Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft
File:                     vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft (raw, json)
Hash identifier:          0ZmITqYpLv+AHsSQZ30yWWRPqiL/EXUc5aA5G6ewlnE=
Subject key identifier:   C8:64:4B:3F:3B:1C:F5:84:C3:EE:0F:70:A1:DA:DC:CF:33:F4:C0:97
Authority key identifier: BE:01:91:37:A8:1D:7E:9C:D9:AF:56:CD:91:C5:87:C2:EF:06:E9:3B
Certificate issuer:       /CN=A91F9E9D/serialNumber=BE019137A81D7E9CD9AF56CD91C587C2EF06E93B
Certificate serial:       0215
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft
Manifest number:          0209
Signing time:             Mon 27 Jul 2026 04:45:05 +0000
Manifest this update:     Mon 27 Jul 2026 04:45:05 +0000
Manifest next update:     Mon 03 Aug 2026 04:45:05 +0000
Files and hashes:         1: vgGRN6gdfpzZr1bNkcWHwu8G6Ts.crl (hash: zbW+bGnrXBBERNKQJYZNHvEm/tKkZVeHY/+vskrtz0w=)
                          2: 06CB0AC26AE011F1AF7EC1267047A888.roa (hash: 91FFd5VQ1GUvnVFlmIU8+Ug11oAeUUwOUC9UDvOOWe0=)
                          3: 3DA5441A070611F1ACA42273223D8C67.roa (hash: 5bZH49LJAnGshgObn97HVHbZgrl3zidwMemvnAadtsI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.crl
                          rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 04:45:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 533 (0x215)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9E9D, serialNumber=BE019137A81D7E9CD9AF56CD91C587C2EF06E93B
        Validity
            Not Before: Jul 27 04:45:05 2026 GMT
            Not After : Aug  3 04:45:05 2026 GMT
        Subject: CN=6a66e251-9038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:13:4b:8b:e3:48:3b:18:4c:47:d5:02:04:ae:
                    0a:db:27:e7:83:5f:a5:a5:ab:7b:fc:7a:70:37:e0:
                    b0:42:e4:e2:a4:f7:e0:52:1c:e7:65:d5:35:ff:e7:
                    a7:96:7f:14:86:c6:8e:eb:07:d9:89:60:86:6e:bf:
                    40:ae:d1:0d:d9:c7:bc:e8:ff:fa:2e:08:62:13:b6:
                    fc:a5:6d:82:5b:fa:cf:ed:9d:40:a6:d5:11:4a:fd:
                    0d:ac:2e:9f:2a:2f:19:53:43:dd:c2:fe:8c:0b:f3:
                    0c:2c:2e:2a:59:81:1f:92:90:a2:4f:88:f6:5f:5d:
                    65:b4:13:0f:88:83:9a:fe:14:46:d0:11:2f:b8:1d:
                    f7:35:70:48:00:4c:13:5e:64:b3:d1:b3:d3:c6:3c:
                    b7:97:3b:15:85:fb:65:39:ee:ca:ea:64:7e:e5:ba:
                    04:ef:cc:9b:50:b0:c8:b1:0c:63:23:23:4d:ad:b8:
                    f1:4c:56:24:ce:93:d0:97:ef:ad:b4:c5:b9:8d:2d:
                    b3:02:8f:93:da:a7:20:a0:4d:47:e5:5c:70:09:30:
                    ae:ad:51:90:cb:fb:0f:9e:75:c3:3a:ac:e9:a3:bf:
                    6e:14:22:e1:2d:52:e5:67:ce:b2:cf:32:22:76:76:
                    86:4f:38:b6:ae:16:1f:74:2d:84:c9:d6:64:c5:ab:
                    ac:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:64:4B:3F:3B:1C:F5:84:C3:EE:0F:70:A1:DA:DC:CF:33:F4:C0:97
            X509v3 Authority Key Identifier:
                keyid:BE:01:91:37:A8:1D:7E:9C:D9:AF:56:CD:91:C5:87:C2:EF:06:E9:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:3b:a5:3e:a5:7d:8c:fe:51:03:60:05:af:3f:ba:cd:b0:4b:
         fd:f4:59:0a:70:d8:fb:82:09:c4:bf:78:b8:19:b1:46:0a:7c:
         a4:06:a1:d4:1e:e3:12:c2:8b:02:01:31:43:e2:39:ed:43:c4:
         ec:5a:2b:98:a5:2c:51:d6:1e:fc:fb:df:02:6d:55:a6:4d:1e:
         0c:0c:2c:98:13:30:93:07:94:37:45:57:c7:77:08:6d:30:61:
         bd:c0:a8:30:5d:4c:c4:71:18:25:57:5c:68:e1:07:0d:f6:d1:
         ee:b2:05:54:af:de:4d:36:02:f3:a4:d5:f8:29:39:57:ac:8e:
         18:a7:ed:cc:4f:94:ec:20:95:d3:2a:62:83:d7:02:fb:db:a7:
         5b:65:86:d8:da:92:e0:18:95:2c:85:5d:e3:be:c4:29:a7:6b:
         d7:fe:5f:96:c0:df:01:94:97:2a:4f:d7:fd:9f:03:ee:89:87:
         71:6b:70:c9:67:80:41:1f:5c:74:c1:e2:21:3c:e7:50:52:94:
         0a:5f:a0:33:b5:c6:f4:85:8f:af:85:0f:33:3c:e6:62:92:29:
         ac:ed:73:77:63:af:94:cf:5a:28:85:41:bc:56:ff:5e:c9:39:
         6d:c5:a3:fb:12:cd:68:aa:75:a3:38:25:57:db:f3:35:10:36:
         81:a9:62:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:13:23 2026 by rpki-client