Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft
File:                     vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft (raw, json)
Hash identifier:          z/noexLtDJ2ZFAkqGuECcz7DqBRu3TI/X2lNnPcu77g=
Subject key identifier:   CC:27:0F:F4:17:9B:A0:C4:28:B6:1F:08:81:8E:3D:69:A3:DE:8E:EC
Authority key identifier: BD:79:AC:76:40:C9:55:C4:35:C8:CF:55:C2:91:F1:22:B7:0E:2F:99
Certificate issuer:       /CN=A919F026/serialNumber=BD79AC7640C955C435C8CF55C291F122B70E2F99
Certificate serial:       0169
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft
Manifest number:          0154
Signing time:             Fri 13 Nov 2026 05:39:41 +0000
Manifest this update:     Fri 13 Nov 2026 05:39:40 +0000
Manifest next update:     Fri 20 Nov 2026 05:39:40 +0000
Files and hashes:         1: vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl (hash: ezNOwVipl3GxQLcCQagSi8vQnsoM63K8I9vX1JBI1a4=)
                          2: 563F3D581F3C11F09F3C7F40C4F9AE02.roa (hash: jqaS9O87XNAGjnOYKmiPW3sMHJfZOBNM9M+7d9FRgko=)
                          3: 362EF79CFB2911EF8C103876C4F9AE02.roa (hash: 8z/uFEi8kY2kZUp/2Uo+wdZpbnZaPl9Z3nq0shxq+HU=)
                          4: 6E68E3C8A05811F0B1978E4CC4F9AE02.roa (hash: xZAQVFBAuCRw9GeATu83PkDRuX+f5O+jwXu5MsByzpg=)
                          5: 3FCB43D2FB2911EF8A116D76C4F9AE02.roa (hash: TuXiY2w3e6zPpHWMMfGIh2+FsQ77W0kNYmMVPhTnzXc=)
                          6: 07E3560E707B11F08CCE202CC4F9AE02.roa (hash: qfuU9QdlAgNGEyETXyG5+zUSOsPh9QDRT3yT/b7upmM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl
                          rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Nov 2026 05:39:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 361 (0x169)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F026, serialNumber=BD79AC7640C955C435C8CF55C291F122B70E2F99
        Validity
            Not Before: Nov 13 05:39:40 2026 GMT
            Not After : Nov 20 05:39:40 2026 GMT
        Subject: CN=6af6a29d-f7b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:42:70:0a:b6:f7:2d:ae:4f:e7:64:3e:6f:9c:
                    d7:a5:8e:b1:7d:e7:71:43:fd:6a:dd:e5:06:04:cf:
                    8d:fc:b7:5c:26:c9:3e:5c:55:9e:3d:6b:75:ea:ce:
                    53:dd:c1:b3:d7:3e:d9:ba:74:f0:13:d0:a4:51:aa:
                    b9:d6:8c:dc:29:df:1d:cc:8c:4b:aa:8f:54:ba:02:
                    12:30:d9:eb:d8:5d:08:53:cb:45:c4:44:84:ab:0d:
                    36:93:95:27:5f:0c:6f:4c:e7:4b:cb:2b:be:10:1f:
                    2e:62:1f:99:16:48:e9:26:b2:c7:2d:16:e7:f9:b5:
                    4d:cc:77:ca:96:fd:cd:84:84:6e:7a:45:b7:e9:2d:
                    14:48:81:ec:fd:e2:8f:7c:32:78:43:5a:61:a4:a2:
                    2d:06:b3:c3:7c:4d:2c:69:bf:e4:24:13:90:65:22:
                    3f:91:34:51:f0:57:8e:ed:45:22:eb:83:0d:6f:f0:
                    e1:f4:69:e1:09:54:31:62:32:24:28:40:17:77:e3:
                    ee:31:71:75:86:28:3b:31:fb:6f:ff:61:25:b7:f4:
                    0a:fa:a9:25:dc:a0:66:85:3d:ad:a7:0a:a6:47:49:
                    11:3b:76:84:86:f5:9b:1e:bb:36:eb:05:4d:36:8a:
                    1a:b3:e8:d9:b7:75:df:bf:ea:8d:a5:39:ab:be:9d:
                    0b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:27:0F:F4:17:9B:A0:C4:28:B6:1F:08:81:8E:3D:69:A3:DE:8E:EC
            X509v3 Authority Key Identifier:
                keyid:BD:79:AC:76:40:C9:55:C4:35:C8:CF:55:C2:91:F1:22:B7:0E:2F:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:9b:40:81:e7:15:98:74:bf:18:8c:3c:5a:2b:53:74:f5:fe:
         57:cc:dd:a4:5d:ad:50:78:c3:9d:db:af:15:f5:2e:33:a7:f0:
         a5:61:6f:db:75:8e:a9:0b:3d:21:b8:90:f0:a4:f1:64:45:ba:
         14:23:58:7b:8b:ef:ac:41:cc:99:cf:46:f0:44:31:86:fa:89:
         91:ba:ff:22:ed:a0:46:9b:52:b6:87:5e:e6:9a:a1:90:f4:ba:
         8d:e6:54:4a:e2:04:a4:2c:b7:08:a0:33:fc:78:6c:15:2e:62:
         da:7d:b5:ca:82:22:0d:e2:cb:97:ff:a5:e1:01:6c:a2:d7:51:
         ff:22:00:19:99:2c:a7:d3:43:e8:20:f5:46:83:4c:de:56:88:
         99:cd:64:e9:e8:17:2f:b6:3f:0e:91:21:c2:1e:3c:94:c0:49:
         a8:81:9d:50:26:60:2a:bb:ba:cb:fa:84:2e:15:70:d9:07:36:
         d4:b9:60:00:a7:c0:3a:09:07:43:86:f8:bf:8e:f7:19:8f:93:
         fc:48:a7:5a:39:f0:aa:c6:7a:24:26:ad:35:35:a8:ae:d5:89:
         96:78:55:c4:32:34:e2:57:29:d0:f5:f8:d2:ea:ee:2f:87:40:
         aa:26:34:e5:ba:7c:28:8b:e9:5b:a2:56:d8:a0:e7:a8:0b:14:
         e9:17:2e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:38:46 2026 by rpki-client