Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft
File:                     VNOpVcw0GoQYFajN6hkK6lEC384.mft (raw, json)
Hash identifier:          JTrM/cjolS6jeL3tOl/MnUKQsm+iwbkLU2G+eD9xfGk=
Subject key identifier:   34:39:DD:29:D9:14:59:E7:AD:97:74:B1:71:E7:6A:2F:00:F6:DC:8D
Authority key identifier: 54:D3:A9:55:CC:34:1A:84:18:15:A8:CD:EA:19:0A:EA:51:02:DF:CE
Certificate issuer:       /CN=A91C1FAC/serialNumber=54D3A955CC341A841815A8CDEA190AEA5102DFCE
Certificate serial:       0D0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft
Manifest number:          0D03
Signing time:             Fri 12 Jun 2026 18:13:39 +0000
Manifest this update:     Fri 12 Jun 2026 18:13:38 +0000
Manifest next update:     Fri 19 Jun 2026 18:13:38 +0000
Files and hashes:         1: VNOpVcw0GoQYFajN6hkK6lEC384.crl (hash: 49fUOqGUC8AeNypZxiaMB+hhcICKZqItRgvMUGeuIMQ=)
                          2: 86B7FE9005FF11EAB499A845C4F9AE02.roa (hash: CimA7kcPi/5547nh1YW65CDbGdKlvu8eSXBt/kVLyoc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.crl
                          rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 18:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3340 (0xd0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1FAC, serialNumber=54D3A955CC341A841815A8CDEA190AEA5102DFCE
        Validity
            Not Before: Jun 12 18:13:38 2026 GMT
            Not After : Jun 19 18:13:38 2026 GMT
        Subject: CN=6a2c4c52-1dd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:62:a1:6e:34:ac:dc:93:a8:14:a5:3d:69:8e:
                    38:cf:07:3c:c8:50:af:da:19:69:39:1b:22:56:f1:
                    d2:db:c0:75:24:cf:d8:50:00:05:31:0e:1d:d6:f6:
                    d1:2b:13:81:8b:90:1f:98:f8:9a:34:b7:cd:67:bf:
                    8e:e9:b7:ea:77:c8:2e:81:fc:54:6c:ba:e1:d2:6e:
                    d1:e9:8a:89:ef:b1:98:7e:0f:e2:d0:43:fb:41:15:
                    59:84:d3:01:ae:50:bb:67:24:f8:84:ed:1f:05:d5:
                    0c:65:16:fc:c5:d0:3a:66:03:b5:b5:c9:12:fd:61:
                    37:45:19:69:a9:e6:63:50:3a:3b:c9:3d:7b:56:60:
                    40:55:f9:91:6c:34:44:d8:3a:24:54:72:2d:cd:a0:
                    fd:26:3b:9f:c4:b1:1f:ba:27:ab:cf:79:e1:85:f8:
                    b7:de:bf:3a:2f:4f:6f:f9:a3:36:b0:52:10:d1:66:
                    27:83:1b:6c:dc:06:b9:7e:e0:ff:b2:8a:f4:39:66:
                    40:7e:2f:4d:a0:52:c3:02:57:85:ec:40:f5:44:f7:
                    d3:3b:fe:19:56:f4:5a:fd:97:8c:40:fb:39:54:43:
                    ef:2c:4a:61:f8:c8:19:12:3e:fa:d2:dd:60:2d:ba:
                    d1:9e:1d:41:37:fb:57:e3:10:54:28:bc:26:0c:3b:
                    67:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:39:DD:29:D9:14:59:E7:AD:97:74:B1:71:E7:6A:2F:00:F6:DC:8D
            X509v3 Authority Key Identifier:
                keyid:54:D3:A9:55:CC:34:1A:84:18:15:A8:CD:EA:19:0A:EA:51:02:DF:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:0a:5a:57:a7:14:3d:53:65:d2:ec:bc:d8:4a:f6:b5:91:bd:
         e3:c3:21:9c:58:3e:d0:59:60:dd:63:d0:3b:e2:2a:f3:d7:0d:
         a7:c5:6c:34:1b:10:eb:42:75:81:f5:99:c3:30:18:b9:bc:eb:
         02:37:0c:97:6a:b1:1c:59:8f:ef:64:0f:70:bb:41:02:57:58:
         e8:06:7f:ba:d2:14:1f:33:2c:08:50:17:5a:19:be:34:bc:8f:
         af:9d:b4:e5:0c:ad:62:f7:11:86:55:4f:19:68:fa:94:1c:59:
         d0:8a:96:99:ac:17:c7:3c:d2:06:08:21:d3:98:6b:6d:f9:1e:
         35:a6:e4:82:80:7f:d4:c4:1e:7a:20:fb:80:5a:97:b7:a4:2b:
         f2:ec:f7:77:4d:02:a8:ff:bd:7e:16:ad:51:5b:77:7f:04:6a:
         33:85:dd:6a:0e:78:62:ac:a1:3e:04:09:97:11:c6:0b:32:a1:
         aa:4d:c9:d1:dc:34:19:df:07:7e:0c:ec:fc:6e:f6:9e:4a:74:
         94:c9:fd:7d:ac:13:f8:e3:03:cd:86:00:c4:e2:ce:c0:24:20:
         f8:8f:20:d6:00:5c:bd:07:35:c8:85:01:4b:fd:d1:85:e2:db:
         1d:fa:d4:e0:a4:46:26:11:fa:94:e1:6b:f5:8c:c4:21:f9:dd:
         07:d1:a1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:29:05 2026 by rpki-client