Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft
File:                     RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft (raw, json)
Hash identifier:          ZJrYl9hwcoU2zNewzlw11tHyeKYbjFVeNsHuuAIs+tA=
Subject key identifier:   53:97:96:53:D5:24:87:D9:92:AA:C8:14:81:CB:2E:10:28:8F:2F:FC
Authority key identifier: 45:50:C6:90:51:BA:A1:8A:F1:12:DC:76:B5:F5:DF:9E:6B:79:40:D5
Certificate issuer:       /CN=A91C3B8A/serialNumber=4550C69051BAA18AF112DC76B5F5DF9E6B7940D5
Certificate serial:       0C4A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft
Manifest number:          0C21
Signing time:             Fri 12 Jun 2026 18:52:39 +0000
Manifest this update:     Fri 12 Jun 2026 18:52:39 +0000
Manifest next update:     Fri 19 Jun 2026 18:52:39 +0000
Files and hashes:         1: RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl (hash: bz3lDaoIMhZYCrZnJ+2Mf7fcjJGuHGwK3WdG/eRP7IU=)
                          2: C8F47C68CA7D11F08981F02FC4F9AE02.roa (hash: XsMoMWlR8dOzT9d+9n8LNpIjHk3wP8ck0r6vfuxsHZY=)
                          3: CAB386681C3311F19EABC196373D8C67.roa (hash: T/oLtE2mjr0sZTyuKrpEAyn//6fUPu8aClVWAT8HK7Y=)
                          4: C12380C49B0511EDB2F0BD4EC4F9AE02.roa (hash: Q+GkOA+a+PnKQiFeptGmtK8G7ogtHZVeUgG8kpGnI9w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl
                          rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 18:52:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3146 (0xc4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C3B8A, serialNumber=4550C69051BAA18AF112DC76B5F5DF9E6B7940D5
        Validity
            Not Before: Jun 12 18:52:39 2026 GMT
            Not After : Jun 19 18:52:39 2026 GMT
        Subject: CN=6a2c5577-e3a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f5:b2:62:c0:8d:6a:69:43:5b:b1:e6:2a:b9:
                    19:99:27:ab:1a:e3:f5:94:b7:fc:ba:22:2f:a9:50:
                    94:6a:f1:3f:4c:a5:84:16:7b:05:ce:b4:86:ad:62:
                    fc:68:8e:d0:4e:af:45:9d:54:85:13:79:3f:c9:6e:
                    af:23:9b:d2:24:91:06:66:a6:bc:c7:23:ef:e6:03:
                    3f:62:7d:26:32:0e:8f:b2:dc:fa:15:10:9e:00:61:
                    58:22:b2:fe:eb:95:b2:d4:c1:92:a2:d9:be:22:fe:
                    54:a0:f2:7e:a9:a0:c1:59:8f:f4:ec:ab:4c:34:6d:
                    f2:9f:67:da:17:a6:82:46:2e:d7:28:59:b1:ee:32:
                    d4:22:9b:54:1d:e7:b3:54:a8:43:44:aa:14:a8:6b:
                    a7:36:1f:62:5f:cc:3a:db:9b:b6:9b:f4:e5:f1:ae:
                    a0:86:ce:15:a0:bd:54:29:f8:aa:f1:3f:d1:b4:09:
                    e0:ff:8f:f6:ef:a5:ab:35:54:c0:da:53:f5:3f:f4:
                    69:16:a4:53:99:0f:45:12:b2:c7:6d:e4:08:30:f0:
                    1e:3d:f7:a8:1a:0e:d9:1f:c6:44:70:67:da:b0:48:
                    80:de:1d:88:ff:0c:57:4f:4f:0c:ee:e8:99:e3:da:
                    b0:0b:64:1f:3c:a8:61:fe:d8:f6:80:b9:9f:fd:0e:
                    e2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:97:96:53:D5:24:87:D9:92:AA:C8:14:81:CB:2E:10:28:8F:2F:FC
            X509v3 Authority Key Identifier:
                keyid:45:50:C6:90:51:BA:A1:8A:F1:12:DC:76:B5:F5:DF:9E:6B:79:40:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:96:34:5a:37:a1:40:b8:2d:08:bf:15:b7:a8:08:9a:ea:10:
         dd:fb:56:77:7f:82:01:28:51:a8:92:16:ba:18:d0:f7:86:d8:
         d3:35:65:b7:5c:8a:02:53:31:3b:d1:ba:12:d0:a3:87:f4:12:
         99:84:ed:06:37:1d:57:98:0b:4a:1e:09:43:ae:e2:16:92:dc:
         3c:22:7b:b5:40:74:d6:ce:d5:c0:22:85:8a:a0:d3:1a:a7:cb:
         8e:b4:79:c1:17:3e:4d:d3:22:ab:8c:54:6b:ac:cb:c1:54:55:
         4c:2e:77:27:69:58:dd:d3:ed:ed:bf:8c:db:45:6c:58:62:7d:
         03:f5:df:9c:a3:d7:48:ed:ee:cf:f8:0a:a7:4d:f2:2a:bb:50:
         f1:86:4c:4d:8e:68:da:af:df:c2:8e:25:27:bf:1e:cc:b8:8f:
         4c:80:c0:38:b1:2e:48:f3:c6:d4:cd:a4:17:04:f2:72:50:88:
         1f:8a:2d:79:df:97:1b:3b:47:65:c3:5b:d2:cf:0d:c2:f9:38:
         02:41:1f:a9:2b:a0:80:cd:19:f4:cf:31:7b:a4:32:4a:ce:8c:
         fd:d2:fa:1b:6e:7c:bd:bc:72:fb:16:85:dd:82:31:10:8e:e4:
         93:4e:04:75:07:b0:e3:9e:45:a3:f9:e6:a9:2b:b0:fb:fe:d9:
         86:c5:b5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:25:04 2026 by rpki-client