Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF7D7/820E2C74446A11F1A5622F6E97833773/vQ-y-thxIoOac4xJQZN5B-pcP9Q.mft
File:                     vQ-y-thxIoOac4xJQZN5B-pcP9Q.mft (raw, json)
Hash identifier:          so2AH3FNY4KuRodVrze/u9IM2F0UyTa5UafG5dQY0jo=
Subject key identifier:   21:DF:E7:43:1F:F4:CC:50:7D:5E:1B:91:2F:E9:B4:23:99:93:13:BC
Authority key identifier: BD:0F:B2:FA:D8:71:22:83:9A:73:8C:49:41:93:79:07:EA:5C:3F:D4
Certificate issuer:       /CN=A91BF7D7/serialNumber=BD0FB2FAD87122839A738C4941937907EA5C3FD4
Certificate serial:       1C
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vQ-y-thxIoOac4xJQZN5B-pcP9Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF7D7/820E2C74446A11F1A5622F6E97833773/vQ-y-thxIoOac4xJQZN5B-pcP9Q.mft
Manifest number:          1A
Signing time:             Sat 13 Jun 2026 09:02:58 +0000
Manifest this update:     Sat 13 Jun 2026 09:02:57 +0000
Manifest next update:     Sat 20 Jun 2026 09:02:57 +0000
Files and hashes:         1: vQ-y-thxIoOac4xJQZN5B-pcP9Q.crl (hash: bFIx6vngdd7+LGcuKZCZfyifDB2kQ3c3AlVjCx4gGC4=)
                          2: 87331106446F11F1B67309509A833773.roa (hash: XggpXhcMUOMqUyl7v/7VH6Vt4POC4iPTSWjovesXRFA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF7D7/820E2C74446A11F1A5622F6E97833773/vQ-y-thxIoOac4xJQZN5B-pcP9Q.crl
                          rsync://rpki.apnic.net/member_repository/A91BF7D7/820E2C74446A11F1A5622F6E97833773/vQ-y-thxIoOac4xJQZN5B-pcP9Q.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vQ-y-thxIoOac4xJQZN5B-pcP9Q.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 09:02:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF7D7, serialNumber=BD0FB2FAD87122839A738C4941937907EA5C3FD4
        Validity
            Not Before: Jun 13 09:02:57 2026 GMT
            Not After : Jun 20 09:02:57 2026 GMT
        Subject: CN=6a2d1cc1-56c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:18:5b:a7:92:e8:b6:97:3d:69:3b:3d:f5:92:
                    85:cf:a8:a7:05:03:b5:b4:b7:fd:fa:fa:99:f8:9c:
                    c5:49:dc:8f:ab:f0:f1:d8:e0:52:02:ae:4a:46:60:
                    98:4b:5a:01:90:3d:2a:f5:c4:e6:b6:8b:a2:b7:2e:
                    8e:a2:b2:bb:73:ac:d0:be:6e:34:40:5b:3d:80:cf:
                    b2:a1:be:38:b8:43:53:27:00:80:a6:33:ac:3a:b5:
                    61:08:27:cd:b0:bd:aa:6e:93:07:bc:7a:40:81:4d:
                    4a:cd:a1:22:7a:57:87:bf:d4:40:c9:74:f1:c0:b1:
                    65:54:82:d0:c7:58:ea:93:35:37:f8:28:93:cd:a6:
                    1e:1e:da:94:19:72:8e:8f:55:96:f8:b4:69:24:4c:
                    1d:f2:84:ca:c4:af:2a:1d:98:3f:3c:4e:55:af:1a:
                    6b:59:81:bc:58:bf:37:b8:da:26:ae:1f:d9:4a:5e:
                    16:07:d9:1c:12:9c:40:bb:73:c9:98:71:43:34:b8:
                    16:38:cf:34:6b:e9:c9:69:c8:26:73:01:c9:0e:a8:
                    82:97:9e:6d:de:b0:a7:ed:1e:e6:27:78:52:e5:f2:
                    00:5b:41:cd:3f:3a:98:d1:67:1a:b3:18:68:a5:63:
                    0f:cc:ec:f2:3c:21:6e:d1:52:7c:c3:b1:18:13:c4:
                    f1:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:DF:E7:43:1F:F4:CC:50:7D:5E:1B:91:2F:E9:B4:23:99:93:13:BC
            X509v3 Authority Key Identifier:
                keyid:BD:0F:B2:FA:D8:71:22:83:9A:73:8C:49:41:93:79:07:EA:5C:3F:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF7D7/820E2C74446A11F1A5622F6E97833773/vQ-y-thxIoOac4xJQZN5B-pcP9Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vQ-y-thxIoOac4xJQZN5B-pcP9Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF7D7/820E2C74446A11F1A5622F6E97833773/vQ-y-thxIoOac4xJQZN5B-pcP9Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e9:38:37:fb:6b:63:ad:47:01:0a:0f:c5:e5:fc:14:a8:4f:66:
         ad:a0:08:8a:65:8f:a0:15:50:ac:3d:0a:52:db:85:9d:f5:3d:
         07:c7:f6:e0:45:da:72:00:5f:41:c2:e7:a8:b9:99:14:be:b5:
         c6:2c:e7:04:2d:1a:5b:10:51:ac:27:31:b1:f0:23:0b:a6:03:
         6c:50:6f:dc:01:4a:f0:0f:34:02:2d:c2:8b:56:eb:83:1a:f1:
         16:77:ec:5a:e3:03:74:14:64:15:d3:f9:27:9c:34:90:f3:95:
         95:03:57:7e:7a:d0:50:58:b5:d8:2f:1f:db:ed:78:e7:ff:17:
         e3:d2:83:83:d6:23:5b:87:c4:df:e9:bc:42:e3:30:3a:5c:18:
         25:8f:e0:a2:35:ea:cc:6a:dc:1a:2d:75:7f:ff:05:0d:e2:e3:
         99:9d:0b:dd:aa:40:fa:51:21:7d:3e:6c:70:70:c4:09:89:e5:
         f4:a8:2f:11:83:e8:e7:61:10:5a:04:53:cc:75:62:ca:96:8d:
         d9:ff:bd:2f:a9:22:a6:34:5a:ff:50:03:b9:ee:1a:95:cc:61:
         0d:59:51:57:58:5c:7f:a1:fe:10:b5:61:7c:a4:5a:88:67:9f:
         4e:4f:56:2a:c8:ca:59:b5:9e:03:68:72:aa:16:eb:14:47:27:
         d9:4b:41:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:06:30 2026 by rpki-client