Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.mft
File:                     VXcPY6DmX0wvyWrxmLxXhNznikY.mft (raw, json)
Hash identifier:          ZfvNYNIetqrbuh7SK68Tz3XAGywEaP2GKWHQkNC7zHA=
Subject key identifier:   52:FA:E3:1F:80:55:51:88:91:9E:A5:5E:AF:5C:4D:48:F7:A4:FA:AA
Authority key identifier: 55:77:0F:63:A0:E6:5F:4C:2F:C9:6A:F1:98:BC:57:84:DC:E7:8A:46
Certificate issuer:       /CN=A912B75A/serialNumber=55770F63A0E65F4C2FC96AF198BC5784DCE78A46
Certificate serial:       015A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXcPY6DmX0wvyWrxmLxXhNznikY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.mft
Manifest number:          0140
Signing time:             Fri 17 Apr 2026 05:03:46 +0000
Manifest this update:     Fri 17 Apr 2026 05:03:45 +0000
Manifest next update:     Fri 24 Apr 2026 05:03:45 +0000
Files and hashes:         1: VXcPY6DmX0wvyWrxmLxXhNznikY.crl (hash: Jl6mD/LUhIkr5sRO+QZ4Oofby4iJ4jJw8FwXwa29fsI=)
                          2: 887E73265B9A11EF80F47C41C4F9AE02.roa (hash: y6lsTAzxceftnb0UckbxcnuqjkGYgeTxQZKU2zv7Tfc=)
                          3: 3590B0F65B9B11EFB90EBF42C4F9AE02.roa (hash: hSeIp929vHi0Xgq96P+KYhFORbkTXCu0ObyLBiOE7yE=)
                          4: 8A54B9326F0C11EF866A7A83C4F9AE02.roa (hash: Al8YtI295Qv3VLO+dWvpu3tZeFYQjhzt57J20RQFzEM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.crl
                          rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXcPY6DmX0wvyWrxmLxXhNznikY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 346 (0x15a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B75A, serialNumber=55770F63A0E65F4C2FC96AF198BC5784DCE78A46
        Validity
            Not Before: Apr 17 05:03:45 2026 GMT
            Not After : Apr 24 05:03:45 2026 GMT
        Subject: CN=69e1bf31-0ca0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:27:25:ed:60:b2:fc:cb:f9:97:e8:8e:7e:e0:
                    ca:f8:d2:ed:25:51:4e:b0:90:f1:1b:c4:48:85:f5:
                    51:48:d0:77:37:de:64:ac:4a:6b:5b:83:c6:45:f7:
                    af:ed:7a:13:0e:1a:76:1e:49:07:2a:06:58:73:10:
                    e3:b3:09:0c:76:a3:8f:53:82:ed:b0:0d:2c:2b:cd:
                    36:58:37:24:3a:67:a8:1d:17:ce:56:e5:17:4a:49:
                    a1:de:3f:ee:73:c0:ae:2d:e7:3b:9c:a9:30:dc:14:
                    4e:a1:61:96:c5:36:fe:f1:a3:92:5e:ad:4f:ea:5b:
                    95:b0:a4:5e:23:32:0f:23:7f:b4:82:93:c2:ab:36:
                    d9:ee:fe:e7:1a:b9:7e:ff:52:18:f6:fb:f2:1d:ec:
                    35:a4:3a:4e:00:ca:fc:94:ac:68:01:0e:9e:57:ea:
                    77:fb:6e:64:2e:db:59:78:d2:67:7b:80:91:7f:ea:
                    52:38:af:40:8c:d3:45:9a:76:dc:d2:45:4c:d8:3e:
                    e9:be:00:91:9c:57:7a:be:99:42:d4:e4:32:88:88:
                    d6:2a:e8:87:c7:14:61:ab:53:3f:91:a1:3b:46:13:
                    c7:f7:9a:84:08:8b:98:3d:65:27:fc:9f:73:77:f3:
                    7e:72:00:2a:3a:2f:13:bd:9d:9f:c9:67:5b:41:a1:
                    ee:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:FA:E3:1F:80:55:51:88:91:9E:A5:5E:AF:5C:4D:48:F7:A4:FA:AA
            X509v3 Authority Key Identifier:
                keyid:55:77:0F:63:A0:E6:5F:4C:2F:C9:6A:F1:98:BC:57:84:DC:E7:8A:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXcPY6DmX0wvyWrxmLxXhNznikY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:d8:a2:29:f2:55:03:06:de:db:6e:ce:7a:90:a4:6f:0f:35:
         0a:97:e8:59:50:f7:60:32:75:fc:c8:e4:2d:34:87:d1:8a:91:
         5c:1b:3c:db:c6:a7:4f:da:f4:33:12:5a:5a:42:ec:be:7e:a6:
         7c:e8:af:ee:6b:e0:a7:1c:f9:34:77:ad:fc:1e:89:68:ce:0e:
         73:a0:ed:0f:62:5d:03:de:00:2c:60:be:21:ec:ac:ac:f0:d4:
         e8:c2:f4:1e:dd:6b:e7:6d:cd:37:f0:50:85:f1:2a:5f:86:92:
         04:36:a7:81:de:50:7d:ca:27:15:11:1b:77:38:0c:24:2b:04:
         8b:55:6d:cf:f7:f4:1d:1d:d3:5b:6d:83:01:17:c4:a2:ec:68:
         a1:45:fd:3d:89:2b:c5:e2:3e:ba:1d:04:fe:fc:72:33:26:f5:
         f3:6b:69:81:01:42:1e:b2:6b:a7:07:08:71:e0:36:14:0a:65:
         4f:ef:bc:da:18:70:bd:f8:e9:c6:95:d9:58:5f:1f:b3:f3:20:
         a5:76:59:1c:af:ab:eb:41:48:c5:e8:53:0c:c9:29:2f:e5:46:
         ae:12:5c:0c:6c:17:d7:91:45:40:10:1a:11:f0:44:19:ba:b3:
         2e:65:f8:d1:f1:5c:ed:5e:b9:9b:46:57:75:85:3d:41:24:f6:
         f5:aa:12:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:43:32 2026 by rpki-client