Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft
File:                     vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft (raw, json)
Hash identifier:          Ez/5KhAgFswkLsbqFouoCeZBh2MjyhKsrkRlDYdM3Go=
Subject key identifier:   D9:8A:CE:DF:6B:A6:98:D3:55:41:3F:8E:94:1C:EA:8D:D5:2C:F3:09
Authority key identifier: BE:01:91:37:A8:1D:7E:9C:D9:AF:56:CD:91:C5:87:C2:EF:06:E9:3B
Certificate issuer:       /CN=A91F9E9D/serialNumber=BE019137A81D7E9CD9AF56CD91C587C2EF06E93B
Certificate serial:       01DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft
Manifest number:          01D5
Signing time:             Fri 17 Apr 2026 03:24:54 +0000
Manifest this update:     Fri 17 Apr 2026 03:24:53 +0000
Manifest next update:     Fri 24 Apr 2026 03:24:53 +0000
Files and hashes:         1: vgGRN6gdfpzZr1bNkcWHwu8G6Ts.crl (hash: gCIL8Ndc95JEFcKX17DNfOmrBBTP0Y4kw2BCUWsG7Yc=)
                          2: 3DA5441A070611F1ACA42273223D8C67.roa (hash: n+Kx5YLJVSW5gosUnIscCwbaC3lMeiZQn4J/zNSLjd4=)
                          3: 453686A272BA11F09A607433C4F9AE02.roa (hash: vxtVSqgO0tJzIWUXWRbBUws88DNS2So0GYHbthIwwJY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.crl
                          rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:24:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 479 (0x1df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9E9D, serialNumber=BE019137A81D7E9CD9AF56CD91C587C2EF06E93B
        Validity
            Not Before: Apr 17 03:24:53 2026 GMT
            Not After : Apr 24 03:24:53 2026 GMT
        Subject: CN=69e1a806-1ea4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:4b:c3:20:56:b9:0f:b5:93:f2:04:ee:a5:db:
                    2a:52:fa:77:c8:77:9a:94:df:7a:22:27:df:f1:32:
                    5b:8b:52:7a:a2:ed:a6:18:52:e7:62:2f:c0:fb:b4:
                    75:5e:fd:6a:6c:ee:94:81:42:ab:e5:c4:2e:8c:8f:
                    f5:c2:74:60:13:04:4c:01:31:4b:38:f2:f7:3f:5c:
                    5f:82:1d:64:5a:38:21:cf:c2:f3:40:ce:58:72:ee:
                    e6:c5:fb:a1:71:6f:a5:0f:e4:f1:26:ca:74:3e:cb:
                    ee:e6:c3:ee:93:12:85:28:a9:83:05:9a:9d:ee:67:
                    61:a7:7c:eb:4c:9a:c1:5f:ee:38:4d:9b:f1:6e:97:
                    6b:c8:ac:dc:b9:05:4f:1b:fc:ff:6a:4a:84:a1:6a:
                    a1:06:a8:a0:90:dd:54:ae:1b:c9:60:2e:e8:1e:1c:
                    7c:eb:be:80:1d:a3:35:70:7b:ab:19:ac:4f:9a:87:
                    e1:e4:35:b3:6d:19:37:7d:03:1c:d4:c7:cc:c2:f2:
                    c4:b3:87:25:78:0b:70:d5:88:98:7a:9e:3e:49:4f:
                    55:0c:28:fc:9f:f5:3e:28:d6:5d:e3:33:87:86:99:
                    67:0d:90:74:85:72:03:4a:10:d5:9e:d1:00:b9:f8:
                    22:09:d7:57:27:46:f2:74:e2:b0:da:81:b9:27:59:
