Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft
File:                     vbWSaolrtlGg51QKOYzV7wcUFx8.mft (raw, json)
Hash identifier:          Sg0a+69JBL4xSyvFwoE/G3MFyY6CsU0I9Ioaj4n3tHY=
Subject key identifier:   7D:E1:DB:94:B9:B0:77:64:6E:25:C7:0E:6B:D0:56:2E:FB:D9:18:21
Authority key identifier: BD:B5:92:6A:89:6B:B6:51:A0:E7:54:0A:39:8C:D5:EF:07:14:17:1F
Certificate issuer:       /CN=A916A5CD/serialNumber=BDB5926A896BB651A0E7540A398CD5EF0714171F
Certificate serial:       04F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft
Manifest number:          04E3
Signing time:             Fri 12 Jun 2026 23:49:32 +0000
Manifest this update:     Fri 12 Jun 2026 23:49:32 +0000
Manifest next update:     Fri 19 Jun 2026 23:49:32 +0000
Files and hashes:         1: vbWSaolrtlGg51QKOYzV7wcUFx8.crl (hash: /X03Ix4PmdqzRM8YshYqOHjqzjGC5TJqsPFtr+lPXtw=)
                          2: 66864FCE688011ECAA829E31C4F9AE02.roa (hash: oTwsosYR7qPA588mHLZ56TR8yUV0D8Vyzewy1czbsfc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.crl
                          rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 23:49:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1270 (0x4f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A5CD, serialNumber=BDB5926A896BB651A0E7540A398CD5EF0714171F
        Validity
            Not Before: Jun 12 23:49:32 2026 GMT
            Not After : Jun 19 23:49:32 2026 GMT
        Subject: CN=6a2c9b0c-a885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:bc:ba:4a:fb:f1:4c:f3:b6:cc:5b:95:d8:31:
                    a1:c2:98:38:38:cd:39:cf:bf:15:36:43:a0:5b:df:
                    02:57:68:4c:ee:96:90:ec:90:17:0d:ac:57:a8:f9:
                    3e:d0:f0:e3:11:c4:07:7f:f1:f9:9e:24:c9:32:35:
                    6f:ec:5c:b5:3c:44:af:01:44:74:51:73:c5:37:1c:
                    38:e8:ec:ab:ce:27:24:8a:d7:33:0f:ae:bc:27:64:
                    fa:a3:03:af:9b:60:4a:6a:e0:13:23:3b:23:81:cd:
                    d1:81:cb:3d:c2:b0:66:8f:90:1c:d4:a8:68:db:3e:
                    bd:c8:ce:58:e4:d7:9f:48:03:29:d7:80:91:91:93:
                    f1:27:6d:03:2a:de:42:79:00:83:14:df:ba:ba:79:
                    f8:4e:00:f7:7f:e4:e2:a2:7f:b0:8a:96:19:ae:e6:
                    2c:f2:63:3d:73:c9:d2:fc:aa:92:4e:d0:13:81:8e:
                    c8:bd:0b:e4:62:0d:c1:14:db:44:af:26:8b:94:aa:
                    36:1b:60:55:31:bc:f5:a0:84:b3:30:b8:16:98:4a:
                    80:7a:1c:7e:69:92:a1:c1:c6:8a:00:7b:d7:17:19:
                    5a:9c:c5:cd:b3:8f:57:07:f0:6e:7e:03:fb:12:11:
                    5b:ba:9c:52:be:44:d5:69:eb:26:d9:9e:f6:65:74:
                    55:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:E1:DB:94:B9:B0:77:64:6E:25:C7:0E:6B:D0:56:2E:FB:D9:18:21
            X509v3 Authority Key Identifier:
                keyid:BD:B5:92:6A:89:6B:B6:51:A0:E7:54:0A:39:8C:D5:EF:07:14:17:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:57:00:97:54:b1:a1:ff:bd:01:e2:d5:73:00:23:c6:a9:e1:
         6f:b6:e7:3f:21:98:02:9c:87:9f:64:c5:09:1f:e6:b9:72:fc:
         5e:d2:ab:8f:89:cd:5e:be:d0:5d:86:7b:67:bb:b4:c3:62:69:
         c6:8e:be:14:1d:c9:b7:7d:af:23:8d:e2:73:32:d5:67:ec:d2:
         26:bb:0e:08:46:63:84:31:50:08:13:0b:7e:bb:30:22:e0:f1:
         13:aa:ef:16:b4:c5:33:7f:b5:e7:ec:65:d2:1e:c2:96:ce:0c:
         2f:58:fb:a3:ed:d0:10:a9:35:3d:b5:b4:f5:d9:cc:a7:ae:ba:
         13:b6:05:57:84:66:43:fe:8b:0a:7d:ee:db:a7:0b:50:90:6e:
         fa:6d:7c:fe:2d:9b:39:7a:74:24:9d:59:dd:a3:f2:44:68:99:
         fa:ad:d9:19:03:93:64:0b:38:69:da:9f:66:33:81:9c:7f:f6:
         62:75:bf:ac:10:2d:f5:2c:56:50:59:27:cd:a7:da:54:68:ff:
         72:90:34:c9:cf:fd:87:55:58:78:fc:a6:af:34:ad:f4:7b:95:
         e3:a3:eb:83:14:59:06:76:6e:81:4a:29:f9:86:bc:f5:ed:d5:
         1f:13:58:dc:45:fc:35:32:d6:5e:d7:b9:0f:7b:21:06:71:da:
         0c:5f:8e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:37:01 2026 by rpki-client