Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft
File:                     vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft (raw, json)
Hash identifier:          fKcFr9NYk2+pY4AQWh946c61jTRNmuoqLTYSukgXErA=
Subject key identifier:   24:13:29:A7:36:5B:7F:93:37:63:B9:D5:7E:B9:60:50:F5:FF:91:5A
Authority key identifier: BD:63:E0:DD:CB:5C:D4:1B:34:50:1D:F2:E8:1A:2A:72:CE:E3:6E:F2
Certificate issuer:       /CN=A917B503/serialNumber=BD63E0DDCB5CD41B34501DF2E81A2A72CEE36EF2
Certificate serial:       0145
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft
Manifest number:          013E
Signing time:             Wed 11 Mar 2026 04:17:52 +0000
Manifest this update:     Wed 11 Mar 2026 04:17:51 +0000
Manifest next update:     Wed 18 Mar 2026 04:17:51 +0000
Files and hashes:         1: vWPg3ctc1Bs0UB3y6Boqcs7jbvI.crl (hash: zkl+qVmC5FET3X/GUcPITIxJFdCFnoDLH+TvXy5DC8M=)
                          2: FF7048A08BB111EF8981B871C4F9AE02.roa (hash: Pf4vtsycRl7uQ7TRSuhW3ZPGeuFhV8pttTvvgiVqOIo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.crl
                          rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Mar 2026 04:17:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 325 (0x145)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B503, serialNumber=BD63E0DDCB5CD41B34501DF2E81A2A72CEE36EF2
        Validity
            Not Before: Mar 11 04:17:51 2026 GMT
            Not After : Mar 18 04:17:51 2026 GMT
        Subject: CN=69b0ecf0-7492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:25:d8:5a:2a:de:5a:89:31:be:a1:1f:5d:86:
                    b4:64:1f:63:43:84:db:25:17:ea:e7:f9:22:49:b6:
                    d2:a8:ac:cd:70:b0:40:45:30:ca:ae:16:61:1b:55:
                    c2:0b:94:95:b5:79:d9:65:24:dc:0e:71:a6:d7:3d:
                    06:21:e5:29:55:52:63:20:79:9a:ba:08:ce:96:30:
                    1a:21:1c:f4:71:51:06:31:ca:65:23:eb:c2:88:c9:
                    b2:44:73:45:06:c4:11:ea:a4:4f:bf:47:a8:f2:1d:
                    b0:a0:75:be:a9:c2:ac:f3:82:67:89:db:cb:3e:ec:
                    44:d1:39:00:7c:05:c9:ac:36:d6:94:bd:c9:89:01:
                    c6:6e:5c:02:2a:9b:6d:f1:79:12:0b:de:0c:99:97:
                    f8:d0:01:db:f3:ac:6b:f1:bd:a5:ba:d5:c4:9b:d5:
                    ee:51:81:4f:b3:d1:40:7e:42:ed:39:54:43:55:87:
                    1a:c5:88:de:eb:b3:36:12:d9:06:7b:21:9c:86:aa:
                    1f:af:3c:6c:89:55:47:d5:76:d2:49:7c:10:c7:76:
                    26:92:3e:f0:69:32:91:7e:41:8b:ef:a2:22:45:46:
                    1f:fd:e2:db:92:f2:c8:dc:8a:6f:89:7f:f5:4b:60:
                    e7:e0:ea:01:df:99:42:60:ea:ad:81:b3:9e:44:38:
                    03:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:13:29:A7:36:5B:7F:93:37:63:B9:D5:7E:B9:60:50:F5:FF:91:5A
