Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.mft
File:                     vTfx1AdHvmxfXGujMH32Vgq2gaM.mft (raw, json)
Hash identifier:          FFbdgnS/LJjbOn3R7tpI2RCnFzS3IgM3xahpy7iSvdg=
Subject key identifier:   57:43:A7:92:5E:44:41:E3:86:B1:3C:FC:D9:63:D9:52:0E:E8:10:57
Authority key identifier: BD:37:F1:D4:07:47:BE:6C:5F:5C:6B:A3:30:7D:F6:56:0A:B6:81:A3
Certificate issuer:       /CN=A91817E6/serialNumber=BD37F1D40747BE6C5F5C6BA3307DF6560AB681A3
Certificate serial:       014A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vTfx1AdHvmxfXGujMH32Vgq2gaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.mft
Manifest number:          0CF8
Signing time:             Tue 18 Aug 2026 20:16:50 +0000
Manifest this update:     Tue 18 Aug 2026 20:16:49 +0000
Manifest next update:     Tue 25 Aug 2026 20:16:49 +0000
Files and hashes:         1: vTfx1AdHvmxfXGujMH32Vgq2gaM.crl (hash: HB6zM2MVt+fLV/CPbDNiEjJhPu/ZqqBBkPHiJxYIQGQ=)
                          2: 28C454FCB41211EF8D2EC946C4F9AE02.roa (hash: OVcfnxD6CMvVurhACrOK00amhdxUOIGPBugGO8sY/mg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.crl
                          rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vTfx1AdHvmxfXGujMH32Vgq2gaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 20:16:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 330 (0x14a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91817E6, serialNumber=BD37F1D40747BE6C5F5C6BA3307DF6560AB681A3
        Validity
            Not Before: Aug 18 20:16:49 2026 GMT
            Not After : Aug 25 20:16:49 2026 GMT
        Subject: CN=6a84bdb1-44d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:85:81:b8:3d:76:49:fa:86:74:65:dd:67:20:
                    36:65:9b:e7:23:b3:fe:11:a8:07:49:80:f5:e5:46:
                    f1:9a:ec:a4:ee:8b:dd:1c:d8:f7:09:a7:09:c3:5d:
                    81:99:21:4d:8e:a0:8f:42:c6:f2:f3:7f:b2:bf:d6:
                    4b:a1:11:e5:af:f9:63:e1:ad:57:35:53:cb:83:93:
                    c4:df:94:d6:9b:57:4e:c9:af:b5:81:e4:ae:1e:a7:
                    b8:2a:49:cb:db:80:ed:16:4a:eb:ff:c1:72:23:58:
                    6c:fc:54:41:a3:61:c4:59:55:6e:00:89:74:27:f8:
                    b3:fc:07:23:6e:35:db:fb:52:53:3e:d0:99:b0:2e:
                    7c:07:f7:91:48:fa:95:ed:3a:73:a3:30:d8:cf:a0:
                    88:ee:ba:9d:df:f7:d0:17:5b:26:b0:42:6e:2f:50:
                    fa:1e:47:ac:16:95:b1:d3:e9:89:c4:66:83:cc:d7:
                    d8:9e:c0:a4:00:16:25:1c:f8:17:1c:c6:05:a0:56:
                    9f:19:c6:ac:8f:2f:b5:6f:93:f9:67:30:db:74:a6:
                    a3:7f:c5:6e:2a:23:41:99:20:0a:74:12:b6:42:c2:
                    fc:16:42:1a:30:46:05:44:f4:fe:eb:fa:07:8c:0d:
                    9b:5e:59:c3:45:7b:ed:a4:58:57:b0:78:33:e3:53:
                    c1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:43:A7:92:5E:44:41:E3:86:B1:3C:FC:D9:63:D9:52:0E:E8:10:57
            X509v3 Authority Key Identifier:
                keyid:BD:37:F1:D4:07:47:BE:6C:5F:5C:6B:A3:30:7D:F6:56:0A:B6:81:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vTfx1AdHvmxfXGujMH32Vgq2gaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:24:ca:63:d2:36:4c:00:58:94:4b:d8:de:a4:ef:73:a7:51:
         3b:1e:b1:34:53:94:1c:09:f7:54:20:b8:c8:e5:21:65:7e:6a:
         ae:8b:83:57:d8:db:51:3d:34:44:e5:4c:c1:a8:62:5d:ef:48:
         4a:77:28:a1:ab:4d:54:29:94:f9:40:ab:bf:0f:74:c8:13:3d:
         ba:48:a9:f8:3a:be:67:53:f5:ec:00:be:a3:0a:ec:dd:da:4a:
         fe:9c:db:05:8c:fe:0b:40:30:75:ec:55:60:e3:11:d8:84:32:
         6f:fd:ee:5a:d1:fd:6e:d3:81:81:fa:23:b0:4b:bd:6b:0b:f4:
         4b:45:36:91:8a:b7:cc:a5:bb:38:8d:ad:36:28:8f:98:85:0c:
         25:c3:56:e3:22:fe:ff:ca:0e:3e:9b:d5:5e:71:bc:bf:1d:c7:
         58:c4:ab:49:13:7f:7c:13:8c:41:60:7d:63:aa:50:97:dc:3b:
         6d:b6:42:35:91:44:4f:95:83:57:26:a2:a6:be:46:92:02:f0:
         f4:6a:ce:1a:68:9f:f9:02:78:e5:c2:1e:9e:a3:fb:4a:2f:c2:
         4f:3d:36:c5:43:4b:95:74:c7:8f:5e:7c:71:ba:98:ea:87:09:
         de:73:3c:87:0d:ae:d0:84:1c:49:13:b0:fb:fd:0d:69:44:8a:
         a1:3f:6f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:40:17 2026 by rpki-client