Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft
File:                     vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft (raw, json)
Hash identifier:          +4PVPaFpjPLc7VGwyP1kRxU33Ih3bh1IKYoqg9JN5JA=
Subject key identifier:   6A:DA:B0:52:25:2E:DF:5B:67:78:A6:F7:D9:3C:C5:CA:5F:49:13:3A
Authority key identifier: BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08
Certificate issuer:       /CN=A918E6B7/serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708
Certificate serial:       10E9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft
Manifest number:          10A8
Signing time:             Mon 02 Mar 2026 17:20:53 +0000
Manifest this update:     Mon 02 Mar 2026 17:20:53 +0000
Manifest next update:     Mon 09 Mar 2026 17:20:53 +0000
Files and hashes:         1: vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl (hash: BU5jISZIWfd9a9DSEXkE/3Gx1KLZe5hwJQAy7Q/ljHg=)
                          2: F4D5953246AF11E9A68E7652C4F9AE02.roa (hash: sxxBQXaxmx2/mhExro9TLoIXfWeEVD4qaorx3l/HsBQ=)
                          3: 1568A012213C11EEA25DBF55C4F9AE02.roa (hash: sRW4qj4RQsjO0u1DDYNLTyYoXxRig9f6VKT6JhSAD6E=)
                          4: 5F6DA23A46B111E98B793856C4F9AE02.roa (hash: vrAJ7z1fSpJjGKtrMPh5IwHUZxDG1ko4bALeyyyT95o=)
                          5: 3848F884F23311EE97946A35C4F9AE02.roa (hash: vHFFGav5jT6207ykKhwLk1mYRk+A/3Ad6NJ4mcOs2U0=)
                          6: 5E46267A46B111E98B793856C4F9AE02.roa (hash: alpoJ/dJyOOayO88hPVQWa6n17xwZWeFLTeDr+7hL4c=)
                          7: 6007188446B111E98B793856C4F9AE02.roa (hash: F74p5ch7S9ZemwYmfO7s1urmMOLkTy/KwgLFbRsCsyE=)
                          8: 5EC43E1A213C11EE9DC66056C4F9AE02.roa (hash: UuWF6KeypCIEZVIGweXbl7BvzcdwOy44XbTHZZwKzr8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl
                          rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:22:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4329 (0x10e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E6B7, serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708
        Validity
            Not Before: Mar  2 17:20:53 2026 GMT
            Not After : Mar  9 17:20:53 2026 GMT
        Subject: CN=69a5c6f5-5e0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:0a:44:5c:d6:9b:86:da:a1:91:ee:e1:3f:17:
                    c1:52:41:82:f8:12:6d:a6:ac:36:ab:8f:ea:96:99:
                    ff:64:8d:44:c3:1c:7e:04:f3:58:52:25:51:47:60:
                    4e:e6:4a:7e:1f:c2:83:0c:ee:39:a2:53:13:c3:bb:
                    35:60:87:11:0c:e4:94:ec:24:11:0e:d2:68:38:0f:
                    51:8f:ac:59:54:a5:03:d2:59:44:5d:84:84:0c:e6:
                    b7:9a:21:bd:3e:35:e9:05:e1:30:df:f9:a4:50:c9:
                    5f:eb:4b:9b:83:09:78:85:01:3e:de:9e:0c:8b:2f:
                    69:b6:1f:24:0f:95:86:60:7f:06:01:0d:e4:e6:cd:
                    c3:63:76:f9:d4:49:b8:b6:a7:9f:59:47:34:6f:eb:
                    af:9e:51:0f:f0:da:b4:7c:9f:ff:58:c0:a4:64:56:
                    14:9d:34:60:cc:4c:14:d8:09:ff:dc:7d:af:ab:5e:
                    d6:5d:96:41:df:ef:77:18:fd:28:8c:14:ad:6a:d9:
                    9f:85:e2:d0:82:a1:01:ba:c4:03:1e:1d:b3:2d:f1:
                    ae:96:58:85:1c:9b:1c:dd:d0:cd:65:a1:99:19:d3:
                    1e:5b:b2:e2:d9:32:c3:92:89:f0:c4:8b:a9:de:8e:
                    ac:4c:b0:ba:ef:ce:f9:30:88:fe:ce:cf:99:cc:4c:
                    89:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:DA:B0:52:25:2E:DF:5B:67:78:A6:F7:D9:3C:C5:CA:5F:49:13:3A
            X509v3 Authority Key Identifier:
                keyid:BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:b6:66:62:a5:ae:90:fb:b3:b9:10:57:65:5b:a0:0a:9c:b6:
         16:d3:14:97:61:4c:3a:37:f5:16:01:d3:55:a8:8f:f9:a3:41:
         19:51:5d:95:cb:3a:47:34:64:03:96:cc:24:46:dd:3c:18:80:
         15:3b:75:bc:36:c0:32:09:32:3a:ea:d1:4e:ef:0f:26:ea:b0:
         e7:0a:c9:25:bb:70:fd:14:ca:f3:50:d1:00:77:29:f3:40:19:
         6f:60:b0:4c:95:dd:62:90:e1:1c:03:e2:24:58:b8:78:f1:91:
         97:e8:6f:7f:32:b1:2f:23:73:e2:56:48:c7:06:f6:65:ac:9d:
         87:74:ca:ec:37:15:90:c7:db:14:16:1b:07:e5:1e:f4:bf:c2:
         8f:ff:bb:b2:60:3e:7b:db:a8:a7:1b:c9:ba:6b:c8:ca:92:52:
         84:d2:50:76:1c:3f:b3:0f:8e:74:29:58:fc:7b:f5:af:c1:a1:
         14:23:f4:f4:2f:3b:64:48:03:e2:b6:cf:01:5c:6d:af:e3:47:
         72:17:39:01:3e:f5:c5:21:d6:5f:6c:4b:1e:50:7f:64:2d:83:
         fc:f3:6e:b5:c6:19:1c:22:5f:59:8a:19:71:08:67:8f:ff:4a:
         64:f4:81:64:8a:64:c0:e2:58:32:2a:41:18:3d:1e:c9:57:ec:
         2b:52:9c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:53:45 2026 by rpki-client