                    82:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:8A:CE:DF:6B:A6:98:D3:55:41:3F:8E:94:1C:EA:8D:D5:2C:F3:09
            X509v3 Authority Key Identifier:
                keyid:BE:01:91:37:A8:1D:7E:9C:D9:AF:56:CD:91:C5:87:C2:EF:06:E9:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:a6:a4:26:8c:7d:e8:22:bc:f9:a5:65:82:3d:a3:d7:13:81:
         73:a8:50:92:8a:08:9d:72:c5:22:79:c3:49:64:2c:06:2b:12:
         43:f5:a2:c9:f5:08:a9:86:3b:90:1d:7d:ac:8f:ae:01:8d:c2:
         d6:9e:48:53:2b:33:16:2d:ae:d3:51:8b:3f:bd:86:27:fc:64:
         4a:8c:1c:0e:f0:a6:95:71:6a:3e:4a:01:30:78:9d:be:b7:4e:
         01:fa:4b:94:99:54:e2:3c:0a:aa:31:74:82:07:17:37:d9:df:
         28:7e:23:27:90:35:48:bc:34:a6:66:36:bd:98:ee:3f:43:17:
         4a:d3:b4:a1:99:90:36:a8:b4:20:de:07:22:e5:67:29:04:64:
         ec:e1:a8:36:70:45:bd:68:c3:5a:1c:e7:84:af:57:62:09:11:
         69:17:92:05:97:b5:1b:37:df:86:44:98:01:0b:0b:e6:cf:74:
         f8:1e:ff:2d:04:0f:51:06:93:60:d8:9c:90:86:39:ae:63:9c:
         f5:9f:df:ea:e4:24:b4:28:cb:2e:3a:e4:9e:4b:45:55:6c:4f:
         07:0c:10:04:8b:bf:3a:4e:0d:27:45:11:2b:24:40:3c:85:81:
         fa:f1:49:c3:90:86:48:64:0a:16:63:e7:bd:9c:00:28:97:bc:
         78:f4:95:83
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjlFOUQxMTAvBgNVBAUTKEJFMDE5MTM3QTgxRDdFOUNEOUFGNTZDRDkxQzU4N0My
RUYwNkU5M0IwHhcNMjYwNDE3MDMyNDUzWhcNMjYwNDI0MDMyNDUzWjAYMRYwFAYD
VQQDEw02OWUxYTgwNi0xZWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkUvDIFa5D7WT8gTupdsqUvp3yHealN96Iiff8TJbi1J6ou2mGFLnYi/A+7R1
Xv1qbO6UgUKr5cQujI/1wnRgEwRMATFLOPL3P1xfgh1kWjghz8LzQM5Ycu7mxfuh
cW+lD+TxJsp0Psvu5sPukxKFKKmDBZqd7mdhp3zrTJrBX+44TZvxbpdryKzcuQVP
G/z/akqEoWqhBqigkN1UrhvJYC7oHhx8676AHaM1cHurGaxPmofh5DWzbRk3fQMc
1MfMwvLEs4cleAtw1YiYep4+SU9VDCj8n/U+KNZd4zOHhplnDZB0hXIDShDVntEA
ufgiCddXJ0bydOKw2oG5J1mCDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNmKzt9r
ppjTVUE/jpQc6o3VLPMJMB8GA1UdIwQYMBaAFL4BkTeoHX6c2a9WzZHFh8LvBuk7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUU5RC81MjgyOEIyQTdC
ODcxMUVFQTg0MEYyMUVDNEY5QUUwMi92Z0dSTjZnZGZwelpyMWJOa2NXSHd1OEc2
VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZnR1JONmdkZnB6WnIxYk5rY1dId3U4RzZUcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
OUU5RC81MjgyOEIyQTdCODcxMUVFQTg0MEYyMUVDNEY5QUUwMi92Z0dSTjZnZGZw
elpyMWJOa2NXSHd1OEc2VHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAm6akJox96CK8+aVlgj2j1xOBc6hQkooInXLFInnDSWQsBisSQ/WiyfUIqYY7
kB19rI+uAY3C1p5IUyszFi2u01GLP72GJ/xkSowcDvCmlXFqPkoBMHidvrdOAfpL
lJlU4jwKqjF0ggcXN9nfKH4jJ5A1SLw0pmY2vZjuP0MXStO0oZmQNqi0IN4HIuVn
KQRk7OGoNnBFvWjDWhznhK9XYgkRaReSBZe1GzffhkSYAQsL5s90+B7/LQQPUQaT
YNickIY5rmOc9Z/f6uQktCjLLjrknktFVWxPBwwQBIu/Ok4NJ0URKyRAPIWB+vFJ
w5CGSGQKFmPnvZwAKJe8ePSVgw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:17:22 2026 by rpki-client