Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/Vjyk2WhTHogMNEo9UpUNDdPnG40.mft
File:                     Vjyk2WhTHogMNEo9UpUNDdPnG40.mft (raw, json)
Hash identifier:          6HNaSOdPfnxk0iqiF5xjpiMrlJcWpyyHxRspFPKFwPQ=
Subject key identifier:   CD:8E:09:9D:C7:16:03:D1:91:61:0E:CC:96:49:B6:78:0D:77:A0:9B
Authority key identifier: 56:3C:A4:D9:68:53:1E:88:0C:34:4A:3D:52:95:0D:0D:D3:E7:1B:8D
Certificate issuer:       /CN=A91F83B6/serialNumber=563CA4D968531E880C344A3D52950D0DD3E71B8D
Certificate serial:       14
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vjyk2WhTHogMNEo9UpUNDdPnG40.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/Vjyk2WhTHogMNEo9UpUNDdPnG40.mft
Manifest number:          0122
Signing time:             Mon 27 Jul 2026 08:07:54 +0000
Manifest this update:     Mon 27 Jul 2026 08:07:54 +0000
Manifest next update:     Mon 03 Aug 2026 08:07:54 +0000
Files and hashes:         1: Vjyk2WhTHogMNEo9UpUNDdPnG40.crl (hash: Ww0NvTDTLHQxoALC6llQ01rWz5SYkoC4JhepWIosywY=)
                          2: EC090920735211F18A4BA3827BEE528E.roa (hash: QC9smXpEMOK3nrXjfljc0rRWfS1Dkmjip0GiD4TfguE=)
                          3: ED201F92735211F18A4BA3827BEE528E.roa (hash: YFYwfIKijDnRvlm19fu/WqR9dhjYqqwvizBn8uO3FcQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/Vjyk2WhTHogMNEo9UpUNDdPnG40.crl
                          rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/Vjyk2WhTHogMNEo9UpUNDdPnG40.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vjyk2WhTHogMNEo9UpUNDdPnG40.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 08:07:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F83B6, serialNumber=563CA4D968531E880C344A3D52950D0DD3E71B8D
        Validity
            Not Before: Jul 27 08:07:54 2026 GMT
            Not After : Aug  3 08:07:54 2026 GMT
        Subject: CN=6a6711da-a267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c2:ec:ef:b4:87:58:fe:cd:07:af:98:b6:6b:
                    b2:6d:cf:5f:51:b1:b2:09:02:de:a4:a7:bb:7f:a5:
                    26:38:11:7c:08:1e:77:d2:27:2f:8a:75:71:cb:8c:
                    0c:85:8c:5f:6b:b1:1e:f6:37:16:5c:62:db:92:9a:
                    6d:f0:59:c2:1c:ac:f9:00:e6:de:ff:24:bf:cd:3e:
                    5a:18:81:1f:2f:92:98:81:9b:b8:33:21:e5:19:50:
                    6d:42:62:47:b8:05:f7:13:3e:5a:0e:81:fc:95:ce:
                    58:13:1b:bd:ac:93:05:41:2c:1e:d0:ea:c3:ac:28:
                    b5:0e:bf:9c:9e:fc:f1:d5:49:ab:ae:ec:76:31:71:
                    f7:44:8e:4e:42:72:b7:e6:da:a8:a9:60:74:0f:19:
                    3c:d7:75:19:84:bf:3f:e8:66:c3:34:4a:54:20:ae:
                    07:5f:8e:f5:70:fe:1d:fc:b8:54:bb:cf:5a:91:de:
                    ef:8d:2f:97:68:14:92:f1:64:bc:72:4f:11:6d:d8:
                    ec:17:15:16:36:4a:57:40:55:b0:88:e0:0a:51:ed:
                    0b:58:c4:bf:1f:70:8c:20:3f:c3:2e:13:e1:38:36:
                    1f:e0:52:c5:4a:50:b0:f8:66:b7:5f:a9:e8:4d:97:
                    f6:fc:73:10:8b:8d:7c:a5:30:e9:47:63:1e:3f:cf:
                    de:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:8E:09:9D:C7:16:03:D1:91:61:0E:CC:96:49:B6:78:0D:77:A0:9B
            X509v3 Authority Key Identifier:
                keyid:56:3C:A4:D9:68:53:1E:88:0C:34:4A:3D:52:95:0D:0D:D3:E7:1B:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/Vjyk2WhTHogMNEo9UpUNDdPnG40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vjyk2WhTHogMNEo9UpUNDdPnG40.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/Vjyk2WhTHogMNEo9UpUNDdPnG40.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:da:d1:2c:a2:b2:cd:ca:78:8e:45:a8:5d:99:47:00:16:c9:
         18:6c:a1:ab:ac:f1:16:24:6c:79:28:58:1e:26:d2:c7:9d:ec:
         98:e2:06:f9:b5:45:e0:e3:f0:48:80:75:d8:a8:65:75:5d:4d:
         94:cb:84:03:bf:ec:78:56:6e:1a:8a:74:31:75:dd:ff:0b:d8:
         64:e1:bc:b8:b5:a4:35:8c:f6:2d:f6:b4:a7:a3:f4:51:19:98:
         c5:c0:6f:9e:cb:f4:fa:8f:ab:1d:05:20:46:f4:3a:ec:3b:97:
         6f:d7:df:dc:3f:30:ff:09:47:c5:65:8a:8b:76:9c:be:27:bc:
         20:02:07:5c:55:aa:9b:7b:35:d5:a1:f3:e6:83:34:49:7d:c8:
         f0:7f:49:8b:e3:fa:b5:a0:c9:8c:da:b3:e0:52:27:9f:e2:49:
         24:42:c2:d2:d6:df:b2:6c:15:76:1d:d8:5d:eb:6c:f3:07:dc:
         66:e8:84:8f:15:5a:6b:51:79:45:6b:82:2b:54:b6:ff:bf:de:
         ef:96:49:f9:0d:a6:eb:63:b7:98:ea:75:19:ec:1e:5a:29:00:
         82:bc:02:58:47:de:13:dd:d2:21:30:5a:1a:8c:b3:ca:7c:aa:
         18:44:a2:ad:35:71:5d:dd:5b:14:99:38:fd:d5:f8:fe:72:37:
         e3:40:e8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:06:39 2026 by rpki-client