Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB782/9FEDCF5C979B11EE989E600AC4F9AE02/VrZbgJ9dqzpasVfKBXn9jhbtz7M.mft
File:                     VrZbgJ9dqzpasVfKBXn9jhbtz7M.mft (raw, json)
Hash identifier:          5SY/QmvMw+HIMiEkZhJnd6/j9/KM6xiwh7xqquSviiM=
Subject key identifier:   BC:F1:BF:17:04:1A:AF:A2:19:09:81:64:B5:4C:11:D7:AE:A0:21:BF
Authority key identifier: 56:B6:5B:80:9F:5D:AB:3A:5A:B1:57:CA:05:79:FD:8E:16:ED:CF:B3
Certificate issuer:       /CN=A91DB782/serialNumber=56B65B809F5DAB3A5AB157CA0579FD8E16EDCFB3
Certificate serial:       01B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrZbgJ9dqzpasVfKBXn9jhbtz7M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB782/9FEDCF5C979B11EE989E600AC4F9AE02/VrZbgJ9dqzpasVfKBXn9jhbtz7M.mft
Manifest number:          01AF
Signing time:             Wed 25 Mar 2026 03:20:16 +0000
Manifest this update:     Wed 25 Mar 2026 03:20:15 +0000
Manifest next update:     Wed 01 Apr 2026 03:20:15 +0000
Files and hashes:         1: VrZbgJ9dqzpasVfKBXn9jhbtz7M.crl (hash: 4I9V5I98LnvjLjeO7RnR8BqKHr1AATmhplhGe3CJD4s=)
                          2: F4DE3470979B11EE901E210BC4F9AE02.roa (hash: uh3v+tXZ5CV11nNBlZQNgVZJkLpk2GUX+vz4RvQ2aO8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB782/9FEDCF5C979B11EE989E600AC4F9AE02/VrZbgJ9dqzpasVfKBXn9jhbtz7M.crl
                          rsync://rpki.apnic.net/member_repository/A91DB782/9FEDCF5C979B11EE989E600AC4F9AE02/VrZbgJ9dqzpasVfKBXn9jhbtz7M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrZbgJ9dqzpasVfKBXn9jhbtz7M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:20:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 436 (0x1b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB782, serialNumber=56B65B809F5DAB3A5AB157CA0579FD8E16EDCFB3
        Validity
            Not Before: Mar 25 03:20:15 2026 GMT
            Not After : Apr  1 03:20:15 2026 GMT
        Subject: CN=69c35470-8c83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e9:f1:5f:d7:96:c1:44:7a:8b:d3:8f:8c:89:
                    f3:4a:88:b3:a4:2f:49:d5:02:79:89:82:a4:47:4a:
                    2d:ae:b0:3d:95:83:df:0d:a6:1a:c0:b2:07:88:29:
                    2a:d9:66:5f:2c:e8:71:a9:5c:10:b3:ff:d9:28:c2:
                    d4:bf:83:bb:1f:d8:e7:96:a6:ba:57:b6:08:7c:45:
                    0c:52:84:b0:e5:22:bf:e2:38:5d:b4:83:d2:d0:6e:
                    06:1c:0a:cd:86:16:24:56:fc:a5:86:a3:ac:e4:e1:
                    e4:f2:4c:eb:0b:c4:20:5a:13:93:d6:9a:f2:1a:ef:
                    91:58:e4:35:a0:52:c7:d5:27:8c:b6:84:e1:97:2c:
                    27:af:af:f1:e6:6f:59:94:5b:ea:c0:20:26:a9:8a:
                    b5:e6:1a:b1:0f:f5:8a:3a:f5:90:c3:6a:cf:68:2b:
                    c0:d8:5b:33:f6:e9:15:61:c3:49:3b:04:09:66:0a:
                    46:d9:74:7b:f5:da:6a:ea:8a:c9:e8:59:ca:24:5c:
                    29:c5:4e:73:b2:56:d7:19:e1:56:87:97:91:3d:e4:
                    c6:7f:10:bf:af:67:7a:ff:18:26:eb:6a:f9:ba:4e:
                    a6:69:ac:69:4c:e2:01:56:89:65:c3:0e:0c:0e:f6:
                    56:b7:8e:b2:5c:fb:ef:19:2e:66:28:ee:13:67:09:
                    5c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:F1:BF:17:04:1A:AF:A2:19:09:81:64:B5:4C:11:D7:AE:A0:21:BF
            X509v3 Authority Key Identifier:
                keyid:56:B6:5B:80:9F:5D:AB:3A:5A:B1:57:CA:05:79:FD:8E:16:ED:CF:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB782/9FEDCF5C979B11EE989E600AC4F9AE02/VrZbgJ9dqzpasVfKBXn9jhbtz7M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrZbgJ9dqzpasVfKBXn9jhbtz7M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB782/9FEDCF5C979B11EE989E600AC4F9AE02/VrZbgJ9dqzpasVfKBXn9jhbtz7M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:b1:14:4f:f2:fb:f8:84:80:64:1d:bd:db:1b:49:db:30:a2:
         34:5c:c7:6a:94:df:1b:a3:3e:ed:28:16:fd:4e:76:95:7b:d3:
         fb:3d:db:46:27:75:59:7c:37:72:22:d3:a7:66:38:68:4d:df:
         c1:f7:59:24:5b:7f:6b:b7:1e:72:b5:5e:f1:25:d9:ee:0e:95:
         5b:54:e7:b6:34:36:e1:60:b6:15:8b:35:a9:f9:4c:f0:88:ca:
         12:a3:45:32:8a:16:8d:7f:05:d6:df:35:c8:d7:cc:0f:07:bf:
         e6:92:b0:d7:c5:fd:b7:9a:7d:90:c2:54:cf:d8:ec:1f:fd:a1:
         03:44:64:94:3a:76:66:b3:49:c3:31:9e:07:35:a0:6a:34:23:
         c9:d4:3b:d1:16:fd:f8:bc:9a:0a:84:33:3c:3d:dd:ac:07:8e:
         89:9f:f1:09:9c:c5:2e:4c:e6:93:c1:90:33:3c:87:2f:e1:9e:
         fd:65:2e:7c:d1:59:ed:ec:11:6c:fc:25:4e:1c:d1:7f:be:93:
         16:38:c3:6e:26:ed:ab:f6:94:c7:19:4b:e6:d0:9f:9c:20:32:
         46:98:14:34:60:0a:cf:23:3e:59:d9:9d:e0:ea:3e:72:7b:f2:
         a9:d5:66:fc:31:48:85:7c:42:2c:ac:b3:ba:9d:f1:c8:f1:9f:
         90:a0:91:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:54:57 2026 by rpki-client