Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft
File:                     vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft (raw, json)
Hash identifier:          kZ2pNenpaeI0jm/O8F6d1fmp1+aijEM79nta/Vmgdsc=
Subject key identifier:   2E:87:50:E6:28:63:14:33:19:58:F7:FF:EC:32:5F:BF:E4:B0:BD:4C
Authority key identifier: BD:79:AC:76:40:C9:55:C4:35:C8:CF:55:C2:91:F1:22:B7:0E:2F:99
Certificate issuer:       /CN=A919F026/serialNumber=BD79AC7640C955C435C8CF55C291F122B70E2F99
Certificate serial:       0145
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft
Manifest number:          0130
Signing time:             Thu 03 Sep 2026 06:04:19 +0000
Manifest this update:     Thu 03 Sep 2026 06:04:18 +0000
Manifest next update:     Thu 10 Sep 2026 06:04:18 +0000
Files and hashes:         1: vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl (hash: KzQvdafpeQLpaXrudPMxhZoCJ+AgRbrgm+ZSk1fDFu4=)
                          2: 3FCB43D2FB2911EF8A116D76C4F9AE02.roa (hash: TuXiY2w3e6zPpHWMMfGIh2+FsQ77W0kNYmMVPhTnzXc=)
                          3: 6E68E3C8A05811F0B1978E4CC4F9AE02.roa (hash: xZAQVFBAuCRw9GeATu83PkDRuX+f5O+jwXu5MsByzpg=)
                          4: 563F3D581F3C11F09F3C7F40C4F9AE02.roa (hash: jqaS9O87XNAGjnOYKmiPW3sMHJfZOBNM9M+7d9FRgko=)
                          5: 362EF79CFB2911EF8C103876C4F9AE02.roa (hash: 8z/uFEi8kY2kZUp/2Uo+wdZpbnZaPl9Z3nq0shxq+HU=)
                          6: 07E3560E707B11F08CCE202CC4F9AE02.roa (hash: qfuU9QdlAgNGEyETXyG5+zUSOsPh9QDRT3yT/b7upmM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl
                          rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 06:04:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 325 (0x145)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F026, serialNumber=BD79AC7640C955C435C8CF55C291F122B70E2F99
        Validity
            Not Before: Sep  3 06:04:18 2026 GMT
            Not After : Sep 10 06:04:18 2026 GMT
        Subject: CN=6a990de3-631f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:cf:25:90:a3:52:a4:cf:44:87:43:44:a2:05:
                    a2:e1:a9:1c:63:6e:f4:70:4d:de:af:5e:0d:f7:b2:
                    d2:d8:4a:b8:e3:fc:f4:cc:ef:66:19:7e:77:bf:67:
                    b7:e6:2a:42:b4:ff:81:ee:87:0b:3e:97:87:87:ac:
                    15:ab:e8:b0:76:e4:7e:b0:24:13:d9:04:20:d7:8f:
                    19:90:3f:5b:7d:73:92:91:f7:ac:f2:5f:8e:d6:2e:
                    0e:1f:68:ed:e0:28:ca:8d:c7:9a:0c:72:63:6f:fe:
                    12:16:83:6a:71:85:64:5e:c5:03:54:67:9f:f5:7e:
                    44:b5:88:9e:c9:2c:e4:e6:f5:2d:64:1b:dc:13:11:
                    51:60:47:5b:d6:92:78:79:94:5b:ec:25:e4:71:51:
                    ce:8c:3e:a0:42:4f:69:7b:9a:9f:f7:10:51:ee:e1:
                    67:ab:34:97:f1:4f:10:1a:c9:74:e4:5f:b3:cf:4d:
                    39:04:22:8d:3d:49:9e:a9:71:f5:45:ae:c9:04:44:
                    a2:ef:30:2f:15:2a:c1:0b:d7:96:aa:0c:64:43:e9:
                    28:6a:cc:8b:98:30:14:18:3e:b0:30:03:91:2e:52:
                    75:85:5e:93:9e:1f:82:1d:60:86:da:48:cd:05:73:
                    71:35:a3:b1:b1:c0:38:09:65:7f:c5:71:1d:e4:bf:
                    50:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:87:50:E6:28:63:14:33:19:58:F7:FF:EC:32:5F:BF:E4:B0:BD:4C
            X509v3 Authority Key Identifier:
                keyid:BD:79:AC:76:40:C9:55:C4:35:C8:CF:55:C2:91:F1:22:B7:0E:2F:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:6d:be:20:e0:ba:39:43:a4:f1:c9:31:e6:da:97:a2:eb:94:
         d0:1f:f7:28:37:84:ca:92:1b:c2:1e:95:c2:74:7d:3b:b0:50:
         af:a4:60:50:fc:62:77:45:96:30:d9:e2:5b:f8:c3:a6:4d:58:
         fe:41:3e:f2:ee:a4:a8:d6:f2:ae:00:69:ad:5c:5e:15:d4:5e:
         54:f0:13:a6:9a:45:b9:83:f9:d9:05:f5:d5:21:3e:52:db:64:
         01:80:79:7a:9d:a2:b7:51:41:53:4c:38:9f:a3:a1:e1:07:e1:
         46:35:a0:70:f5:0a:e7:77:fd:be:21:77:9b:0f:18:97:b9:8c:
         99:61:87:47:78:26:c3:f5:8f:68:04:29:37:a0:55:ae:b7:b2:
         88:e2:c8:51:6e:1b:81:5c:b6:23:fe:0f:89:d9:06:ed:ee:36:
         f2:99:b6:4d:78:65:d5:09:26:dd:a8:f8:3b:92:2b:e6:56:ea:
         ea:19:35:48:f5:8d:26:72:89:78:22:60:e9:1e:aa:d9:d9:2a:
         1d:4f:69:1a:56:64:55:9e:73:80:9c:dd:45:2c:e5:4a:69:59:
         20:37:9f:a2:65:06:36:9e:83:ad:6b:cc:68:a9:f0:69:e4:fb:
         39:04:a9:a6:05:a4:4b:1b:82:7d:3a:8c:57:8f:e3:1d:f8:02:
         75:3f:13:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:05:09 2026 by rpki-client