            X509v3 Authority Key Identifier:
                keyid:BD:63:E0:DD:CB:5C:D4:1B:34:50:1D:F2:E8:1A:2A:72:CE:E3:6E:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:9f:56:e1:df:a2:74:b2:3e:2e:41:fb:39:c3:99:66:eb:3e:
         03:ce:ef:69:a9:5f:b2:c7:92:53:b7:47:8e:57:99:5c:f6:0d:
         b3:e0:8a:d1:f5:1f:3c:27:99:a3:5d:96:7f:8f:ea:00:ca:a6:
         ae:6a:e1:28:1e:6b:0d:50:33:e9:1c:8c:75:11:f1:61:45:1d:
         75:6d:78:c1:f9:b2:c0:53:89:7f:20:f8:fa:36:b5:a1:44:ba:
         43:62:18:d4:f7:61:27:60:b3:8a:52:27:df:16:02:30:6a:a8:
         9f:aa:b8:dd:45:60:8c:3e:65:1a:f3:23:15:3c:14:2d:59:8b:
         22:b6:01:a0:78:53:c6:4e:d7:da:3e:b6:73:99:70:7b:2a:0c:
         4c:12:d4:d6:e0:d6:e0:a3:ed:db:c5:89:84:8c:81:46:40:89:
         47:a6:74:ae:43:e7:80:11:2f:d8:bf:32:bf:a7:c5:a0:90:ef:
         77:56:ce:1a:1d:27:d9:81:48:0b:d6:70:16:7b:c8:82:3a:25:
         a8:3d:84:83:63:61:d9:03:d6:cd:c0:4f:e1:da:78:f2:84:56:
         d7:a0:13:00:23:f1:9f:5a:9a:91:54:04:e7:ef:4e:4e:8e:78:
         0a:5b:8d:49:6e:74:69:31:ab:d9:8d:16:7f:51:64:72:47:13:
         34:7f:f4:d1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0I1MDMxMTAvBgNVBAUTKEJENjNFMEREQ0I1Q0Q0MUIzNDUwMURGMkU4MUEyQTcy
Q0VFMzZFRjIwHhcNMjYwMzExMDQxNzUxWhcNMjYwMzE4MDQxNzUxWjAYMRYwFAYD
VQQDEw02OWIwZWNmMC03NDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzSXYWireWokxvqEfXYa0ZB9jQ4TbJRfq5/kiSbbSqKzNcLBARTDKrhZhG1XC
C5SVtXnZZSTcDnGm1z0GIeUpVVJjIHmaugjOljAaIRz0cVEGMcplI+vCiMmyRHNF
BsQR6qRPv0eo8h2woHW+qcKs84JnidvLPuxE0TkAfAXJrDbWlL3JiQHGblwCKptt
8XkSC94MmZf40AHb86xr8b2lutXEm9XuUYFPs9FAfkLtOVRDVYcaxYje67M2EtkG
eyGchqofrzxsiVVH1XbSSXwQx3Ymkj7waTKRfkGL76IiRUYf/eLbkvLI3IpviX/1
S2Dn4OoB35lCYOqtgbOeRDgDAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCQTKac2
W3+TN2O51X65YFD1/5FaMB8GA1UdIwQYMBaAFL1j4N3LXNQbNFAd8ugaKnLO427y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjUwMy83Qjg4NUZFNDQz
MTAxMUVGODk0OEEzODFDNEY5QUUwMi92V1BnM2N0YzFCczBVQjN5NkJvcWNzN2pi
dkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZXUGczY3RjMUJzMFVCM3k2Qm9xY3M3amJ2SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QjUwMy83Qjg4NUZFNDQzMTAxMUVGODk0OEEzODFDNEY5QUUwMi92V1BnM2N0YzFC
czBVQjN5NkJvcWNzN2pidkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAp9W4d+idLI+LkH7OcOZZus+A87vaalfsseSU7dHjleZXPYNs+CK0fUfPCeZ
o12Wf4/qAMqmrmrhKB5rDVAz6RyMdRHxYUUddW14wfmywFOJfyD4+ja1oUS6Q2IY
1PdhJ2CzilIn3xYCMGqon6q43UVgjD5lGvMjFTwULVmLIrYBoHhTxk7X2j62c5lw
eyoMTBLU1uDW4KPt28WJhIyBRkCJR6Z0rkPngBEv2L8yv6fFoJDvd1bOGh0n2YFI
C9ZwFnvIgjolqD2Eg2Nh2QPWzcBP4dp48oRW16ATACPxn1qakVQE5+9OTo54CluN
SW50aTGr2Y0Wf1FkckcTNH/00Q==
-----END CERTIFICATE-----
Generated at Thu Mar 12 16:44:21 2026 by rpki-client