Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.mft
File:                     vUxEHwLHrdQvpiQugzHZP1nlGDo.mft (raw, json)
Hash identifier:          0xoc2lUMKBXVG6xxQJqJUtcqiaYZCGXa1OqxWej8vfM=
Subject key identifier:   C7:92:7D:60:8A:31:FD:5E:AB:B3:3B:9F:57:A8:4A:91:73:88:31:77
Authority key identifier: BD:4C:44:1F:02:C7:AD:D4:2F:A6:24:2E:83:31:D9:3F:59:E5:18:3A
Certificate issuer:       /CN=A91C67F9/serialNumber=BD4C441F02C7ADD42FA6242E8331D93F59E5183A
Certificate serial:       0277
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUxEHwLHrdQvpiQugzHZP1nlGDo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.mft
Manifest number:          0269
Signing time:             Wed 25 Mar 2026 01:38:10 +0000
Manifest this update:     Wed 25 Mar 2026 01:38:10 +0000
Manifest next update:     Wed 01 Apr 2026 01:38:10 +0000
Files and hashes:         1: vUxEHwLHrdQvpiQugzHZP1nlGDo.crl (hash: t+EAFVjYQ/oqnz/ZXZFTbNkneXWcu3FSYcqcr+/hu+E=)
                          2: 7A5433D6A37811F083057A2CC4F9AE02.roa (hash: FANmQvsw9bCwAwyqdXDJrppPXNeZUQEnf9l9y1Ou+Zc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.crl
                          rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUxEHwLHrdQvpiQugzHZP1nlGDo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:38:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 631 (0x277)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C67F9, serialNumber=BD4C441F02C7ADD42FA6242E8331D93F59E5183A
        Validity
            Not Before: Mar 25 01:38:10 2026 GMT
            Not After : Apr  1 01:38:10 2026 GMT
        Subject: CN=69c33c82-f987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:09:07:57:26:84:40:96:50:da:4e:1d:fd:14:
                    42:62:d8:ee:a2:bc:bc:08:51:1d:4c:ac:98:cd:c4:
                    f0:9b:c7:e3:18:3e:fe:f6:34:e8:97:6f:e3:78:2c:
                    ce:f1:54:74:52:2f:d8:34:71:ba:d5:67:a0:4e:38:
                    80:6c:16:a8:6d:c1:b1:b6:37:e6:2f:b0:0c:c0:c7:
                    b6:39:a5:21:92:f0:c6:21:61:91:db:55:85:f5:e9:
                    e5:e8:f9:a9:10:fc:3c:13:af:a1:e7:06:29:95:e9:
                    6f:14:5d:21:1c:50:67:18:af:3e:63:6d:e6:29:31:
                    2b:0d:ed:23:88:da:c9:da:83:54:4d:83:7a:1b:b5:
                    9c:41:9e:90:b7:2b:e7:db:cd:af:b3:41:da:62:6c:
                    a2:09:2f:b8:b7:f7:42:5c:b2:c2:37:12:12:37:c2:
                    9b:0b:ea:02:ee:59:db:04:01:f3:85:9a:52:50:9f:
                    f4:f4:39:8b:d3:dd:d1:c6:e3:03:4a:c6:5b:fc:9a:
                    fe:8b:4f:ff:b0:27:79:3a:0c:34:c6:ae:eb:32:9c:
                    c9:c3:53:96:a6:e0:19:6a:fe:ef:53:07:2b:56:84:
                    77:1f:04:80:fc:a6:26:56:26:5e:c6:f6:80:b1:f8:
                    87:67:57:fb:66:d9:b6:ba:15:98:2d:b2:aa:e3:97:
                    ec:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:92:7D:60:8A:31:FD:5E:AB:B3:3B:9F:57:A8:4A:91:73:88:31:77
            X509v3 Authority Key Identifier:
                keyid:BD:4C:44:1F:02:C7:AD:D4:2F:A6:24:2E:83:31:D9:3F:59:E5:18:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUxEHwLHrdQvpiQugzHZP1nlGDo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:c7:d6:ab:97:59:66:be:ba:b5:96:08:04:c6:ef:2a:d5:03:
         25:2a:96:c1:83:dc:9b:c1:12:b4:ff:b8:86:b5:c1:82:51:77:
         11:79:ba:d6:58:26:50:d3:e7:c2:16:05:82:61:84:43:be:be:
         04:69:75:d5:5b:70:2f:eb:24:5a:18:73:51:3d:8a:7a:91:8c:
         b9:2a:39:1e:34:35:2a:f1:ad:02:cd:39:cf:c9:7a:0a:69:75:
         fc:6e:4d:99:9a:4a:d8:81:e7:a3:07:b1:f2:c1:58:d0:a8:6f:
         ae:0e:0a:6b:f0:15:28:7b:89:53:52:80:2b:d0:60:fd:69:14:
         44:46:43:b0:0c:09:fd:c3:45:e1:a8:d1:b5:7e:5a:81:41:a4:
         be:79:e5:ba:d4:fa:44:92:07:c7:1d:f0:15:9d:1a:91:95:bf:
         09:42:d2:93:b5:61:e3:a2:1d:64:90:e3:f3:e8:24:3a:cd:b1:
         64:bd:5e:51:29:79:26:61:36:28:22:40:99:10:36:1f:a4:3b:
         e3:53:94:22:0a:01:81:d9:aa:95:29:15:81:7f:79:72:24:ec:
         75:de:1f:df:b9:a5:9c:7e:c1:f0:6a:c0:aa:08:40:de:e3:be:
         ad:bb:14:33:90:2f:44:10:4b:fe:5d:15:8a:53:27:ab:47:d0:
         84:e6:0a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:25:48 2026 by rpki-client