Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft
File:                     vKs-dvhO1DdC8qCBJCcI55nOG18.mft (raw, json)
Hash identifier:          ItT8fsDAFhjnSAqsOwOfoxV2amYGdN1NnSVOBaKUeA8=
Subject key identifier:   E5:E4:5A:88:5E:26:75:52:3A:FD:2E:84:F1:4E:3B:49:B9:D9:13:81
Authority key identifier: BC:AB:3E:76:F8:4E:D4:37:42:F2:A0:81:24:27:08:E7:99:CE:1B:5F
Certificate issuer:       /CN=A91AC532/serialNumber=BCAB3E76F84ED43742F2A081242708E799CE1B5F
Certificate serial:       01C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft
Manifest number:          01A3
Signing time:             Sat 13 Jun 2026 04:23:08 +0000
Manifest this update:     Sat 13 Jun 2026 04:23:08 +0000
Manifest next update:     Sat 20 Jun 2026 04:23:08 +0000
Files and hashes:         1: vKs-dvhO1DdC8qCBJCcI55nOG18.crl (hash: 3Qz3N8+VP8zA6F6HOT3u4u76cOsoSdPH7EEJbUFdVM8=)
                          2: A0AD48EA083011EF82AFFD44C4F9AE02.roa (hash: 2HF8hzKomEoBRaeHEpMuKIt1BoUXvbnhjONs7ASQa/o=)
                          3: 222F2952038511EFAF036327C4F9AE02.roa (hash: HZRnbyUwQnET2jpBCqochXqkW7Om1vxMBHDxZVfLQkE=)
                          4: E08658208D2D11F09327643FC4F9AE02.roa (hash: Zswp5eu2rF+6Fd4nXskCbsKQjQ2SU+1TTxWHA8wR0Rg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.crl
                          rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 04:23:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 453 (0x1c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC532, serialNumber=BCAB3E76F84ED43742F2A081242708E799CE1B5F
        Validity
            Not Before: Jun 13 04:23:08 2026 GMT
            Not After : Jun 20 04:23:08 2026 GMT
        Subject: CN=6a2cdb2c-24ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:fa:f0:ef:b5:3a:cd:76:a0:e9:36:82:f7:0f:
                    e1:f7:c6:33:28:61:fb:31:21:19:f1:89:50:30:50:
                    cb:86:01:cd:90:2d:e3:5f:18:b4:c3:c7:f8:81:a7:
                    94:05:ea:92:d2:45:11:68:b3:de:8d:be:26:2c:0d:
                    c1:ed:7e:cb:db:46:28:ea:35:b6:24:cd:c2:cd:70:
                    51:72:ae:2d:b7:b2:9d:a4:d0:5d:3f:1a:06:1b:a6:
                    11:73:e2:44:12:ed:89:ab:c2:cf:56:22:41:c3:96:
                    cf:63:bc:fe:f3:8f:98:da:15:06:a9:6d:50:8e:4d:
                    4a:dc:e1:b9:79:71:88:e3:c2:84:20:0b:c4:53:95:
                    af:18:65:8f:76:a2:9c:eb:33:d5:ef:7c:70:f8:85:
                    30:ba:6f:54:cc:48:b9:bc:1e:70:e3:ed:68:58:7c:
                    8f:26:dd:1c:a0:d5:95:d2:ca:a6:75:b7:71:43:e8:
                    8d:83:aa:e9:cf:95:3d:6a:f5:1c:fc:ba:ff:12:a2:
                    36:5b:ed:a6:20:a0:9e:2a:a9:2c:7c:59:08:89:c3:
                    75:97:10:8e:38:2e:1b:41:30:79:7e:fb:4e:eb:52:
                    55:93:ad:9d:d6:04:d6:3a:fc:64:fd:e8:f0:36:ea:
                    e4:6c:0e:fd:67:31:03:87:d5:12:ff:e1:4a:d2:a9:
                    a9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E4:5A:88:5E:26:75:52:3A:FD:2E:84:F1:4E:3B:49:B9:D9:13:81
            X509v3 Authority Key Identifier:
                keyid:BC:AB:3E:76:F8:4E:D4:37:42:F2:A0:81:24:27:08:E7:99:CE:1B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:70:5e:b6:e1:de:e9:8f:ee:3e:69:0b:e8:c6:f1:e2:4f:7c:
         73:9e:40:cb:c4:ff:2b:f0:47:12:39:37:e8:ca:ff:cf:cf:43:
         6b:0f:4c:1d:49:98:9d:23:75:2e:97:bc:b8:ff:f1:df:53:f6:
         b3:c7:9e:73:7c:08:41:61:db:fd:5b:da:0c:1d:bb:ad:06:40:
         9f:d8:1d:88:64:8d:11:ce:17:98:c3:7a:23:d4:f5:7a:a4:43:
         68:38:f3:b1:5c:2b:5c:39:08:28:f6:3e:53:23:39:44:e3:c4:
         16:ab:4a:e6:d1:26:3a:d5:85:e6:24:b5:01:65:64:23:bd:63:
         09:e5:8f:03:61:27:4f:fe:2f:2f:82:f3:a5:1b:7a:9c:3a:3f:
         e5:63:c0:cb:a6:21:a8:fa:76:00:4a:b4:ec:2d:04:76:eb:05:
         fd:7c:50:d8:97:2e:8d:95:d7:b1:8f:80:1d:c7:5e:88:49:96:
         4b:aa:3d:c2:81:9d:46:ef:33:88:41:d6:ef:a0:98:23:82:d0:
         94:fe:9f:42:18:34:8f:18:1f:51:12:bd:ba:74:5a:92:c8:66:
         81:38:dc:86:65:37:5f:2d:b7:c2:d6:06:6d:c8:4f:68:32:5b:
         29:b5:a2:b2:38:c2:f0:36:bd:3a:ec:08:31:75:e4:3d:11:66:
         61:55:ad:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:28:16 2026 by rpki-client