Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft
File:                     Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft (raw, json)
Hash identifier:          d9Paq2TM6ZZgzMdQrlHkFSFMsf2t/wcARysOX+TWITs=
Subject key identifier:   CB:FF:30:17:08:5F:9E:FA:1D:E6:88:1F:D3:C7:8F:D8:16:9E:EC:90
Authority key identifier: 56:46:E0:7A:0F:60:25:F1:E2:60:F1:C4:99:6F:9A:68:1B:29:20:71
Certificate issuer:       /CN=A91203DC/serialNumber=5646E07A0F6025F1E260F1C4996F9A681B292071
Certificate serial:       2253
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vkbgeg9gJfHiYPHEmW-aaBspIHE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft
Manifest number:          2240
Signing time:             Fri 12 Jun 2026 15:50:26 +0000
Manifest this update:     Fri 12 Jun 2026 15:50:25 +0000
Manifest next update:     Fri 19 Jun 2026 15:50:25 +0000
Files and hashes:         1: Vkbgeg9gJfHiYPHEmW-aaBspIHE.crl (hash: T5/urkVL1VgEShZwevWgrHMxKe3LrkPSv3eLL9esE1Q=)
                          2: 1D9DC82A652311EBA8CF3C4CC4F9AE02.roa (hash: HwypahBFkKbW/pB8Pd+gaE4/P/VRHrxmO2AZ+Ty59Ss=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.crl
                          rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vkbgeg9gJfHiYPHEmW-aaBspIHE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 15:50:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8787 (0x2253)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91203DC, serialNumber=5646E07A0F6025F1E260F1C4996F9A681B292071
        Validity
            Not Before: Jun 12 15:50:25 2026 GMT
            Not After : Jun 19 15:50:25 2026 GMT
        Subject: CN=6a2c2ac2-838b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2e:38:f2:d1:4f:ae:07:e1:5e:c0:12:c5:33:
                    0c:00:e8:e9:69:91:d1:0d:e0:56:6b:9e:e9:2a:fb:
                    3c:1f:a8:d2:49:a9:32:a0:e0:9e:80:7c:e6:fe:86:
                    d1:2e:48:ba:14:31:7f:d9:19:c0:05:fd:16:a6:9f:
                    7e:02:73:19:3d:d9:8f:8f:f4:71:9e:54:a1:c8:0a:
                    cb:86:5a:38:88:59:f4:90:d9:fe:57:b6:e9:4b:eb:
                    7a:bc:87:2b:b9:62:3d:e6:d8:62:39:74:ce:36:8e:
                    be:50:a8:6b:73:0e:2d:24:0d:16:34:1a:fd:66:18:
                    94:61:17:a2:e9:4b:4c:8a:8d:92:5f:31:a5:c1:e6:
                    ef:54:a2:ef:86:12:25:fe:b6:1d:71:a9:04:7d:60:
                    dd:c8:d9:94:fd:ef:0b:25:13:5c:81:7e:44:f3:b2:
                    01:42:ac:17:a9:9f:d4:f6:49:c8:d0:b5:fe:2c:88:
                    05:67:ff:20:64:3e:8f:02:2b:9f:63:fa:cc:c7:45:
                    73:74:14:cb:2d:1f:32:19:51:91:b7:21:b2:3a:f7:
                    e8:2a:14:cc:8d:cc:05:fc:6b:1e:a1:88:5c:6e:5f:
                    b1:54:f9:a0:a8:37:7a:c2:12:5f:a6:8b:05:c3:fb:
                    40:cf:94:cb:59:b0:0d:ba:c5:d9:86:13:3d:ea:41:
                    3a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:FF:30:17:08:5F:9E:FA:1D:E6:88:1F:D3:C7:8F:D8:16:9E:EC:90
            X509v3 Authority Key Identifier:
                keyid:56:46:E0:7A:0F:60:25:F1:E2:60:F1:C4:99:6F:9A:68:1B:29:20:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vkbgeg9gJfHiYPHEmW-aaBspIHE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:86:56:c3:1a:6f:bc:d0:d0:3d:77:35:ea:b9:40:78:74:24:
         d4:cd:d8:1a:b7:14:40:e3:47:91:b7:df:b6:7b:5a:c8:f2:13:
         3d:b9:56:5e:4d:4b:9a:cc:09:89:be:84:7d:29:f8:7a:d5:ef:
         16:f4:10:71:b1:a8:fe:4c:98:ce:77:59:ff:ca:48:bd:b7:75:
         d7:38:31:06:4e:f0:94:79:19:23:25:b1:0b:10:10:fa:56:26:
         ef:25:c8:82:15:b1:fb:9b:b4:39:4f:79:42:b9:35:07:c2:2e:
         af:d8:f5:a7:51:2c:b3:b0:4b:73:60:99:ba:02:35:fd:ef:71:
         14:b1:f8:16:7a:c7:9b:9c:21:67:bc:96:9c:58:b1:d7:e4:f2:
         3b:5f:5f:f0:e2:57:81:a9:5d:18:83:9e:9d:3f:24:a8:f4:f1:
         f5:0f:18:88:90:0c:af:1c:0e:72:7f:0f:8d:aa:7b:22:a2:fe:
         bd:de:f5:be:83:16:97:a9:61:89:01:ed:7b:c5:73:7b:d1:9c:
         76:33:ba:77:fc:20:cb:79:f5:63:c9:b9:33:d7:9e:bb:9f:a3:
         ba:95:1c:98:99:3f:e6:9d:4d:df:44:c9:5c:30:38:ca:3a:e0:
         8c:c0:90:04:e7:85:15:fb:b6:df:b7:7d:52:5b:00:39:4e:78:
         51:39:9f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:19:02 2026 by rpki-client