Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft
File:                     Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft (raw, json)
Hash identifier:          OaQyt/ZJvEqUnwuMdgMBJiEkCObm5u4ltlQXf3fPoWM=
Subject key identifier:   F0:51:0D:A3:50:25:A7:5D:43:D9:B5:BB:3C:54:75:80:BA:4C:2B:8F
Authority key identifier: 56:46:E0:7A:0F:60:25:F1:E2:60:F1:C4:99:6F:9A:68:1B:29:20:71
Certificate issuer:       /CN=A91203DC/serialNumber=5646E07A0F6025F1E260F1C4996F9A681B292071
Certificate serial:       221F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vkbgeg9gJfHiYPHEmW-aaBspIHE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft
Manifest number:          220C
Signing time:             Mon 02 Mar 2026 15:56:37 +0000
Manifest this update:     Mon 02 Mar 2026 15:56:37 +0000
Manifest next update:     Mon 09 Mar 2026 15:56:37 +0000
Files and hashes:         1: Vkbgeg9gJfHiYPHEmW-aaBspIHE.crl (hash: X8Gq40s6gKeFdD01QIeUt8hG6hRiJYRhxWuDOV+3464=)
                          2: 1D9DC82A652311EBA8CF3C4CC4F9AE02.roa (hash: HwypahBFkKbW/pB8Pd+gaE4/P/VRHrxmO2AZ+Ty59Ss=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.crl
                          rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vkbgeg9gJfHiYPHEmW-aaBspIHE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:56:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8735 (0x221f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91203DC, serialNumber=5646E07A0F6025F1E260F1C4996F9A681B292071
        Validity
            Not Before: Mar  2 15:56:37 2026 GMT
            Not After : Mar  9 15:56:37 2026 GMT
        Subject: CN=69a5b335-e7af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:34:01:d1:19:c7:a2:10:c6:7b:f6:30:8e:86:
                    3d:80:09:1c:66:9a:b6:f4:05:38:e5:c7:bd:fc:31:
                    6d:bd:24:c0:21:5e:c4:3e:d3:5a:24:a1:0a:6b:fb:
                    87:aa:e0:d1:db:ec:f5:9b:b3:12:49:fb:14:61:ae:
                    97:c5:dc:22:d7:31:8e:e8:bc:98:39:8e:96:c0:15:
                    b3:7c:58:19:e6:8a:f8:9b:e1:64:40:5b:76:cc:47:
                    60:f8:72:1c:be:e3:05:5c:6b:31:1a:c6:ad:8e:b1:
                    d8:cd:63:22:4a:f1:66:98:ca:17:af:c9:59:01:5a:
                    4b:09:d7:dc:e1:c1:02:93:3e:f0:71:a7:4c:27:67:
                    06:6c:1e:71:60:31:bc:dd:70:99:85:d9:7f:af:0c:
                    10:46:9e:f2:ee:c4:bb:db:83:f5:07:25:54:85:09:
                    bc:49:f3:52:30:b9:f3:4c:a6:9c:de:bd:43:b0:77:
                    f5:a7:25:71:ea:3c:b9:50:b1:48:97:5d:7a:70:59:
                    22:1b:c9:cc:c1:27:45:cc:d0:10:36:57:f1:78:9c:
                    63:78:7a:61:68:a3:66:fd:20:2e:bf:b7:f5:67:56:
                    25:8a:a8:6a:97:4c:50:f9:a4:ec:54:3d:2d:8e:4c:
                    63:e3:3b:14:ef:b6:ff:a2:14:21:37:13:54:5c:f5:
                    35:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:51:0D:A3:50:25:A7:5D:43:D9:B5:BB:3C:54:75:80:BA:4C:2B:8F
            X509v3 Authority Key Identifier:
                keyid:56:46:E0:7A:0F:60:25:F1:E2:60:F1:C4:99:6F:9A:68:1B:29:20:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vkbgeg9gJfHiYPHEmW-aaBspIHE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:1d:4a:9e:fb:3f:9f:05:05:19:18:f9:1a:84:96:c2:e9:ea:
         bd:7b:23:00:6e:a1:fd:03:59:47:60:ee:45:97:25:de:7e:20:
         66:81:bb:46:40:af:9b:85:b8:7e:c5:3b:28:a7:4a:16:9c:b4:
         4d:49:43:14:44:53:a3:19:d3:6b:0c:72:3e:93:23:c2:7b:70:
         5e:80:5e:e4:93:f7:4c:06:21:74:7f:07:4d:06:09:ae:30:b0:
         ef:ad:b7:02:06:b4:8a:70:be:7e:9b:4e:62:5e:e1:ad:67:fd:
         d5:fd:b9:cc:30:6f:d9:ed:35:84:cc:22:63:b9:87:f3:79:91:
         ff:b0:aa:ab:25:e0:05:a1:45:ef:a5:f6:73:c9:3f:a0:c5:d8:
         0c:6f:de:c7:4f:a6:ac:4b:65:9f:a0:9b:dc:9b:8a:d1:da:6c:
         ce:6c:a6:33:46:d9:c5:ed:84:b4:a7:f6:13:66:41:29:fc:99:
         d4:b9:5a:81:78:82:46:84:c8:bd:a5:8c:f1:95:37:10:dd:de:
         79:13:e0:63:09:27:bf:e3:90:fa:2f:a3:25:3b:b7:7a:46:78:
         2b:19:de:79:b2:64:f7:65:8c:e5:a4:08:cf:aa:71:b3:b0:c7:
         c2:d9:14:91:2b:7c:74:8b:11:ae:48:f2:64:da:23:3a:f6:0e:
         49:48:4a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 16:05:52 2026 by rpki-client