Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft
File:                     vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft (raw, json)
Hash identifier:          LwtSPlVaNp4tV2zhmDq41tKLCAOsgrQMruecO57Ayhc=
Subject key identifier:   03:ED:62:4F:69:A6:7F:6F:BF:7C:AB:46:6C:E8:54:AF:BE:7C:79:B9
Authority key identifier: BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08
Certificate issuer:       /CN=A918E6B7/serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708
Certificate serial:       1100
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft
Manifest number:          10BF
Signing time:             Thu 16 Apr 2026 17:15:48 +0000
Manifest this update:     Thu 16 Apr 2026 17:15:48 +0000
Manifest next update:     Thu 23 Apr 2026 17:15:48 +0000
Files and hashes:         1: vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl (hash: Ew4GYVSbHmhn33LsJ1hctnSbjEzulYRWNUKEZjfzIJw=)
                          2: 3848F884F23311EE97946A35C4F9AE02.roa (hash: vHFFGav5jT6207ykKhwLk1mYRk+A/3Ad6NJ4mcOs2U0=)
                          3: 5F6DA23A46B111E98B793856C4F9AE02.roa (hash: vrAJ7z1fSpJjGKtrMPh5IwHUZxDG1ko4bALeyyyT95o=)
                          4: 1568A012213C11EEA25DBF55C4F9AE02.roa (hash: sRW4qj4RQsjO0u1DDYNLTyYoXxRig9f6VKT6JhSAD6E=)
                          5: 5E46267A46B111E98B793856C4F9AE02.roa (hash: alpoJ/dJyOOayO88hPVQWa6n17xwZWeFLTeDr+7hL4c=)
                          6: 6007188446B111E98B793856C4F9AE02.roa (hash: F74p5ch7S9ZemwYmfO7s1urmMOLkTy/KwgLFbRsCsyE=)
                          7: F4D5953246AF11E9A68E7652C4F9AE02.roa (hash: sxxBQXaxmx2/mhExro9TLoIXfWeEVD4qaorx3l/HsBQ=)
                          8: 5EC43E1A213C11EE9DC66056C4F9AE02.roa (hash: UuWF6KeypCIEZVIGweXbl7BvzcdwOy44XbTHZZwKzr8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl
                          rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 17:15:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4352 (0x1100)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E6B7, serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708
        Validity
            Not Before: Apr 16 17:15:48 2026 GMT
            Not After : Apr 23 17:15:48 2026 GMT
        Subject: CN=69e11944-3835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d3:1d:03:f2:de:5d:0b:c7:3f:e2:f4:41:ac:
                    d4:3d:83:a9:80:c3:eb:eb:9c:ab:98:a4:35:05:7b:
                    19:98:9b:e6:07:4b:b2:cd:0b:cb:42:9e:fc:56:44:
                    01:d2:9e:6d:e6:85:2b:7f:14:06:88:79:b8:f4:ce:
                    06:a4:52:43:a7:53:4d:ca:bf:72:79:f9:e0:2c:7b:
                    db:63:55:f2:0c:dc:43:8e:3a:74:9b:0b:a2:40:52:
                    06:af:b1:35:f2:16:f3:89:37:8a:2e:33:1c:67:5d:
                    d0:91:56:c6:7a:03:e2:86:83:9c:3b:d6:b3:ac:67:
                    32:f2:62:db:a5:26:2a:c7:59:e8:7d:89:e7:63:bb:
                    f6:21:34:08:5e:f2:27:dd:11:0c:7e:53:10:4c:2e:
                    45:d6:38:b9:7f:c1:66:b8:88:b4:70:ba:97:64:f8:
                    04:53:81:7d:fc:b0:76:e6:7f:3f:ae:15:60:84:7f:
                    77:09:d9:e5:7c:24:58:9b:18:72:7b:d6:b6:d2:f0:
                    20:57:8f:1f:87:bd:71:92:9d:38:79:e5:d4:e7:5e:
                    f9:d6:7d:93:58:88:60:30:40:11:d1:9f:b9:81:b5:
                    e6:a3:34:59:55:ed:4f:85:a3:53:77:3d:46:ff:de:
                    4e:27:83:46:c6:2d:d7:2d:35:99:60:da:b5:ce:a3:
                    95:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:ED:62:4F:69:A6:7F:6F:BF:7C:AB:46:6C:E8:54:AF:BE:7C:79:B9
            X509v3 Authority Key Identifier:
                keyid:BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:4f:a4:5b:0e:e2:b1:af:ee:54:8d:36:5d:75:b7:2f:2a:e2:
         24:a8:46:80:12:12:aa:34:90:0c:d0:8c:37:d8:7b:d4:b3:68:
         e6:cb:f7:71:10:1b:13:ae:b7:63:9d:05:27:34:48:87:4a:d0:
         d3:c8:33:17:a6:3f:a2:a5:72:db:b6:15:1d:93:e0:88:40:3c:
         91:fd:56:b6:71:f5:f5:0a:3c:2c:38:cf:0d:fe:09:b5:24:52:
         75:50:19:f5:52:d2:ed:2e:91:ca:59:77:75:5b:21:bb:a1:24:
         d5:5d:6f:46:5c:28:0f:7d:b1:c0:8c:d7:17:33:11:9f:a4:1e:
         4f:77:3f:57:ac:a0:c0:c3:c9:94:c9:f5:27:aa:4d:41:6c:04:
         fa:30:fe:0c:21:88:7d:83:c6:b1:8e:33:83:f5:a4:f9:7b:a8:
         b4:a6:ff:74:c4:9c:14:6a:ce:96:27:e7:70:a9:f4:96:f6:14:
         32:dc:bb:f7:7c:21:f6:d6:3f:dd:9e:dd:95:d3:2f:4d:42:a7:
         92:37:f7:e0:1b:1b:97:1d:3d:c7:f9:df:87:c7:3c:b4:d5:5b:
         b7:97:8d:7c:a1:9f:df:5f:15:14:89:82:6b:be:cc:0a:f3:63:
         9e:2f:c7:4e:b3:54:e8:fa:99:f2:5c:33:48:ef:fb:39:6f:2b:
         bb:b5:16:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:25:20 2026 by rpki-client