         1: vwxRAalGDasWiyHwJOMMiVoCjEI.crl (hash: TGGObqtVTAg6b5sLztdVus8L1OjqS/rA3Fy5eaRWhfo=)
                          2: 15532AC8F8FA11F0B26EB0DA6C6F56BC.roa (hash: kesAUt/HQA4ipo7Esi2FxqX42polhe0gZCmt6LBu7QE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/vwxRAalGDasWiyHwJOMMiVoCjEI.crl
                          rsync://rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/vwxRAalGDasWiyHwJOMMiVoCjEI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vwxRAalGDasWiyHwJOMMiVoCjEI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:54:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1448 (0x5a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180307, serialNumber=BF0C5101A9460DAB168B21F024E30C895A028C42
        Validity
            Not Before: Mar 24 22:54:02 2026 GMT
            Not After : Mar 31 22:54:02 2026 GMT
        Subject: CN=69c3160a-6043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:35:5e:dd:39:cd:bb:47:16:de:ad:0d:51:81:
                    d6:90:58:71:99:e7:10:8a:0c:24:01:21:20:7d:31:
                    24:d4:dc:0d:84:2d:28:43:7d:0b:12:c2:09:4e:21:
                    e4:18:fc:85:f1:9d:8c:ed:7d:ed:1c:20:54:77:98:
                    af:d0:0e:12:7d:d3:ae:61:0a:7e:a4:a7:43:ae:4d:
                    9f:00:2c:0b:48:9c:f6:a0:a3:5a:cf:42:fd:6c:3f:
                    f8:61:4f:f6:ae:38:10:6c:23:f1:e0:cd:dd:f4:5a:
                    2f:40:5c:4f:ec:9f:5a:da:28:d6:57:50:a8:69:38:
                    78:dd:aa:d1:16:01:4f:f0:fc:74:4b:93:89:ac:57:
                    80:0e:56:45:38:a7:1e:e5:37:6c:f9:56:4c:67:01:
                    af:e6:3a:0f:ae:49:e4:15:78:25:f3:fd:c1:e8:e6:
                    59:17:ff:b0:33:7a:3e:f9:d9:1c:25:28:aa:fe:7f:
                    08:99:7b:ab:8c:36:f8:05:bb:d9:c3:38:8b:84:0a:
                    7d:39:34:17:28:43:ca:68:99:11:b1:5d:7c:fe:3a:
                    f7:73:fb:ac:b6:83:24:6f:ad:45:ed:37:13:f0:da:
                    66:03:af:c7:5d:62:fd:66:8a:3a:c1:07:d4:e1:3c:
                    d9:57:98:15:8c:28:dd:ee:59:5b:7a:84:c9:60:a9:
                    07:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:36:8E:09:33:CC:E3:6A:05:5D:6B:85:3F:C2:0B:D8:25:2D:E5:C4
            X509v3 Authority Key Identifier:
                keyid:BF:0C:51:01:A9:46:0D:AB:16:8B:21:F0:24:E3:0C:89:5A:02:8C:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/vwxRAalGDasWiyHwJOMMiVoCjEI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vwxRAalGDasWiyHwJOMMiVoCjEI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/vwxRAalGDasWiyHwJOMMiVoCjEI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:53:4e:2d:89:66:e7:34:e0:66:5f:5a:7c:13:69:b3:f4:66:
         dd:2a:29:1b:12:bc:e5:c0:be:4b:aa:0c:0e:0f:87:07:1f:eb:
         cc:00:1f:15:93:fb:3b:6a:0e:b1:3f:88:ea:3b:0f:04:5f:26:
         6f:04:5c:e2:8c:1d:60:cb:8c:81:b9:c1:88:7f:22:ce:10:e5:
         4c:f2:e6:fa:9b:03:02:fb:c8:9d:fb:f1:95:f7:3b:46:0d:23:
         1b:a3:1c:12:45:18:21:9d:95:25:b9:0b:81:d6:48:5d:dd:98:
         f6:2f:ea:8a:61:45:5b:89:aa:3e:48:c3:98:30:62:1e:1b:57:
         55:9c:8a:c8:a2:98:79:81:e7:f7:36:28:05:ba:36:27:02:3a:
         ba:9d:f9:7f:77:21:a8:98:f9:03:46:f8:5c:7c:8f:e8:da:f9:
         d7:b4:d2:d7:d8:8e:62:f6:81:e3:5b:c5:40:26:b5:c6:ae:15:
         1a:dd:1a:51:19:9b:c5:6b:93:fd:9d:6f:16:49:08:4a:5b:ec:
         eb:cd:1a:4d:23:00:71:0c:0f:68:6d:d4:2c:a9:19:bb:c6:98:
         53:56:eb:07:84:ab:da:2d:a1:1b:b8:f5:2a:c5:78:da:ca:89:
         45:9b:7c:37:9d:fe:1d:dd:f6:ef:6c:63:0b:77:98:e5:68:28:
         70:85:f0:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:02:53 2026 by rpki-client