Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/VQsWD_T13X2ErD6LlZ3XmkL7V9o.mft
File:                     VQsWD_T13X2ErD6LlZ3XmkL7V9o.mft (raw, json)
Hash identifier:          Kg3PWQNLUArpF7tAYBuji8DB+n8JP5zxOQCgpEDu+k4=
Subject key identifier:   AF:BB:F2:DA:4E:27:F8:BA:3B:3F:5A:EF:F2:37:56:1F:80:F9:4E:43
Authority key identifier: 55:0B:16:0F:F4:F5:DD:7D:84:AC:3E:8B:95:9D:D7:9A:42:FB:57:DA
Certificate issuer:       /CN=A917928F/serialNumber=550B160FF4F5DD7D84AC3E8B959DD79A42FB57DA
Certificate serial:       0141
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQsWD_T13X2ErD6LlZ3XmkL7V9o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/VQsWD_T13X2ErD6LlZ3XmkL7V9o.mft
Manifest number:          0136
Signing time:             Sat 21 Mar 2026 04:33:33 +0000
Manifest this update:     Sat 21 Mar 2026 04:33:33 +0000
Manifest next update:     Sat 28 Mar 2026 04:33:33 +0000
Files and hashes:         1: VQsWD_T13X2ErD6LlZ3XmkL7V9o.crl (hash: VOp1rrSchh49NHuxy3fEW3DO4nqkiNl9ise3bPGn0nE=)
                          2: CEF77C10FB3811EF8D87CD5DC4F9AE02.roa (hash: GbhVn0VE3FP24YsW08zI1eZuA4bs5ppt8H1p2aPPVzc=)
                          3: C4C5449EABD111F0A9879016C4F9AE02.roa (hash: tJWszT3hQG7KyZ59DcsDJbma2Zpx+xHHx0ZP3u0HdGA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/VQsWD_T13X2ErD6LlZ3XmkL7V9o.crl
                          rsync://rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/VQsWD_T13X2ErD6LlZ3XmkL7V9o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQsWD_T13X2ErD6LlZ3XmkL7V9o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 04:33:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 321 (0x141)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917928F, serialNumber=550B160FF4F5DD7D84AC3E8B959DD79A42FB57DA
        Validity
            Not Before: Mar 21 04:33:33 2026 GMT
            Not After : Mar 28 04:33:33 2026 GMT
        Subject: CN=69be1f9d-d815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:13:6f:bd:08:86:73:b2:60:ff:87:8f:6d:12:
                    4e:21:bf:b6:20:1f:94:b5:74:bb:74:82:24:bc:3a:
                    15:f0:42:d8:e9:b2:9b:7a:1b:be:e9:c3:9a:c1:53:
                    ab:5c:f2:3a:01:79:9e:18:4b:be:3e:5e:3b:ea:26:
                    96:8f:d5:ec:8f:c4:41:b8:cc:14:e2:a8:1c:66:65:
                    57:e2:05:7e:3d:bd:9a:45:1f:47:25:58:a1:89:5b:
                    eb:0a:c4:01:d6:93:e8:df:14:74:a8:67:b7:e7:c0:
                    45:01:89:b9:3f:9a:91:91:5e:73:27:d4:ec:6e:86:
                    29:22:97:32:14:3f:c1:d6:6a:00:e3:11:a7:00:d4:
                    0f:09:73:ee:17:cc:0b:6e:4c:fd:f1:34:d8:3a:48:
                    e5:3d:34:c0:e5:24:37:69:38:45:74:60:59:90:4c:
                    23:7a:27:d8:ec:8a:e3:74:2a:b2:aa:c7:0c:c8:3d:
                    3b:80:99:17:52:e5:05:fc:ce:16:06:c5:08:8d:8d:
                    a7:90:f6:af:d3:40:88:3e:86:22:a1:8c:41:62:f9:
                    3d:43:76:d4:66:d8:fa:88:87:0a:e2:b0:bf:f6:6c:
                    17:39:8c:79:7d:ad:c7:3e:fa:9b:81:49:4f:74:43:
                    a8:e9:49:0f:55:5f:64:90:78:b7:84:bf:93:f5:8e:
                    7c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:BB:F2:DA:4E:27:F8:BA:3B:3F:5A:EF:F2:37:56:1F:80:F9:4E:43
            X509v3 Authority Key Identifier:
                keyid:55:0B:16:0F:F4:F5:DD:7D:84:AC:3E:8B:95:9D:D7:9A:42:FB:57:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/VQsWD_T13X2ErD6LlZ3XmkL7V9o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQsWD_T13X2ErD6LlZ3XmkL7V9o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/VQsWD_T13X2ErD6LlZ3XmkL7V9o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e3:c5:17:f6:ad:cc:50:70:bb:71:9e:49:fb:a1:07:b9:06:68:
         51:10:40:f7:b4:da:bd:d4:0f:fd:b3:b5:db:3f:02:f7:1b:a0:
         53:b9:1c:53:83:b1:bd:73:14:e3:d5:dc:2b:40:49:05:6d:d7:
         db:4e:9a:ff:ca:10:7d:1f:c9:9d:e7:e6:49:9a:97:d8:a7:31:
         35:c8:4f:49:a0:12:e3:6c:cd:9e:02:cf:b9:93:d1:aa:41:58:
         14:d8:c9:38:82:90:cf:82:ae:b5:b9:83:90:44:67:b1:da:16:
         bc:05:b1:a3:46:70:db:a0:c3:4a:a6:54:02:15:fb:79:c8:18:
         c9:32:d7:96:57:0d:bb:ce:22:9e:6b:49:b9:24:da:fb:9a:67:
         be:94:48:0c:a0:63:5f:e4:5c:1a:2f:a1:cd:c8:74:5c:1e:a8:
         c5:d1:8c:5c:af:ff:0e:3c:99:1e:ba:27:b5:09:bb:7f:be:08:
         b8:b0:58:3a:08:8f:04:c1:ee:67:72:4b:53:e5:1c:50:b4:8e:
         6e:cd:93:c1:ba:b4:b7:a7:98:a7:e4:82:d2:b3:79:5f:16:c2:
         c2:37:fe:e2:8f:16:5d:09:25:6c:35:db:9b:bd:14:69:20:25:
         73:74:64:17:f9:cf:c9:40:be:e4:6f:1a:56:49:18:1b:27:72:
         4b:c1:fe:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 23:51:18 2026 by rpki-client