Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.mft
File:                     VfLp2yg8tFniZmj5Ik8ms6KkRk4.mft (raw, json)
Hash identifier:          vNs5z0DmgmQFtqBa9VyBfMHp1KfFiCvW2PvuXt481Oo=
Subject key identifier:   9B:CB:99:A1:51:FA:45:4A:28:94:59:A7:F1:4D:5E:FF:DB:1A:F2:83
Authority key identifier: 55:F2:E9:DB:28:3C:B4:59:E2:66:68:F9:22:4F:26:B3:A2:A4:46:4E
Certificate issuer:       /CN=A915B878/serialNumber=55F2E9DB283CB459E26668F9224F26B3A2A4464E
Certificate serial:       0640
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLp2yg8tFniZmj5Ik8ms6KkRk4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.mft
Manifest number:          063E
Signing time:             Sat 04 Apr 2026 22:29:41 +0000
Manifest this update:     Sat 04 Apr 2026 22:29:40 +0000
Manifest next update:     Sat 11 Apr 2026 22:29:40 +0000
Files and hashes:         1: VfLp2yg8tFniZmj5Ik8ms6KkRk4.crl (hash: z2UFPOvfjtuXFBxFebgcgHhmQT2cGqmC0FxhPtQ4M2Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.crl
                          rsync://rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLp2yg8tFniZmj5Ik8ms6KkRk4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 22:29:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1600 (0x640)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B878, serialNumber=55F2E9DB283CB459E26668F9224F26B3A2A4464E
        Validity
            Not Before: Apr  4 22:29:40 2026 GMT
            Not After : Apr 11 22:29:40 2026 GMT
        Subject: CN=69d190d5-e0de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:03:cc:24:4e:77:2e:f4:93:8a:0d:ec:a4:95:
                    b2:22:27:93:c0:b4:e3:a7:cc:ff:c2:7f:04:2b:68:
                    90:bf:e0:87:b1:38:9c:cf:ed:b7:2d:d3:70:ca:9a:
                    c2:95:ee:28:74:ac:f8:83:06:5d:d2:6c:99:06:3d:
                    3d:c6:94:9b:dc:db:12:79:8a:24:ea:2f:89:46:7c:
                    75:61:29:5c:10:41:97:3a:5d:35:dc:c7:33:d8:b7:
                    0b:8e:ce:24:07:74:38:20:42:c7:df:8d:08:b3:55:
                    3c:c7:19:f4:01:e1:96:46:1d:08:60:2a:30:c8:9a:
                    b2:48:b3:fa:10:83:5c:1e:46:19:a1:df:fc:a1:06:
                    44:5d:dd:7b:22:1c:2e:4d:b4:03:aa:b9:65:19:de:
                    58:ec:19:54:ef:07:a5:49:40:f1:a8:5b:39:4e:9e:
                    c9:ca:f0:4c:56:a7:0b:69:6a:f0:86:5b:6a:a5:0b:
                    31:2e:d8:44:4b:ba:eb:c7:8e:11:c7:a8:02:c8:0d:
                    33:df:4d:29:3f:a5:f5:96:51:f4:ab:2a:c1:5c:2a:
                    8f:35:e3:e1:1b:8e:d9:5e:67:91:68:28:17:d2:86:
                    ab:eb:db:c0:25:08:a6:1e:ae:32:8f:10:43:52:c6:
                    dd:d6:c1:d7:a2:2e:bc:d1:c9:29:00:4b:3b:c2:99:
                    27:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:CB:99:A1:51:FA:45:4A:28:94:59:A7:F1:4D:5E:FF:DB:1A:F2:83
            X509v3 Authority Key Identifier:
                keyid:55:F2:E9:DB:28:3C:B4:59:E2:66:68:F9:22:4F:26:B3:A2:A4:46:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLp2yg8tFniZmj5Ik8ms6KkRk4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:52:39:57:3e:b9:ff:4b:70:75:34:07:3b:42:f6:0e:a0:d5:
         cd:36:00:a1:10:51:57:10:a0:09:44:0f:57:c5:dd:c1:88:bb:
         e8:2e:4c:91:ec:6c:06:f2:74:c7:8b:e6:53:7a:4a:65:70:18:
         ec:65:5b:f6:96:e0:9f:ad:9d:18:37:65:3a:32:d1:52:4d:f1:
         d1:09:29:e7:2d:33:63:2b:8a:c0:96:4f:43:39:d5:92:72:35:
         4a:21:57:c1:57:9b:42:4b:2b:ea:7b:95:97:5b:72:b0:d5:9c:
         04:ae:c1:f6:6d:08:bc:ba:97:0d:af:a1:b2:9e:4a:cd:44:69:
         87:86:a7:8d:46:dd:48:ac:02:34:46:c7:96:d4:a4:b6:bf:a1:
         9f:a9:a1:4f:c7:1d:e1:a0:44:da:bd:b5:aa:36:60:e4:c2:61:
         13:cf:2a:17:4f:aa:27:71:0f:30:b7:a1:5a:06:c0:f9:98:8b:
         06:45:62:1f:6d:c2:15:34:28:a5:17:66:56:a9:be:be:44:51:
         90:e1:fc:77:e6:a5:98:50:e2:5c:86:3c:ec:ba:bc:02:7f:84:
         2f:a3:51:2a:53:60:3c:bc:44:a0:e2:ac:e8:d0:3b:fc:d5:9b:
         5b:3a:8b:1a:8e:89:a2:f0:52:b5:3e:79:34:65:97:d8:19:df:
         ea:b6:44:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:51:48 2026 by rpki-client