Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9151290/44AB495AF20511F0BD2586054A6F56BC/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.mft
File:                     vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.mft (raw, json)
Hash identifier:          tlKd4YIx8D7MdKeuluqwz4L+PD5Tc41rfWOjYPuP2/g=
Subject key identifier:   BD:0E:9B:8D:88:DF:D2:E3:E3:59:AB:DB:59:10:3F:C3:1A:7E:FC:80
Authority key identifier: BD:3C:C5:FF:84:28:F2:DE:1C:38:6B:F8:06:8D:02:87:45:80:6F:CE
Certificate issuer:       /CN=A9151290/serialNumber=BD3CC5FF8428F2DE1C386BF8068D028745806FCE
Certificate serial:       28
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9151290/44AB495AF20511F0BD2586054A6F56BC/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.mft
Manifest number:          20
Signing time:             Tue 03 Mar 2026 08:35:51 +0000
Manifest this update:     Tue 03 Mar 2026 08:35:51 +0000
Manifest next update:     Tue 10 Mar 2026 08:35:51 +0000
Files and hashes:         1: vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.crl (hash: 1ZXvXROBDubJcl2Z9WBSunIoMvGorr+H21Yy1IJCuqM=)
                          2: 95303322F20511F0873139314A6F56BC.roa (hash: 1sNl2GKaplu72shhpID3R2WKIOZVHmc3EWv5WEQWdk0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9151290/44AB495AF20511F0BD2586054A6F56BC/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.crl
                          rsync://rpki.apnic.net/member_repository/A9151290/44AB495AF20511F0BD2586054A6F56BC/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 08:35:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9151290, serialNumber=BD3CC5FF8428F2DE1C386BF8068D028745806FCE
        Validity
            Not Before: Mar  3 08:35:51 2026 GMT
            Not After : Mar 10 08:35:51 2026 GMT
        Subject: CN=69a69d67-aadf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9c:1c:0f:36:61:e4:41:0a:70:f6:f8:48:85:
                    9f:a2:36:a5:c4:b0:d6:3e:6f:36:c5:60:28:32:85:
                    cc:ba:2e:67:64:91:66:bb:98:5b:98:e9:f2:88:f1:
                    5a:05:fa:5a:d0:9a:82:bc:70:3c:3d:92:d8:4e:68:
                    43:5d:fd:a6:fc:6e:9c:1b:09:b1:ee:ce:be:2b:19:
                    bf:70:ff:9b:b4:0d:c4:e7:7b:ef:de:96:f3:30:9f:
                    6d:f5:35:cf:da:be:d7:cc:dd:10:43:e4:8a:bf:d4:
                    d1:8d:80:b2:4c:06:b9:3f:8d:96:36:ea:39:d2:e8:
                    96:9d:17:a1:1b:17:2e:65:aa:8d:26:32:b1:54:0a:
                    c2:54:4b:34:f6:ee:4e:d3:e5:82:73:09:3c:df:76:
                    18:0b:b0:09:31:00:e6:09:72:65:ef:f5:8b:67:02:
                    ed:63:7a:a6:fe:c2:60:a3:4d:a9:33:95:de:1f:ca:
                    76:52:4a:c1:ef:bf:01:02:0b:04:5d:69:f2:6c:35:
                    c1:d5:84:42:b8:48:bd:58:fb:4e:7e:8a:41:c8:c8:
                    73:73:fa:db:62:aa:1d:fd:7f:eb:49:92:8c:5b:95:
                    d7:42:27:e8:c6:e5:a1:94:9b:09:33:0e:f9:26:05:
                    77:c2:34:53:ba:a9:5b:af:cb:86:04:ae:1e:e4:37:
                    3c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:0E:9B:8D:88:DF:D2:E3:E3:59:AB:DB:59:10:3F:C3:1A:7E:FC:80
            X509v3 Authority Key Identifier:
                keyid:BD:3C:C5:FF:84:28:F2:DE:1C:38:6B:F8:06:8D:02:87:45:80:6F:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9151290/44AB495AF20511F0BD2586054A6F56BC/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151290/44AB495AF20511F0BD2586054A6F56BC/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:bf:90:dd:11:c3:3c:96:90:9b:28:32:df:bf:37:43:94:d9:
         69:39:b5:df:62:fd:66:51:d4:fc:e3:dd:a6:fa:52:c6:89:f9:
         f9:ce:e0:10:73:1e:9a:7d:6b:af:08:18:f6:c9:9c:c6:3f:1c:
         ee:eb:92:3f:8d:61:ae:6e:d7:83:4a:52:78:45:aa:58:28:ea:
         ce:fd:75:93:2c:2f:21:1c:d0:ab:b1:26:9e:c6:66:ed:32:36:
         c1:78:e4:4f:11:1b:8d:c9:6b:2a:30:e3:c3:38:ae:41:f9:9d:
         23:e1:6c:99:f7:70:67:d6:60:0b:c9:a3:2d:2c:d9:2b:06:ec:
         18:f5:b5:13:86:55:97:cb:2b:65:f6:cc:c3:4c:09:54:ff:70:
         3e:6b:e5:ea:ce:c7:25:8b:cd:5c:b4:6c:1b:71:55:4d:6f:2a:
         c6:c5:77:59:b2:3b:e4:d9:bd:a9:d1:f1:00:b4:66:1c:86:4b:
         7d:9d:f9:97:a6:b5:d6:91:2f:f1:ac:cd:2e:d3:3c:59:c5:b2:
         82:c3:f4:7e:49:5d:df:a5:1a:8e:51:d3:6b:e5:df:53:c4:2a:
         b7:ef:e7:86:22:84:88:0d:5a:79:29:b3:c2:4c:f9:f3:1d:b2:
         f2:7d:1d:a2:ae:33:c6:d8:df:6b:eb:40:b0:9d:29:56:c2:89:
         0c:63:19:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:40:08 2026 by rpki-client