Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft
File:                     VktpF48mnvuWt2kW94FwdU6PDIc.mft (raw, json)
Hash identifier:          PNRTSy2eyGr/O4er+X6awH1b6DSGyhH5LnXR5Kyjb20=
Subject key identifier:   4D:86:DB:84:F5:31:2E:1F:47:0A:CA:35:56:63:43:FA:11:BE:84:4A
Authority key identifier: 56:4B:69:17:8F:26:9E:FB:96:B7:69:16:F7:81:70:75:4E:8F:0C:87
Certificate issuer:       /CN=A91A99C5/serialNumber=564B69178F269EFB96B76916F78170754E8F0C87
Certificate serial:       87
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VktpF48mnvuWt2kW94FwdU6PDIc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft
Manifest number:          7E
Signing time:             Tue 03 Mar 2026 07:21:41 +0000
Manifest this update:     Tue 03 Mar 2026 07:21:40 +0000
Manifest next update:     Tue 10 Mar 2026 07:21:40 +0000
Files and hashes:         1: VktpF48mnvuWt2kW94FwdU6PDIc.crl (hash: LxrLt0LN8/plbrB/Q1WxceANWH4POspdN8OlG9uX/x0=)
                          2: AE31872C5DBD11F083DD7F61C4F9AE02.roa (hash: PtmJapetaAUxJ5KEUkr9vfhR8x3TFcjZY4x2L67+TqA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.crl
                          rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VktpF48mnvuWt2kW94FwdU6PDIc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 07:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135 (0x87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A99C5, serialNumber=564B69178F269EFB96B76916F78170754E8F0C87
        Validity
            Not Before: Mar  3 07:21:40 2026 GMT
            Not After : Mar 10 07:21:40 2026 GMT
        Subject: CN=69a68c05-9f2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0d:a1:64:49:f8:b6:a6:02:55:77:53:10:4d:
                    23:5b:2a:f0:4f:ab:88:01:09:fa:e1:2e:a3:a7:22:
                    3e:db:58:9e:c0:c9:47:fc:9f:63:c7:3f:f0:46:df:
                    ab:18:26:4f:fc:03:d9:3a:93:0e:88:a7:91:87:aa:
                    37:41:54:54:e3:a2:6e:77:45:24:df:7d:46:e8:69:
                    38:e6:c3:48:23:b7:30:df:0d:29:30:39:67:3d:64:
                    57:46:b3:6b:72:b2:75:0c:a6:44:17:29:02:eb:ca:
                    05:1d:3d:93:88:8a:de:57:a6:e3:73:48:cc:bc:d5:
                    bb:29:18:35:f2:d7:26:e6:86:27:32:bd:82:c1:38:
                    81:3f:fa:c1:85:fa:dc:ba:9e:93:ff:a7:d6:49:70:
                    3c:03:f0:cf:7a:b9:55:e9:bf:f9:33:63:61:79:0b:
                    2d:f2:8d:15:25:3d:ef:bb:1b:21:55:13:47:72:02:
                    d9:e8:58:1e:69:0f:74:48:7c:ea:f1:4b:c5:eb:89:
                    43:60:0a:b5:82:90:ef:2e:88:17:b2:39:e1:11:d8:
                    a4:49:8c:31:a8:f7:2b:b5:e5:c5:4b:3c:33:b3:d4:
                    c2:9b:97:87:74:32:69:79:3e:e4:2f:41:98:0f:75:
                    a1:2d:f0:d1:3e:c1:4c:73:97:ed:24:64:a9:a4:f0:
                    08:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:86:DB:84:F5:31:2E:1F:47:0A:CA:35:56:63:43:FA:11:BE:84:4A
            X509v3 Authority Key Identifier:
                keyid:56:4B:69:17:8F:26:9E:FB:96:B7:69:16:F7:81:70:75:4E:8F:0C:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VktpF48mnvuWt2kW94FwdU6PDIc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:d3:ba:69:d7:ac:60:0a:e9:6d:e2:99:73:3a:c5:7b:37:43:
         48:d9:70:f4:7c:62:55:97:00:11:1d:de:90:55:cd:75:41:c8:
         55:87:2a:5d:d0:4f:37:db:9c:c1:be:0b:c9:29:5d:ac:4c:9d:
         07:79:bb:63:85:59:de:88:bd:d7:80:0a:f4:7c:70:47:c9:d6:
         09:3f:27:54:ed:39:51:7d:aa:b1:8f:fc:d4:c1:78:55:7c:d9:
         be:88:f9:dc:13:dd:99:a8:c0:11:5e:16:fc:4a:f3:d0:86:03:
         cd:ff:89:2f:66:86:2e:36:80:2d:6c:9b:25:63:ed:62:bb:42:
         48:2f:56:ae:69:72:ea:49:cf:59:04:5c:ef:09:eb:aa:ee:96:
         1b:64:33:80:f0:59:c3:d7:32:41:3f:f0:45:ba:2c:6d:cf:a7:
         c4:21:e7:9c:35:4c:ce:2d:e8:90:25:fa:55:6c:0e:93:74:14:
         28:4c:8d:04:f5:c3:8d:e7:bf:b6:02:ad:aa:bc:a7:c2:91:6a:
         6c:87:f1:8e:bb:0d:10:af:2f:76:bf:71:1a:53:0a:e6:ba:1f:
         3e:1f:4c:1d:46:08:79:35:e5:e4:99:d9:9a:3f:89:32:1e:a8:
         23:e8:07:30:07:e3:c4:0e:8f:38:b7:d0:35:95:a0:cf:0b:bb:
         fc:8b:e4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:36:06 2026 by rpki-client