Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft
File:                     tVGhYNO-3KVi6d395AkzcktpuQA.mft (raw, json)
Hash identifier:          /hjPnN2yxptdMsE0w4rD9a3LeLP1QQbM3b54DilUokA=
Subject key identifier:   F3:E3:42:00:08:76:26:FE:94:58:6D:E1:8F:00:42:9A:30:C0:16:C0
Authority key identifier: B5:51:A1:60:D3:BE:DC:A5:62:E9:DD:FD:E4:09:33:72:4B:69:B9:00
Certificate issuer:       /CN=A91933FE/serialNumber=B551A160D3BEDCA562E9DDFDE40933724B69B900
Certificate serial:       024E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVGhYNO-3KVi6d395AkzcktpuQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft
Manifest number:          0240
Signing time:             Sat 07 Mar 2026 01:51:32 +0000
Manifest this update:     Sat 07 Mar 2026 01:51:31 +0000
Manifest next update:     Sat 14 Mar 2026 01:51:31 +0000
Files and hashes:         1: tVGhYNO-3KVi6d395AkzcktpuQA.crl (hash: WGj44n3NZuQTHrePskMzcJG+6AmCa0ZDEpDLP8wuWUk=)
                          2: A6CD6A3EAB6B11EDA5C53A0AC4F9AE02.roa (hash: S3mtiXgsL+/eI/0ypZKkTLQQz8Kl0Q3Gz9IYr9ftMk4=)
                          3: A63F9024AB6B11EDA5C53A0AC4F9AE02.roa (hash: eZ7E672T6C2NAQF7FO/EpOxkj6QwEhrMyFrT7Izg/p4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.crl
                          rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVGhYNO-3KVi6d395AkzcktpuQA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 01:51:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 590 (0x24e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91933FE, serialNumber=B551A160D3BEDCA562E9DDFDE40933724B69B900
        Validity
            Not Before: Mar  7 01:51:31 2026 GMT
            Not After : Mar 14 01:51:31 2026 GMT
        Subject: CN=69ab84a4-8f10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:67:56:67:b6:44:05:3f:93:08:ac:82:ab:14:
                    fa:88:d7:1f:81:da:bf:71:12:61:19:ae:6b:99:fc:
                    3c:45:a1:58:cb:7c:56:32:53:46:0f:09:2b:7f:e8:
                    c8:cc:ae:8f:18:08:d5:8a:85:8b:79:b2:7c:9f:82:
                    3f:7b:b7:90:aa:5b:24:2b:83:68:cd:cd:6a:2f:4d:
                    e9:20:f7:29:9e:c3:fb:bc:6c:b9:a9:4f:02:41:b7:
                    9d:9e:ef:8a:f4:8e:32:b5:04:a9:3f:e3:85:2e:2b:
                    10:0a:24:f2:fb:a0:31:bf:db:16:d6:65:c9:93:98:
                    9a:13:52:11:1c:ae:e7:f8:1f:e5:04:de:72:e8:0a:
                    e0:45:ce:32:bc:64:59:0b:86:4d:42:fe:ca:12:65:
                    02:22:6c:73:ae:d6:61:6d:9b:34:09:df:eb:7f:17:
                    02:e1:c4:ec:18:84:17:0e:ee:7b:9a:0a:9f:98:08:
                    58:40:be:06:2d:76:99:e0:46:40:21:3e:cc:71:71:
                    2b:42:cb:99:dd:9d:d8:e8:c0:3e:68:47:ca:e3:a4:
                    0d:e6:32:c3:5d:3b:31:8c:c3:de:75:46:a7:1c:53:
                    18:8e:40:a9:0f:10:db:76:70:2e:3c:8c:23:34:7a:
                    d7:90:a3:c0:87:dc:62:d6:c6:ef:c6:b2:25:85:61:
                    45:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:E3:42:00:08:76:26:FE:94:58:6D:E1:8F:00:42:9A:30:C0:16:C0
            X509v3 Authority Key Identifier:
                keyid:B5:51:A1:60:D3:BE:DC:A5:62:E9:DD:FD:E4:09:33:72:4B:69:B9:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVGhYNO-3KVi6d395AkzcktpuQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:2f:50:9d:d1:d9:7f:83:d5:ae:75:2b:a7:cc:ba:52:02:ac:
         5f:77:ad:32:3b:f4:50:2f:65:b8:c6:b5:c6:eb:69:87:9d:3a:
         e9:69:9a:e0:69:db:25:79:e3:6f:dc:48:96:ce:e1:9c:f2:5e:
         bd:e5:40:93:5e:dd:df:76:58:67:19:4c:15:3f:d4:bf:12:b8:
         7e:7c:d5:63:e6:bd:fc:ee:61:10:09:0b:7d:b7:76:85:8c:ac:
         13:09:60:92:0a:08:ed:2e:d4:a7:16:30:c5:c7:5a:a9:75:db:
         42:7e:ef:a3:57:68:1c:ed:bc:ad:01:75:c5:0e:39:3e:1e:df:
         53:98:34:5f:d5:a0:93:e2:97:fd:8b:de:8a:a7:32:95:5e:0c:
         e1:71:c6:7d:45:9f:2b:21:61:d9:da:ae:6b:ff:d0:20:e9:69:
         8b:ca:a6:38:25:19:b7:09:4b:a6:f5:fd:8b:d5:6c:ac:32:31:
         f0:9e:fa:b8:d9:1b:80:57:ac:78:2b:00:d5:c8:0d:b7:d4:52:
         c5:79:ff:14:8b:81:8c:52:a9:91:b1:4c:1c:d1:26:e1:a8:d5:
         a2:ec:fa:63:36:02:2e:95:f9:61:8c:95:46:d3:14:4c:f9:b7:
         08:f8:d9:2f:82:57:78:f7:7c:51:0d:64:53:bf:aa:ff:f4:79:
         84:e4:d4:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 04:56:00 2026 by rpki-client