Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.mft
File:                     vj-BOyAv-wo4L3N5aO4WZZjg6Ks.mft (raw, json)
Hash identifier:          80elyx4vTj4ZlfUz7j+4WonJYThFnC/q6nbEt81KsVg=
Subject key identifier:   72:2A:23:61:8D:0A:AF:DD:48:2B:2A:79:0A:20:96:3A:0D:3D:53:1D
Authority key identifier: BE:3F:81:3B:20:2F:FB:0A:38:2F:73:79:68:EE:16:65:98:E0:E8:AB
Certificate issuer:       /CN=A91911EB/serialNumber=BE3F813B202FFB0A382F737968EE166598E0E8AB
Certificate serial:       0150
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.mft
Manifest number:          0132
Signing time:             Wed 25 Mar 2026 04:53:03 +0000
Manifest this update:     Wed 25 Mar 2026 04:53:02 +0000
Manifest next update:     Wed 01 Apr 2026 04:53:02 +0000
Files and hashes:         1: vj-BOyAv-wo4L3N5aO4WZZjg6Ks.crl (hash: B0yUsXwIoyvKNNkec3iG4k40+bgSN+PhN13Lx2OV4H0=)
                          2: 9BC7782069A911EFBF66800FC4F9AE02.roa (hash: knt7irIZo9twPxD1Pikiqoy5FaLT8EiXJ3Jv+72SYpg=)
                          3: 4978358A70E011EF8CDC2330C4F9AE02.roa (hash: cejRFVc4y83A1VT7ywB4hcjvKqoG46ZgbTYAxTBcrgI=)
                          4: 9CF17DD669A911EFBF66800FC4F9AE02.roa (hash: 0BG+Jz5cTYExQclSKUIrj8rN4X954hpOC9So/bzasFQ=)
                          5: 9C594FD469A911EFBF66800FC4F9AE02.roa (hash: nMPaP0I0C9Cb95MJ00respJ+zerHJo0kMcvE2pYeSio=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.crl
                          rsync://rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 336 (0x150)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91911EB, serialNumber=BE3F813B202FFB0A382F737968EE166598E0E8AB
        Validity
            Not Before: Mar 25 04:53:02 2026 GMT
            Not After : Apr  1 04:53:02 2026 GMT
        Subject: CN=69c36a2f-7c4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c0:24:d0:ee:93:b2:a7:47:1a:ed:fd:4e:23:
                    26:87:8d:20:41:01:3b:9b:40:de:8e:97:c6:24:93:
                    0d:ec:ca:1b:0a:c7:d2:24:ec:72:ae:83:ad:1e:74:
                    13:2e:48:2e:59:08:01:7c:05:13:ae:88:e5:cb:ea:
                    2d:63:e5:51:4f:0a:55:c4:44:ec:bf:05:78:ea:b1:
                    8d:0f:cb:c9:ad:27:94:d7:bc:6f:96:22:fa:44:47:
                    73:ae:1b:84:09:b7:b1:12:52:8d:c9:22:fb:32:5f:
                    85:4e:73:bb:07:b6:dd:d0:26:bf:16:56:c2:41:25:
                    c0:c6:d5:3f:e8:cc:62:9f:2b:b1:8d:00:14:5c:34:
                    86:8a:f5:be:13:f2:93:fe:0a:99:ef:07:53:f3:4b:
                    f0:bd:b6:56:ba:fa:ad:26:f1:56:0f:9c:21:52:46:
                    74:6b:64:72:db:45:3e:38:c4:56:58:6d:10:0e:e3:
                    47:04:df:37:38:4c:64:32:81:04:1f:28:aa:62:ef:
                    3b:ca:55:1e:45:2a:84:00:4b:04:52:fe:15:2b:d8:
                    ec:ce:bd:14:92:a7:41:4e:6b:bd:67:0f:fa:a0:d2:
                    22:bb:02:4a:27:de:91:14:22:c5:70:03:41:5f:8d:
                    de:1f:31:be:29:5d:59:39:14:b9:46:39:4f:35:e3:
                    33:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:2A:23:61:8D:0A:AF:DD:48:2B:2A:79:0A:20:96:3A:0D:3D:53:1D
            X509v3 Authority Key Identifier:
                keyid:BE:3F:81:3B:20:2F:FB:0A:38:2F:73:79:68:EE:16:65:98:E0:E8:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:49:1d:4a:52:fb:f2:c9:b3:58:e9:36:00:73:8e:56:e9:e8:
         7b:cb:13:ec:4d:35:31:50:d4:93:d5:af:27:20:eb:63:14:91:
         4a:63:1a:34:ac:e8:62:ad:59:2b:67:89:f9:31:ea:83:5c:7b:
         07:a5:84:0e:98:38:bc:a3:a4:fd:4d:b8:93:d9:4e:68:12:70:
         92:b4:32:91:66:5b:0e:24:21:ed:bf:0a:07:b4:54:0d:95:68:
         6d:7e:ee:82:2e:c2:b3:86:81:28:5f:ed:61:1e:39:1d:c8:85:
         c5:03:1b:f6:7a:a4:a4:a7:a3:37:71:34:d6:b6:53:b4:c9:f6:
         ca:fe:27:f2:fc:62:0e:5d:ba:2c:6f:d8:0e:58:47:09:4a:21:
         cd:f4:91:f6:3a:34:16:14:e5:23:45:aa:a5:f6:fe:9a:ca:14:
         36:2c:b4:f5:5f:3b:de:ff:c7:11:96:4f:b4:7f:86:b6:10:9c:
         43:f9:ab:2a:d3:95:d2:74:5d:a9:7c:69:3b:f8:21:94:64:18:
         67:98:e0:23:20:fa:44:bd:57:5f:95:03:3e:09:d4:53:f8:c2:
         e6:33:3b:dd:62:2f:05:23:3d:5c:65:37:a9:cd:c6:3c:eb:42:
         42:bc:f0:be:64:5c:21:27:89:70:05:04:6d:aa:35:71:eb:6b:
         98:88:bc:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:14:53 2026 by rpki-client