Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.mft
File:                     VKJNxo3yZA57s_8PNreO-IQAww8.mft (raw, json)
Hash identifier:          3WO+xqkaATFBWrCfoI1D3Wv67MICGGfSQ+7ccI3ryFw=
Subject key identifier:   38:F0:27:8F:F5:89:FC:5D:C9:34:C0:67:2B:7A:52:91:9A:71:13:10
Authority key identifier: 54:A2:4D:C6:8D:F2:64:0E:7B:B3:FF:0F:36:B7:8E:F8:84:00:C3:0F
Certificate issuer:       /CN=A91362EB/serialNumber=54A24DC68DF2640E7BB3FF0F36B78EF88400C30F
Certificate serial:       7D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VKJNxo3yZA57s_8PNreO-IQAww8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.mft
Manifest number:          7B
Signing time:             Tue 03 Mar 2026 07:20:46 +0000
Manifest this update:     Tue 03 Mar 2026 07:20:45 +0000
Manifest next update:     Tue 10 Mar 2026 07:20:45 +0000
Files and hashes:         1: VKJNxo3yZA57s_8PNreO-IQAww8.crl (hash: R0nMSKcCZXI95tcLXzKJbgavTlnSLr9VWL3utWfSNtQ=)
                          2: 0E0A2B9A5C9C11F08CB7E148C4F9AE02.roa (hash: eGLRs5+xRo2yh8UxiEyYoaUHZFSoi/sB9xgpO/Oq4V8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.crl
                          rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VKJNxo3yZA57s_8PNreO-IQAww8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 07:20:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125 (0x7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91362EB, serialNumber=54A24DC68DF2640E7BB3FF0F36B78EF88400C30F
        Validity
            Not Before: Mar  3 07:20:45 2026 GMT
            Not After : Mar 10 07:20:45 2026 GMT
        Subject: CN=69a68bce-b3d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bd:8b:a3:19:c5:97:72:8d:ba:83:76:af:02:
                    38:41:b8:d4:d6:c2:1d:48:06:e2:2e:83:c5:7c:16:
                    6c:61:8d:0e:08:47:40:e8:12:1f:35:a0:41:39:37:
                    1a:6d:07:bd:c6:d0:c2:f0:85:5a:38:9c:ee:97:76:
                    9a:8e:18:18:0d:32:43:a4:75:f6:de:66:d7:77:38:
                    05:cc:01:48:53:89:37:03:3e:5f:90:64:d3:74:e8:
                    3e:fd:c6:b7:6d:7f:82:80:2d:9a:d9:59:43:99:4b:
                    db:e7:3e:3c:39:a5:1a:74:64:07:dc:2d:bb:80:e7:
                    c8:03:45:47:00:5b:a4:86:81:07:60:ae:c8:72:9c:
                    f8:b4:bf:14:7c:b6:bf:42:63:3e:50:0f:20:b2:0f:
                    23:30:c0:ac:b3:44:7b:3b:7f:fa:ae:6a:e5:1f:64:
                    c4:2e:86:eb:ed:9c:63:b8:98:ea:cf:7f:96:82:bc:
                    27:63:bf:e8:01:16:db:82:14:21:c5:77:11:11:25:
                    68:3a:56:f6:ee:15:cc:56:0d:94:80:9f:32:ca:f8:
                    05:be:cc:57:0b:77:42:0a:79:1d:18:e6:f2:fe:8a:
                    f2:12:d7:5b:08:3b:ad:f7:02:d4:d1:ba:13:93:26:
                    8e:d2:04:09:b6:47:f7:49:94:24:85:f5:6c:f3:3d:
                    da:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:F0:27:8F:F5:89:FC:5D:C9:34:C0:67:2B:7A:52:91:9A:71:13:10
            X509v3 Authority Key Identifier:
                keyid:54:A2:4D:C6:8D:F2:64:0E:7B:B3:FF:0F:36:B7:8E:F8:84:00:C3:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VKJNxo3yZA57s_8PNreO-IQAww8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:ba:7a:ca:f3:b4:7d:ed:5c:24:d3:55:a7:a1:c6:26:1b:4c:
         33:ce:03:36:6b:85:2d:63:72:d3:2d:03:01:78:43:e9:d8:ea:
         9a:5a:eb:24:4b:4e:30:12:50:fe:2e:5c:9f:08:aa:53:e2:5d:
         dd:a7:30:e9:75:7c:a0:74:5c:4a:d1:e6:71:96:c0:6a:c7:44:
         bf:1d:7d:d2:91:92:a9:74:1e:7f:97:3d:3f:cd:1d:4f:0e:c4:
         df:d8:da:1b:23:0e:ad:5e:47:39:30:07:5a:69:6a:a3:d4:7a:
         27:90:fa:21:43:9c:64:11:92:50:38:0f:33:ed:57:72:81:0d:
         ba:9f:11:c7:88:57:d0:16:ff:63:b6:0a:30:6b:9a:14:c1:46:
         17:b8:d7:3a:be:d1:28:fe:fc:f9:db:65:25:1c:4a:d9:56:16:
         7e:13:ae:cb:70:54:d1:ef:c8:5f:27:d3:fe:db:4e:6e:55:be:
         b8:c2:c1:04:f3:33:9e:02:ea:da:50:f6:a8:b5:f6:c6:8c:62:
         c0:8d:e3:61:f0:d1:26:84:0a:42:5c:a0:9b:8e:56:0c:46:0a:
         4a:02:14:08:dd:55:9d:4b:75:6d:f5:0d:dd:8f:92:e8:34:b2:
         23:ea:a0:93:ff:6e:9a:2b:68:5f:02:64:d3:e1:f3:09:bd:c9:
         64:12:2f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:29:47 2026 by rpki-client