Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft
File:                     VQWhoodm2zGCLEYVhuaO3fKnk_o.mft (raw, json)
Hash identifier:          EkEFkqO2ZU6DSBJNGkM49ng6KhxJbpiCnKuBQnGpDn8=
Subject key identifier:   D7:8C:E9:41:E4:75:20:C7:1C:6F:A1:AB:2C:45:58:D6:0A:DD:98:7D
Authority key identifier: 55:05:A1:A2:87:66:DB:31:82:2C:46:15:86:E6:8E:DD:F2:A7:93:FA
Certificate issuer:       /CN=A91850AD/serialNumber=5505A1A28766DB31822C461586E68EDDF2A793FA
Certificate serial:       0139
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQWhoodm2zGCLEYVhuaO3fKnk_o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft
Manifest number:          012D
Signing time:             Wed 25 Mar 2026 04:50:24 +0000
Manifest this update:     Wed 25 Mar 2026 04:50:24 +0000
Manifest next update:     Wed 01 Apr 2026 04:50:24 +0000
Files and hashes:         1: VQWhoodm2zGCLEYVhuaO3fKnk_o.crl (hash: qGhMVEGwPuVauOZZpzpoty5WVJbbOfg42uqa3pxSykQ=)
                          2: 95737270643711EFBCD1344AC4F9AE02.roa (hash: FhlQPzHqzyHEsTCRhj+QxZMQM2lLAuEx3Q/b46+pZ5E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.crl
                          rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQWhoodm2zGCLEYVhuaO3fKnk_o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:50:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 313 (0x139)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91850AD, serialNumber=5505A1A28766DB31822C461586E68EDDF2A793FA
        Validity
            Not Before: Mar 25 04:50:24 2026 GMT
            Not After : Apr  1 04:50:24 2026 GMT
        Subject: CN=69c36990-fe09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d2:8f:72:e9:a9:41:86:74:b8:b3:41:ec:3e:
                    37:4f:02:d0:d7:9c:42:a4:ef:ad:3c:6c:1e:15:cd:
                    e3:0f:1f:72:69:41:d2:3e:78:8f:1f:76:4b:61:63:
                    c2:7b:ce:21:fa:8b:93:71:92:96:a2:61:fd:95:a3:
                    c9:aa:4a:bd:4b:66:dd:20:f4:a4:b9:3a:a2:87:b0:
                    89:00:77:aa:11:d8:fa:d2:20:3c:7d:57:b6:9f:0e:
                    34:31:1b:d1:89:f2:d1:fb:1f:26:9a:c1:db:a2:67:
                    d9:08:f0:53:bf:29:f7:aa:79:5a:d8:ee:a8:b5:a7:
                    97:e0:46:d0:41:4b:e8:ea:05:6d:9b:12:7b:b6:e9:
                    b3:7a:37:80:bf:12:77:be:2a:b4:8b:4e:8b:ab:41:
                    a4:83:8f:ec:9d:b7:85:13:0b:6b:85:23:f4:27:99:
                    23:5f:50:79:0c:be:9e:c1:a7:20:2d:b8:e1:17:23:
                    98:1a:20:94:32:a5:e7:de:f0:ad:5f:4a:63:7c:04:
                    f0:fc:a2:0d:08:9d:32:03:e6:29:0e:98:24:b6:75:
                    9f:75:16:e3:38:e6:06:a0:60:bc:31:2b:8f:65:27:
                    62:42:82:d7:21:2d:9b:fa:12:00:3f:c6:ab:da:c1:
                    3b:ca:eb:6f:bf:50:bf:1c:98:2d:15:75:f7:3e:d8:
                    99:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:8C:E9:41:E4:75:20:C7:1C:6F:A1:AB:2C:45:58:D6:0A:DD:98:7D
            X509v3 Authority Key Identifier:
                keyid:55:05:A1:A2:87:66:DB:31:82:2C:46:15:86:E6:8E:DD:F2:A7:93:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQWhoodm2zGCLEYVhuaO3fKnk_o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:23:da:72:1f:e8:24:a6:df:5b:e1:0f:30:e1:4e:ca:1d:af:
         aa:f3:16:e8:42:0b:5c:3c:62:19:a4:1c:5b:79:c2:7b:18:82:
         4f:f1:6f:78:67:ba:b0:60:3b:ab:3d:67:97:93:8a:b5:91:eb:
         90:42:57:40:64:a7:62:42:11:25:53:be:9e:bb:7c:20:0f:2c:
         39:23:ea:77:e3:96:b2:a9:7a:c4:22:c9:74:d8:8c:db:3d:49:
         31:a4:a2:90:e2:86:9a:bc:7b:63:c2:b8:ea:6c:4f:13:76:b8:
         08:d5:ef:e3:7b:ab:f7:99:a1:89:ac:e1:53:ac:ad:99:bb:01:
         7a:f1:28:a7:76:50:ee:00:c3:d1:84:8b:4a:99:be:4d:5f:36:
         c2:05:4b:38:4a:ef:53:f1:9a:14:66:52:10:b7:8c:9a:30:a1:
         56:ac:c0:3b:3c:16:dd:b3:2a:c6:8b:a1:ba:0f:76:fa:9b:3f:
         a1:81:6c:ec:e4:bf:e6:59:b1:4d:7f:b2:2e:18:c6:de:50:5d:
         82:05:65:48:f6:6c:0d:b0:a0:80:32:b5:f9:c5:43:4a:89:4d:
         f4:c5:9d:69:47:b7:83:46:23:9e:39:f1:4b:00:0f:66:97:5f:
         8c:d9:c9:ee:04:78:2e:aa:c5:c7:5d:dc:e8:8b:38:a1:54:48:
         5c:5e:17:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:15:12 2026 by rpki-client