Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft
File:                     Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft (raw, json)
Hash identifier:          +76DDAIBQ1YhyDQmiXWiqEIXciTjbtNKtA0T7wROYi4=
Subject key identifier:   C7:AA:B6:86:76:0E:93:25:B0:24:25:B0:E4:4B:B1:82:77:D1:71:24
Authority key identifier: 56:AF:1C:D0:B4:E0:7D:00:0C:64:AB:01:6C:33:F7:86:A0:DD:90:FA
Certificate issuer:       /CN=A914F22A/serialNumber=56AF1CD0B4E07D000C64AB016C33F786A0DD90FA
Certificate serial:       141A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft
Manifest number:          1410
Signing time:             Sat 04 Apr 2026 16:48:40 +0000
Manifest this update:     Sat 04 Apr 2026 16:48:40 +0000
Manifest next update:     Sat 11 Apr 2026 16:48:40 +0000
Files and hashes:         1: Vq8c0LTgfQAMZKsBbDP3hqDdkPo.crl (hash: jOyqv36U87i3zsfuDpuqA5xcu3cWqln27x4cSCxpL7I=)
                          2: 8B2E3BA270BD11ED970C535FC4F9AE02.roa (hash: pZDso9pRkBCdjYnQayG6F+mIDGdpaJlOt1WudQ6yZcY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.crl
                          rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 16:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5146 (0x141a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914F22A, serialNumber=56AF1CD0B4E07D000C64AB016C33F786A0DD90FA
        Validity
            Not Before: Apr  4 16:48:40 2026 GMT
            Not After : Apr 11 16:48:40 2026 GMT
        Subject: CN=69d140e8-6122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2a:91:a4:49:73:18:09:b8:6d:1e:e2:83:24:
                    3e:33:e7:35:56:26:e2:b1:12:27:5d:ca:f8:64:3d:
                    63:32:23:16:c5:b1:9d:c1:a9:2a:30:06:a0:0d:e6:
                    7d:67:e0:d0:a6:5b:d5:3d:9f:76:87:92:ed:f7:10:
                    1d:72:f5:4d:f2:b9:55:a7:07:21:32:34:a9:ef:f3:
                    55:70:07:e2:40:2b:eb:38:7c:04:34:ab:f1:02:e4:
                    fe:ef:47:27:43:fe:89:19:f5:e9:18:92:a3:b4:da:
                    17:9a:58:a5:2e:c9:14:4d:86:49:90:13:10:91:27:
                    b3:d6:b3:6c:89:3a:d4:76:25:03:4c:ab:4e:5d:31:
                    56:8c:e7:36:f0:f0:7d:d4:52:85:77:0d:40:fa:87:
                    23:eb:e7:00:ba:e5:f1:03:9b:71:4e:03:76:13:69:
                    6d:2e:b3:f6:eb:7d:63:d5:fe:d8:2e:01:f9:73:46:
                    16:02:5c:58:a9:85:50:63:36:c6:63:39:a8:9c:b0:
                    dd:69:f1:58:48:a4:15:dc:b7:b1:2e:ea:ab:37:c9:
                    0b:7a:3a:fa:09:5f:bc:b6:e4:5c:9c:c7:4f:bd:a0:
                    ca:81:15:5c:07:e4:e6:2a:15:74:51:93:01:17:72:
                    78:77:04:60:34:00:49:dc:28:61:3f:90:c8:1d:9e:
                    d3:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:AA:B6:86:76:0E:93:25:B0:24:25:B0:E4:4B:B1:82:77:D1:71:24
            X509v3 Authority Key Identifier:
                keyid:56:AF:1C:D0:B4:E0:7D:00:0C:64:AB:01:6C:33:F7:86:A0:DD:90:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:9f:38:14:1f:c9:3e:07:a6:2b:c2:fe:be:11:d9:3a:15:cd:
         8a:9b:19:38:a5:77:4f:13:8e:e5:64:d1:83:ed:cc:5a:b5:65:
         31:49:2e:39:05:1d:ec:29:bd:30:64:2f:36:12:dc:94:ee:37:
         52:67:40:ca:3f:77:23:24:5c:18:45:c1:c7:c7:04:d3:5f:f5:
         f6:41:84:85:e6:2c:ef:18:fd:ee:df:c0:8b:27:95:20:b6:97:
         cf:ff:d3:a3:8c:91:51:1b:ba:e5:b3:f7:1c:83:de:01:d9:6d:
         8e:63:b2:fe:96:d4:0e:4f:3c:85:a0:31:4a:c4:a0:d8:18:3a:
         b5:69:a0:02:69:f9:6e:4d:de:06:4d:91:f1:42:21:e1:3f:9b:
         4a:03:1f:61:08:a2:37:a5:65:bc:f8:05:77:5b:33:57:c0:b7:
         f1:4d:c7:2d:70:f5:b4:db:08:ea:fb:07:43:33:00:1b:2b:e5:
         31:fc:3f:90:9a:34:bd:d8:4b:ac:f3:98:53:50:27:45:1d:16:
         ed:a2:47:df:db:a5:dd:b9:de:8e:9e:3b:c4:46:78:b1:7b:00:
         bc:95:81:a5:13:05:54:a4:3f:8e:e6:a4:d1:4c:19:a5:e1:65:
         1d:8e:a3:58:3e:54:a8:46:c0:72:9e:86:07:63:d2:13:cd:84:
         5f:99:87:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:58:58 2026 by rpki-client