Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.mft
File:                     VRT85Dhj9Rga80k4LThBTpYPCW8.mft (raw, json)
Hash identifier:          jlQrjEXFlNoQg8LLx9x2131exEHIHRQ9m/hdbG6LGSw=
Subject key identifier:   BE:79:A0:8A:26:F1:E5:AD:35:19:6C:9E:9B:31:2F:2F:D8:C2:FE:E4
Authority key identifier: 55:14:FC:E4:38:63:F5:18:1A:F3:49:38:2D:38:41:4E:96:0F:09:6F
Certificate issuer:       /CN=A9195262/serialNumber=5514FCE43863F5181AF349382D38414E960F096F
Certificate serial:       0984
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRT85Dhj9Rga80k4LThBTpYPCW8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.mft
Manifest number:          0979
Signing time:             Sat 04 Apr 2026 19:52:16 +0000
Manifest this update:     Sat 04 Apr 2026 19:52:16 +0000
Manifest next update:     Sat 11 Apr 2026 19:52:16 +0000
Files and hashes:         1: VRT85Dhj9Rga80k4LThBTpYPCW8.crl (hash: PuFNSsmJ85M+d7oU9fNLi6YJ093YbhptwLPgpMzSFaM=)
                          2: DFC21CD8B1CF11EAA8732709C4F9AE02.roa (hash: bJrrgsYLHjV75zVLzQBs3qgGPoWpvtfZTp73HYIJWw4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.crl
                          rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRT85Dhj9Rga80k4LThBTpYPCW8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 19:52:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2436 (0x984)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9195262, serialNumber=5514FCE43863F5181AF349382D38414E960F096F
        Validity
            Not Before: Apr  4 19:52:16 2026 GMT
            Not After : Apr 11 19:52:16 2026 GMT
        Subject: CN=69d16bf0-8595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:13:ee:ab:fd:a9:d6:66:c4:d6:5e:ba:a5:b5:
                    1c:0b:30:ad:62:8a:ce:c2:1c:7b:0b:94:0f:ea:c8:
                    3f:6d:af:83:37:09:1c:88:48:9f:18:51:b0:08:42:
                    1a:a2:0b:53:57:a0:7c:9f:8f:0e:b4:6b:73:c6:10:
                    ec:be:7b:c5:d8:c0:0b:7c:08:39:15:a4:80:42:a0:
                    c1:7e:1b:40:c3:17:00:8d:fc:f7:78:1a:52:5c:49:
                    40:19:db:a4:77:15:6f:a5:c0:ce:d2:da:89:6d:3e:
                    92:ad:d7:0d:5e:68:fe:9a:d9:30:40:f1:a5:a2:9d:
                    87:16:d7:3c:f6:61:1a:d6:f9:06:ec:8c:a0:9e:98:
                    61:ae:bc:eb:3b:ca:99:a3:07:7b:ad:4e:49:87:04:
                    19:f2:0c:ca:37:cb:92:82:01:19:91:c2:7e:85:fa:
                    b7:09:e9:b6:fb:bb:64:6c:56:16:1a:7e:8f:44:85:
                    41:82:6e:ad:e2:71:19:3d:c8:8a:a0:65:ff:04:6a:
                    8e:8d:e7:d9:3e:8e:69:74:a3:fa:ac:2f:41:bf:66:
                    c1:5b:3e:97:ec:c8:93:6b:7a:97:d3:2a:10:dc:8b:
                    94:3e:53:ed:82:32:a9:48:54:d2:d6:16:72:d2:fa:
                    97:66:57:1c:d4:8c:99:d4:5d:35:20:08:ca:ca:7f:
                    aa:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:79:A0:8A:26:F1:E5:AD:35:19:6C:9E:9B:31:2F:2F:D8:C2:FE:E4
            X509v3 Authority Key Identifier:
                keyid:55:14:FC:E4:38:63:F5:18:1A:F3:49:38:2D:38:41:4E:96:0F:09:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRT85Dhj9Rga80k4LThBTpYPCW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:59:38:cd:7d:56:c0:33:16:af:05:10:29:d5:dc:57:3a:e4:
         83:9e:81:f4:75:c4:59:94:01:ad:17:2a:a6:c4:35:28:1b:44:
         a9:dc:da:e3:88:95:1c:05:f3:01:03:db:32:28:d9:69:80:05:
         1e:20:b1:af:12:d3:a8:83:49:ed:27:82:86:86:4b:52:01:b4:
         74:b8:b9:43:1d:97:b3:6f:31:3a:55:fa:91:bf:17:4e:d4:06:
         d5:ac:ea:75:7d:2b:8c:a4:1c:e6:91:49:79:75:ba:84:6d:7a:
         95:60:99:b6:aa:48:7e:7d:b7:70:02:44:48:82:b3:ca:3a:76:
         a6:2f:21:e3:55:b2:32:b5:75:78:78:78:5a:de:c7:56:2c:60:
         34:25:d7:41:a3:8a:b8:ff:95:ba:12:6f:61:f1:f4:57:fa:20:
         49:ac:3f:c2:59:18:5f:f7:20:0b:9c:10:f0:cf:b6:35:f0:c3:
         37:4e:a1:0c:80:65:1d:66:6c:8e:64:e0:a7:19:73:6b:c8:0c:
         d9:4f:e8:7f:96:97:1c:7f:3a:53:35:96:97:22:b2:da:db:fc:
         d7:87:76:24:22:0d:d7:92:f2:33:bb:aa:ae:f3:0d:9d:f1:83:
         17:41:dc:6e:38:e7:59:3b:f6:3b:70:02:48:b6:f6:b3:d3:c4:
         1f:b2:b0:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:58:15 2026 by rpki-client