Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.mft
File:                     vSG-mDB1QpFtgeD-2fj1MkBJRIA.mft (raw, json)
Hash identifier:          mLKZCIJ8uddzBkijCX0mxU/AsJltb9hxVevTYfOL1s4=
Subject key identifier:   8D:08:62:FB:94:60:98:05:0E:D7:31:E6:0A:0A:82:91:C2:21:D6:42
Authority key identifier: BD:21:BE:98:30:75:42:91:6D:81:E0:FE:D9:F8:F5:32:40:49:44:80
Certificate issuer:       /CN=A9162744/serialNumber=BD21BE98307542916D81E0FED9F8F53240494480
Certificate serial:       01E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSG-mDB1QpFtgeD-2fj1MkBJRIA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.mft
Manifest number:          01DC
Signing time:             Fri 17 Apr 2026 03:15:49 +0000
Manifest this update:     Fri 17 Apr 2026 03:15:49 +0000
Manifest next update:     Fri 24 Apr 2026 03:15:49 +0000
Files and hashes:         1: vSG-mDB1QpFtgeD-2fj1MkBJRIA.crl (hash: +M9sAm0cXc/dy1wnQGDiQL4aaLGBJJs1KwB1/lZiQhc=)
                          2: 1ECF63EE674511EEBD995841C4F9AE02.roa (hash: iThWY1Te53u7qY3P9l4W83gV/0c/JXwrsnbyFaLKk8k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.crl
                          rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSG-mDB1QpFtgeD-2fj1MkBJRIA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:15:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 482 (0x1e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162744, serialNumber=BD21BE98307542916D81E0FED9F8F53240494480
        Validity
            Not Before: Apr 17 03:15:49 2026 GMT
            Not After : Apr 24 03:15:49 2026 GMT
        Subject: CN=69e1a5e5-5695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f3:39:1a:30:70:d4:f1:70:c2:01:f5:c8:2f:
                    40:a5:2b:b8:3b:9d:24:3a:80:03:97:5b:49:f0:7e:
                    62:c9:5e:cb:26:74:cf:bd:82:f7:16:65:f0:9a:a3:
                    f1:0a:ea:e9:45:7a:db:c1:1e:8f:0a:f8:f3:05:96:
                    d1:e2:c6:75:0b:8d:02:9e:51:2a:99:c2:97:2a:58:
                    74:6c:ea:a9:a9:46:72:11:d5:89:b6:a2:a2:6a:01:
                    4d:f6:2f:77:48:7f:fb:06:10:0f:d7:34:8d:18:81:
                    01:77:74:a4:34:82:ab:13:bd:1f:72:6f:0b:6f:e1:
                    c2:8c:59:39:10:95:e5:4d:56:e9:e6:c0:d4:b8:f9:
                    fb:ab:6f:17:65:2b:d4:b8:0a:5f:a1:a9:3d:81:27:
                    71:83:93:07:ce:8a:44:d0:f6:93:67:15:fd:1d:4d:
                    37:81:32:d6:36:5a:dc:62:e9:83:bf:dc:65:9f:3c:
                    14:99:b0:90:e3:20:f9:c9:92:b1:74:36:22:78:a6:
                    be:73:8b:6e:17:9f:88:45:30:ac:36:1f:44:fd:f2:
                    3c:c9:66:e8:4f:22:e0:0d:7d:79:fa:a4:2a:9d:8f:
                    60:15:0e:af:2e:09:1f:45:ee:23:ec:f7:71:59:20:
                    6a:95:6e:e8:6a:18:02:0c:c1:47:03:71:88:bf:ce:
                    20:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:08:62:FB:94:60:98:05:0E:D7:31:E6:0A:0A:82:91:C2:21:D6:42
            X509v3 Authority Key Identifier:
                keyid:BD:21:BE:98:30:75:42:91:6D:81:E0:FE:D9:F8:F5:32:40:49:44:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSG-mDB1QpFtgeD-2fj1MkBJRIA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:d3:7e:f7:9e:57:2f:e0:49:63:df:84:52:df:4e:c6:61:fa:
         e4:b3:2f:6d:42:c6:d0:41:5e:d7:72:43:c8:0f:15:44:cd:fc:
         25:42:6e:df:d0:2b:43:bf:28:b5:6f:28:32:77:7a:09:7d:91:
         92:4a:26:34:bb:f2:34:48:15:a7:d4:fd:ea:aa:76:81:bb:d3:
         02:64:37:a3:b1:64:04:63:11:2d:a6:1b:7b:52:7e:a6:95:c1:
         d6:f7:06:ed:d1:b4:f6:ac:cf:ba:ee:65:57:c2:40:71:a2:0e:
         df:b9:c8:39:53:df:7f:1f:e7:27:e5:fc:b8:76:60:5f:8c:3b:
         7a:ab:c3:6a:10:bb:81:0b:92:73:7f:dc:0a:5a:ec:21:bf:c9:
         c2:c8:c7:b6:b1:18:03:a7:2c:6b:d6:a0:87:61:8f:88:c2:51:
         6f:e6:ce:e7:81:d2:75:f2:85:76:63:b4:9e:78:3a:f9:1d:80:
         18:df:3c:23:a1:bd:11:16:79:15:bd:86:e7:65:ac:d0:45:c7:
         0c:92:1c:7c:98:8b:e5:d7:1e:3f:97:b2:a1:92:f5:59:20:58:
         72:c2:f1:13:e2:c4:2c:43:3d:e9:10:35:e0:b4:81:cf:b4:6a:
         0a:0a:88:1a:d2:b5:e9:44:93:f3:41:88:e6:ba:3b:99:dc:dc:
         1b:cd:44:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:14:06 2026 by rpki-client