Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.mft
File:                     vj-BOyAv-wo4L3N5aO4WZZjg6Ks.mft (raw, json)
Hash identifier:          w2Hadn9U30G8adFg96P9tIxXyz0nC0Ah3P6Mtk7+uRg=
Subject key identifier:   9F:4E:43:D0:04:98:50:1E:4B:77:0C:92:C6:E3:D4:41:4F:13:FA:83
Authority key identifier: BE:3F:81:3B:20:2F:FB:0A:38:2F:73:79:68:EE:16:65:98:E0:E8:AB
Certificate issuer:       /CN=A91911EB/serialNumber=BE3F813B202FFB0A382F737968EE166598E0E8AB
Certificate serial:       0130
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.mft
Manifest number:          0122
Signing time:             Sun 01 Mar 2026 06:52:23 +0000
Manifest this update:     Sun 01 Mar 2026 06:52:23 +0000
Manifest next update:     Sun 08 Mar 2026 06:52:23 +0000
Files and hashes:         1: vj-BOyAv-wo4L3N5aO4WZZjg6Ks.crl (hash: T7Zymum7HDqRJFqzbwd1pUrMW2Kxq0WduwynwYl6D5E=)
                          2: 9CF17DD669A911EFBF66800FC4F9AE02.roa (hash: bBT8gdGhlwg5r06wlUXlbf1qWwPVmNNVH6Tp4yfxfVE=)
                          3: 9BC7782069A911EFBF66800FC4F9AE02.roa (hash: A3vIJwUMYtfFutVYOqaUZlkIJqgqL/aJPc4cakn1uMQ=)
                          4: 4978358A70E011EF8CDC2330C4F9AE02.roa (hash: uWOdhRYcncT/3w5J6lEkhO72ABKA151UX0ndXBDbx3E=)
                          5: 9C594FD469A911EFBF66800FC4F9AE02.roa (hash: LB+IcduN6puMn/RBrX77+95EeodFJyL3pQbIzRhkuAc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.crl
                          rsync://rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:52:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 304 (0x130)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91911EB, serialNumber=BE3F813B202FFB0A382F737968EE166598E0E8AB
        Validity
            Not Before: Mar  1 06:52:23 2026 GMT
            Not After : Mar  8 06:52:23 2026 GMT
        Subject: CN=69a3e227-5f6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:81:a0:0e:c2:8d:a2:86:e0:2b:16:74:14:18:
                    8c:4e:6d:00:ae:cb:25:95:56:1b:d5:e9:1a:f7:45:
                    af:84:3c:cd:cb:1d:68:d4:1a:f9:56:f3:50:d8:2f:
                    60:1d:0c:2f:34:c6:8c:7b:4a:e7:5a:cb:5c:57:71:
                    e2:dd:00:2a:e8:bf:1c:07:d5:72:3e:23:5e:e9:d7:
                    7a:6a:98:84:65:e8:28:9f:02:7c:9b:bc:66:e8:18:
                    98:d6:59:f0:2b:6c:73:cc:d7:6d:8e:5b:b5:8e:61:
                    ce:17:c4:b0:04:5f:10:10:e3:c0:91:08:fa:57:b2:
                    25:83:f6:fd:22:d4:c1:0b:11:4e:22:98:71:4f:23:
                    6f:4b:e5:81:0a:db:a7:00:27:fb:ec:9f:9f:f2:5d:
                    7c:df:85:3c:9e:d4:09:62:57:00:76:2a:65:12:4a:
                    9f:fb:52:c8:d2:f4:9c:14:62:a3:7d:71:14:ed:6e:
                    b1:57:be:f2:71:94:c0:79:56:38:8d:18:4a:d7:62:
                    76:88:4c:ba:0f:5c:e5:3d:c4:a5:1f:ff:87:c8:5a:
                    86:38:16:39:d1:d2:98:ee:4a:f2:c1:d7:38:90:b6:
                    9a:21:24:b4:a5:c8:e1:16:68:fa:4d:55:fa:70:e6:
                    ed:1f:2a:80:b8:49:fd:96:e3:c2:c1:67:e5:c2:48:
                    77:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:4E:43:D0:04:98:50:1E:4B:77:0C:92:C6:E3:D4:41:4F:13:FA:83
            X509v3 Authority Key Identifier:
                keyid:BE:3F:81:3B:20:2F:FB:0A:38:2F:73:79:68:EE:16:65:98:E0:E8:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:01:d3:4e:ee:f7:0b:bc:6e:92:df:2e:2e:b8:34:45:f8:7c:
         3d:bb:48:29:96:0a:93:c0:d3:c7:53:d4:9d:4a:3c:e2:2f:23:
         03:de:33:24:68:aa:bf:59:b0:d2:3f:b3:b1:a0:05:ac:0f:c2:
         c9:18:eb:5e:85:45:f1:dd:e5:59:3e:9e:2d:bc:2f:0e:cf:b8:
         3c:f0:87:a3:59:39:f2:da:c0:42:42:8b:cf:b4:bd:71:da:97:
         0c:b0:52:26:a4:8e:78:c0:d5:02:3b:cf:eb:55:f1:5b:6c:de:
         dd:87:88:a8:a6:82:d1:da:30:ea:40:9d:bb:8b:67:ff:a8:f1:
         18:83:ab:77:26:f1:53:a0:89:7d:c7:f6:7f:95:bb:ab:b1:3e:
         a6:d4:6a:3c:f5:8b:76:ba:ec:01:37:85:56:b7:38:a4:81:29:
         65:77:0a:2d:87:f5:89:b9:a8:00:0e:ee:4b:98:83:70:61:68:
         41:03:6c:70:22:6b:25:2b:e3:2b:f0:04:c2:9e:08:ae:d8:01:
         f5:6d:ea:b7:7d:2a:8a:ca:96:2a:47:d7:9f:a7:b7:69:6d:4c:
         44:91:d3:64:a4:0a:5b:11:eb:bf:78:26:2f:11:23:66:77:86:
         db:a8:1e:8a:2c:7b:70:63:b4:57:0c:f7:1e:d7:24:c4:23:70:
         d4:9f:43:95
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICATAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTExRUIxMTAvBgNVBAUTKEJFM0Y4MTNCMjAyRkZCMEEzODJGNzM3OTY4RUUxNjY1
OThFMEU4QUIwHhcNMjYwMzAxMDY1MjIzWhcNMjYwMzA4MDY1MjIzWjAYMRYwFAYD
VQQDEw02OWEzZTIyNy01ZjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAl4GgDsKNoobgKxZ0FBiMTm0ArssllVYb1eka90WvhDzNyx1o1Br5VvNQ2C9g
HQwvNMaMe0rnWstcV3Hi3QAq6L8cB9VyPiNe6dd6apiEZegonwJ8m7xm6BiY1lnw
K2xzzNdtjlu1jmHOF8SwBF8QEOPAkQj6V7Ilg/b9ItTBCxFOIphxTyNvS+WBCtun
ACf77J+f8l1834U8ntQJYlcAdiplEkqf+1LI0vScFGKjfXEU7W6xV77ycZTAeVY4
jRhK12J2iEy6D1zlPcSlH/+HyFqGOBY50dKY7krywdc4kLaaISS0pcjhFmj6TVX6
cObtHyqAuEn9luPCwWflwkh3twIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ9OQ9AE
mFAeS3cMksbj1EFPE/qDMB8GA1UdIwQYMBaAFL4/gTsgL/sKOC9zeWjuFmWY4Oir
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTFFQi9FREE5NzJCMjY5
QTIxMUVGQUUzQUIzNUFDNEY5QUUwMi92ai1CT3lBdi13bzRMM041YU80V1paamc2
S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZqLUJPeUF2LXdvNEwzTjVhTzRXWlpqZzZLcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MTFFQi9FREE5NzJCMjY5QTIxMUVGQUUzQUIzNUFDNEY5QUUwMi92ai1CT3lBdi13
bzRMM041YU80V1paamc2S3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACwHTTu73C7xukt8uLrg0Rfh8PbtIKZYKk8DTx1PUnUo84i8jA94zJGiqv1mw
0j+zsaAFrA/CyRjrXoVF8d3lWT6eLbwvDs+4PPCHo1k58trAQkKLz7S9cdqXDLBS
JqSOeMDVAjvP61XxW2ze3YeIqKaC0dow6kCdu4tn/6jxGIOrdybxU6CJfcf2f5W7
q7E+ptRqPPWLdrrsATeFVrc4pIEpZXcKLYf1ibmoAA7uS5iDcGFoQQNscCJrJSvj
K/AEwp4IrtgB9W3qt30qisqWKkfXn6e3aW1MRJHTZKQKWxHrv3gmLxEjZneG26ge
iix7cGO0Vwz3HtckxCNw1J9DlQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:00:17 2026 by rpki-client