Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft
File:                     vNWr2ckcoefyxFVXBbKUBPUFvcU.mft (raw, json)
Hash identifier:          WTIAdtm58iL7fift1KV3xhjXoMX9kSdtOtu4UArQ+Jw=
Subject key identifier:   33:7A:1F:31:63:A8:96:7C:79:9F:79:EE:C8:AF:E6:03:1D:04:56:FE
Authority key identifier: BC:D5:AB:D9:C9:1C:A1:E7:F2:C4:55:57:05:B2:94:04:F5:05:BD:C5
Certificate issuer:       /CN=A912F281/serialNumber=BCD5ABD9C91CA1E7F2C4555705B29404F505BDC5
Certificate serial:       012E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vNWr2ckcoefyxFVXBbKUBPUFvcU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft
Manifest number:          012A
Signing time:             Wed 29 Jul 2026 07:00:17 +0000
Manifest this update:     Wed 29 Jul 2026 07:00:16 +0000
Manifest next update:     Wed 05 Aug 2026 07:00:16 +0000
Files and hashes:         1: vNWr2ckcoefyxFVXBbKUBPUFvcU.crl (hash: nlkV6H7cJ0P8gSotKVaWFvdKPZnS886VQPVjPiQ31fE=)
                          2: 89EA22F0C67011EFAE929D0DC4F9AE02.roa (hash: QoSObG+7a268+sX8T2Z5nD2wpsEf/h3WqHnAbvclosE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.crl
                          rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vNWr2ckcoefyxFVXBbKUBPUFvcU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 06:58:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 302 (0x12e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F281, serialNumber=BCD5ABD9C91CA1E7F2C4555705B29404F505BDC5
        Validity
            Not Before: Jul 29 07:00:16 2026 GMT
            Not After : Aug  5 07:00:16 2026 GMT
        Subject: CN=6a69a501-d897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:02:78:fd:b4:46:84:ff:5b:3e:08:00:09:92:
                    f4:36:5d:da:cd:c2:fd:30:d6:e7:4a:f3:f4:7a:e6:
                    e9:36:cd:1c:74:a0:55:48:42:09:e6:2d:8d:52:8a:
                    49:73:84:f7:ee:55:f3:0e:a1:5c:89:09:5e:88:f6:
                    c3:c7:d8:fa:f1:03:1f:1b:e6:d4:e9:81:75:9f:f2:
                    37:bb:85:fa:6c:16:11:e7:bf:31:33:b4:f7:2c:2d:
                    51:93:1b:3c:d5:78:a5:4d:54:9c:82:62:af:5d:a8:
                    b9:39:9c:5b:d3:77:ba:f1:ee:8d:2f:86:ce:f7:6e:
                    3c:91:cf:39:10:b6:f5:5e:55:22:38:8d:df:f7:4b:
                    4d:d1:70:33:ce:75:40:5b:9b:e1:5d:55:d1:f6:81:
                    bd:aa:a8:cd:34:6f:db:0f:57:e3:a4:4d:a2:8f:21:
                    49:79:e9:f0:9e:b4:69:52:a4:4d:1e:6c:1c:9e:95:
                    09:d0:c9:bc:1b:a7:c1:c0:1a:88:49:72:42:82:f0:
                    7a:9f:50:6e:58:82:03:28:d3:c6:53:f5:d3:c4:09:
                    cd:0b:6d:16:ad:20:6d:c5:30:74:ed:4f:38:09:01:
                    d5:9f:5e:db:a1:70:e6:c7:b4:14:35:ca:fd:da:f3:
                    dd:79:c5:e1:7d:23:a9:8b:43:0a:42:b2:08:f8:6e:
                    af:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:7A:1F:31:63:A8:96:7C:79:9F:79:EE:C8:AF:E6:03:1D:04:56:FE
            X509v3 Authority Key Identifier:
                keyid:BC:D5:AB:D9:C9:1C:A1:E7:F2:C4:55:57:05:B2:94:04:F5:05:BD:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vNWr2ckcoefyxFVXBbKUBPUFvcU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:47:41:d0:f1:4f:ab:50:2c:b2:63:f1:bd:a4:d1:73:7d:cf:
         6c:fc:0e:81:29:4f:9b:f1:76:8c:5f:6c:db:1d:79:b3:6a:4e:
         bb:1f:35:f4:6e:64:dd:fb:27:e0:1f:9b:64:39:e4:fe:53:db:
         8e:f7:fc:f5:eb:ac:45:c0:2a:fc:1f:b7:2f:d3:8a:bc:37:af:
         e0:f8:37:34:33:0b:c4:9c:ba:15:f2:1b:b6:ba:82:60:3f:96:
         64:e8:46:42:6d:ef:ea:12:91:fc:c4:25:70:e0:81:c1:ef:ac:
         fc:68:f7:07:9d:9d:b1:c0:35:d2:d4:4f:75:2f:fa:8f:0a:3b:
         32:b5:e9:c7:fd:04:71:39:c0:a1:74:54:76:1b:d6:f6:29:2c:
         19:c8:81:d5:79:2b:04:f2:e5:2e:c5:e3:e5:f3:3c:aa:53:32:
         61:a0:f7:77:2d:82:5f:4d:7d:5e:33:15:a0:25:b2:2c:19:99:
         95:8d:ad:be:33:82:ec:3d:b1:10:67:d4:47:46:72:c9:83:c3:
         2a:65:c8:0b:c8:78:59:53:08:d3:de:c3:af:7c:56:ea:64:76:
         52:ec:37:a3:a1:48:66:03:7d:8c:91:03:30:b3:15:67:c8:5e:
         ac:1f:72:25:27:55:09:3e:71:a8:07:98:e3:3c:1b:39:30:a8:
         45:b4:f9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:16:54 2026 by rpki-client