Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft
File:                     vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft (raw, json)
Hash identifier:          6UQj/gWn/djCbsdfKptSNmoBgLOt8n7+6ANj57Rig40=
Subject key identifier:   60:81:E9:62:03:3F:6F:5C:FE:42:7D:08:B8:E0:41:C5:AD:2C:E6:98
Authority key identifier: BD:D5:EB:15:63:38:39:3D:74:4D:AE:2F:C5:32:D5:83:2B:C7:85:BF
Certificate issuer:       /CN=A91ACC41/serialNumber=BDD5EB156338393D744DAE2FC532D5832BC785BF
Certificate serial:       0CF5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vdXrFWM4OT10Ta4vxTLVgyvHhb8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft
Manifest number:          0CEC
Signing time:             Fri 12 Jun 2026 18:19:22 +0000
Manifest this update:     Fri 12 Jun 2026 18:19:21 +0000
Manifest next update:     Fri 19 Jun 2026 18:19:21 +0000
Files and hashes:         1: vdXrFWM4OT10Ta4vxTLVgyvHhb8.crl (hash: Td/dyKOfir9uBuQxIXxRLGPqu8vM/7Vpa9eeKFw3W1c=)
                          2: 674009AE09D811EA9BCFCE1EC4F9AE02.roa (hash: Y/Ibz6yH57us0XVA78pihe3EPEMLDwbUf8iL1FZSQgM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.crl
                          rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vdXrFWM4OT10Ta4vxTLVgyvHhb8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 18:19:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3317 (0xcf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ACC41, serialNumber=BDD5EB156338393D744DAE2FC532D5832BC785BF
        Validity
            Not Before: Jun 12 18:19:21 2026 GMT
            Not After : Jun 19 18:19:21 2026 GMT
        Subject: CN=6a2c4daa-87de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ab:b4:7b:36:ca:e8:43:cc:de:4b:7c:50:53:
                    a2:83:bb:11:90:d0:1b:3d:a1:63:5e:a3:63:ae:97:
                    56:34:25:6d:5f:09:12:24:69:7b:f8:e6:31:45:1f:
                    6e:64:1e:3a:2e:7f:b9:11:ae:39:16:e5:d2:f8:cf:
                    c2:dd:77:a8:04:a4:56:ec:36:ff:aa:7d:92:7b:03:
                    b4:72:84:89:c6:25:ca:6e:5b:f3:d4:5b:2b:91:78:
                    bf:b3:76:0b:97:6d:57:8e:57:c6:f2:ee:72:f2:46:
                    e0:fa:ca:1f:69:12:a4:9f:a9:5a:b3:c5:9f:c7:66:
                    b5:d4:18:66:d1:af:07:c4:57:d9:31:36:79:df:e4:
                    54:3f:cb:37:25:58:17:5c:58:cb:05:7a:39:41:4d:
                    12:42:90:e4:3a:5a:d0:0f:f6:27:5a:29:dd:b6:14:
                    09:e6:47:3c:3b:fd:ba:0b:af:13:92:ca:63:b8:a2:
                    40:ec:f0:20:1e:d1:19:99:5c:58:9d:fd:d4:8e:e7:
                    5e:24:67:5d:8f:39:20:5c:29:cf:a3:10:05:c6:e5:
                    ba:35:01:94:49:cd:34:ce:97:6a:46:fc:fc:31:66:
                    7f:c6:5c:17:3b:bb:75:f5:48:00:a6:9e:1b:9e:d7:
                    b0:3a:8b:32:2c:02:39:12:28:b1:a1:d4:7b:f8:85:
                    a4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:81:E9:62:03:3F:6F:5C:FE:42:7D:08:B8:E0:41:C5:AD:2C:E6:98
            X509v3 Authority Key Identifier:
                keyid:BD:D5:EB:15:63:38:39:3D:74:4D:AE:2F:C5:32:D5:83:2B:C7:85:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vdXrFWM4OT10Ta4vxTLVgyvHhb8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:17:f6:07:4e:02:9d:74:ed:ec:5e:61:a3:30:1e:78:7e:34:
         6e:7b:8e:6f:c4:11:53:18:4a:bd:28:be:b0:1c:cc:1c:9c:f1:
         e0:3c:a8:e8:7b:5c:1a:93:11:9d:eb:1d:74:9d:01:e7:f1:89:
         3a:8c:2c:69:19:96:80:20:5e:3f:9d:80:42:fc:48:07:01:6b:
         ae:5f:39:7f:de:db:13:a4:9e:91:28:d7:ac:9a:09:be:22:f7:
         72:ea:72:fd:3b:01:39:aa:a8:44:45:a6:b2:84:c9:19:0c:0e:
         44:cf:92:22:46:d9:9f:04:d6:5b:ec:22:c1:e9:88:7d:d9:30:
         29:f0:fb:6b:32:a0:31:0d:53:9d:51:4d:22:a4:bc:4f:66:a0:
         07:32:ef:b1:d5:8f:dd:dd:3c:92:c8:7d:92:d0:ca:79:95:3f:
         ee:a2:38:d6:31:c7:c0:5d:0a:d8:62:bf:f9:68:e2:13:36:62:
         51:b8:7e:06:2a:07:a3:ea:74:18:9e:00:f5:79:b6:9a:43:ce:
         a6:f5:40:b4:a8:14:93:1c:81:55:89:65:6f:a3:4f:23:7a:21:
         2e:9d:25:89:d3:3f:54:53:6a:ef:07:e3:a3:44:0b:00:c6:ef:
         cf:b8:61:1b:4d:b5:85:06:9b:05:19:a4:d1:83:14:e1:3e:62:
         20:65:46:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:43:19 2026 by rpki-client