Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.mft
File:                     vgp-rCoKt52-BO5kAC1UgnWkzKY.mft (raw, json)
Hash identifier:          9M8dGUpfBgBwlxSlLWpx3gybsnOZZjamKdkfHSRBz+o=
Subject key identifier:   34:99:41:F9:D2:BF:DB:C8:B4:9B:7F:4A:7F:6C:21:96:90:18:A4:21
Authority key identifier: BE:0A:7E:AC:2A:0A:B7:9D:BE:04:EE:64:00:2D:54:82:75:A4:CC:A6
Certificate issuer:       /CN=A91C769F/serialNumber=BE0A7EAC2A0AB79DBE04EE64002D548275A4CCA6
Certificate serial:       021C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgp-rCoKt52-BO5kAC1UgnWkzKY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.mft
Manifest number:          0216
Signing time:             Fri 17 Apr 2026 02:36:57 +0000
Manifest this update:     Fri 17 Apr 2026 02:36:57 +0000
Manifest next update:     Fri 24 Apr 2026 02:36:57 +0000
Files and hashes:         1: vgp-rCoKt52-BO5kAC1UgnWkzKY.crl (hash: Qb9JEGDCnH+m82SmIlJshvlAwUVYd+i6v5kAFncfKB0=)
                          2: 0A469648099611EEB1AA195CC4F9AE02.roa (hash: /TgdYccSrgV/wS8wSr/QJm7tUdYZcbb5hDBslMgQWF8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.crl
                          rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgp-rCoKt52-BO5kAC1UgnWkzKY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:36:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 540 (0x21c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C769F, serialNumber=BE0A7EAC2A0AB79DBE04EE64002D548275A4CCA6
        Validity
            Not Before: Apr 17 02:36:57 2026 GMT
            Not After : Apr 24 02:36:57 2026 GMT
        Subject: CN=69e19cc9-5f2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:77:5f:3c:5b:21:80:7d:1e:06:41:e0:95:09:
                    81:3a:1d:cc:dd:31:46:9b:b0:4a:a5:2b:23:6a:e0:
                    46:29:7f:93:72:99:a8:c6:fa:60:d7:58:fa:df:f5:
                    fa:65:95:03:2a:db:70:72:4f:38:4e:c7:63:45:81:
                    da:b8:5f:e7:17:b9:e8:95:a7:9f:8c:03:e1:2c:20:
                    c1:45:17:e4:dc:f0:f3:b8:4c:c8:ef:19:02:5c:6a:
                    14:36:e6:05:2b:35:4e:97:8d:c4:c9:8f:4e:ad:a1:
                    86:2a:41:6b:ca:e7:78:f0:24:36:f5:52:73:4d:42:
                    45:10:e8:99:fa:16:35:04:32:5f:24:7a:88:5e:3a:
                    e2:92:f3:9b:87:ba:3f:af:11:e4:ea:fe:07:4e:d6:
                    e5:5c:fd:f0:c7:03:0e:85:75:2d:0e:be:ad:25:8e:
                    f4:3b:1c:56:7d:1c:1b:0b:44:55:4a:08:e9:b7:d3:
                    d4:5b:0a:de:ea:48:bf:4b:5a:ea:35:27:36:4a:8e:
                    d9:08:5e:fe:2e:d4:e2:fe:97:8b:89:47:4b:2f:db:
                    27:2e:de:0c:fe:57:d3:56:be:6c:61:36:e0:83:f8:
                    b6:75:21:dc:5a:e6:be:3f:3c:c7:bd:a4:f1:6f:c0:
                    eb:90:a8:b6:4f:1a:48:4d:1f:b4:41:ab:3d:ea:0d:
                    97:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:99:41:F9:D2:BF:DB:C8:B4:9B:7F:4A:7F:6C:21:96:90:18:A4:21
            X509v3 Authority Key Identifier:
                keyid:BE:0A:7E:AC:2A:0A:B7:9D:BE:04:EE:64:00:2D:54:82:75:A4:CC:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgp-rCoKt52-BO5kAC1UgnWkzKY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:fa:d5:2c:ec:c0:a5:40:cd:b6:93:98:69:f4:f7:1e:98:5d:
         de:2e:9b:35:da:b3:ba:c1:ad:6b:dd:e9:90:db:67:47:d7:4f:
         3d:0f:87:3b:c6:2c:46:7a:33:82:1d:ef:ce:eb:54:f4:89:77:
         29:b5:cb:c0:79:e8:cc:68:1f:cf:e8:aa:81:5a:7c:3b:f4:1c:
         72:24:f8:8e:8c:ab:1e:61:fe:26:52:71:12:91:fb:08:49:53:
         8f:d5:0b:37:49:88:f2:19:23:8e:55:da:3c:b3:9c:db:b8:e0:
         02:db:4a:10:e5:90:47:30:78:47:3d:39:a4:3b:7c:50:fd:ce:
         f3:57:f7:d8:86:88:b9:63:e7:2f:dd:5c:c5:4c:98:41:32:ce:
         8e:2c:af:93:22:32:a1:1e:70:ea:29:c1:73:ee:8b:57:d8:5e:
         af:81:26:b0:e6:b9:a1:41:e4:26:01:ce:76:ab:b6:50:2d:53:
         53:99:47:9c:02:65:d7:da:de:ff:08:0d:48:d7:fa:7c:a3:19:
         91:7f:99:82:36:b8:d4:5d:99:a5:22:9d:36:1b:71:5a:59:db:
         16:39:0f:b9:43:05:2a:96:bf:98:25:a2:49:71:05:14:d7:f5:
         53:2b:47:a7:bc:1a:79:54:09:2e:82:28:f9:a1:0f:30:5e:90:
         d3:b2:84:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:47:45 2026 by rpki-client