Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft
File:                     VCRPZF3qDVCWaFgNE46CUnn7Vng.mft (raw, json)
Hash identifier:          xA+6LyD2EnvRH/30l5H8yi5w6uGJWSOBJROwi1E18Wg=
Subject key identifier:   F2:38:91:DE:24:31:13:D9:90:74:94:EE:9C:DE:85:67:F7:2A:1E:A4
Authority key identifier: 54:24:4F:64:5D:EA:0D:50:96:68:58:0D:13:8E:82:52:79:FB:56:78
Certificate issuer:       /CN=A91B624E/serialNumber=54244F645DEA0D509668580D138E825279FB5678
Certificate serial:       0DD1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCRPZF3qDVCWaFgNE46CUnn7Vng.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft
Manifest number:          0DC6
Signing time:             Fri 12 Jun 2026 17:52:42 +0000
Manifest this update:     Fri 12 Jun 2026 17:52:42 +0000
Manifest next update:     Fri 19 Jun 2026 17:52:42 +0000
Files and hashes:         1: VCRPZF3qDVCWaFgNE46CUnn7Vng.crl (hash: yJMgzp1JxWNEMrfySBU7LLkq7SdlwbPz2MrA3ERUsvk=)
                          2: 690390E80FAA11EB8B893F1EC4F9AE02.roa (hash: e/Pn5qPd83tgfAM5gG7LPu5WMIBT6NEqspZed3qdjbs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.crl
                          rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCRPZF3qDVCWaFgNE46CUnn7Vng.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 17:52:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3537 (0xdd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B624E, serialNumber=54244F645DEA0D509668580D138E825279FB5678
        Validity
            Not Before: Jun 12 17:52:42 2026 GMT
            Not After : Jun 19 17:52:42 2026 GMT
        Subject: CN=6a2c476a-f18d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ee:62:e2:18:74:5a:3e:be:83:c6:c8:5e:9a:
                    70:11:42:57:63:22:d7:42:a8:c1:f3:17:da:94:30:
                    20:c0:38:51:db:5a:3d:31:be:46:4a:d1:a9:97:f5:
                    1c:bc:c7:d1:7d:bc:bf:34:be:94:c2:fd:f5:45:ee:
                    82:18:d0:90:5d:ea:04:19:f5:59:cf:4b:6e:f4:21:
                    29:66:b4:fb:fe:35:f9:fc:f9:68:20:49:62:66:b7:
                    3d:ad:48:cf:6c:46:5f:94:89:a9:f9:39:24:1e:ec:
                    8b:90:29:dd:cf:0b:d1:ff:36:32:4e:2d:2e:d8:a9:
                    db:65:a1:05:1d:d3:51:d4:93:77:e9:22:fa:ff:59:
                    6f:6f:6c:b6:c0:fa:18:29:00:3f:2c:5c:e0:b1:1a:
                    5e:cc:44:b2:5f:1a:3b:46:bf:0b:c0:82:46:85:f1:
                    8f:87:80:35:36:5d:a6:dc:fb:8b:db:86:61:82:29:
                    0f:64:8d:04:1e:06:a8:e7:27:fa:25:4b:4e:80:a2:
                    90:3f:68:2d:8f:0c:60:a9:47:35:b9:39:6d:5e:3b:
                    a3:84:25:5d:8f:a6:54:22:ce:72:a4:6b:f1:24:25:
                    be:48:53:21:66:dd:b6:16:25:37:0f:04:bc:e1:c7:
                    50:72:1d:78:69:16:58:33:35:d9:58:18:a4:e2:01:
                    7c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:38:91:DE:24:31:13:D9:90:74:94:EE:9C:DE:85:67:F7:2A:1E:A4
            X509v3 Authority Key Identifier:
                keyid:54:24:4F:64:5D:EA:0D:50:96:68:58:0D:13:8E:82:52:79:FB:56:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCRPZF3qDVCWaFgNE46CUnn7Vng.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:d9:71:4a:4f:c0:c3:d1:31:08:25:8a:9a:c1:19:03:8e:92:
         5c:30:e9:f8:b0:a6:ba:70:b5:9a:a4:80:70:07:eb:f0:6b:d3:
         b1:6e:ba:f2:22:03:01:e1:e0:bc:21:5c:66:de:2e:38:a8:a9:
         a6:c5:4d:93:40:47:60:cd:74:4e:44:8f:f0:8f:e1:1a:62:f1:
         9c:6c:3d:b1:45:f9:3b:a3:60:eb:8b:08:02:81:bc:6a:08:94:
         e2:ae:01:7a:2a:27:08:d9:b4:0b:db:4a:34:da:6e:7c:50:5c:
         a2:9f:54:86:76:56:18:8a:90:04:79:be:32:c6:2d:b8:40:23:
         a5:06:9f:fc:e4:4f:6b:00:14:50:31:18:a5:c1:fb:49:47:90:
         d9:ed:81:b9:b9:dd:49:fd:b3:f4:75:e7:2e:1b:93:b7:65:34:
         3a:be:16:30:67:c7:d9:06:63:27:92:aa:77:3c:34:87:9b:bd:
         c5:8c:8a:a5:2e:3b:ba:e8:72:6a:fd:3b:40:3e:63:0b:ec:30:
         d1:71:92:b6:61:47:53:bd:72:cd:d2:18:0b:33:7f:2a:a5:e3:
         8b:f6:dc:53:3c:66:92:f2:66:7f:64:da:a2:ed:a8:ca:9d:a6:
         3d:04:7e:4e:bb:96:c6:0d:bc:0e:11:43:43:ac:2f:27:a4:1b:
         f4:f6:38:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:17:17 2026 by rpki-client