Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.mft
File:                     vj-L34G2a07S4cdOtdX7AbX3dkE.mft (raw, json)
Hash identifier:          GZnt6NH8g7vc7DMOW74d1T7Gg2x+t8um5QHM8BrK/lg=
Subject key identifier:   48:01:78:F9:BC:64:A2:D7:91:0A:A1:65:64:B6:F1:1D:FB:B4:FA:6A
Authority key identifier: BE:3F:8B:DF:81:B6:6B:4E:D2:E1:C7:4E:B5:D5:FB:01:B5:F7:76:41
Certificate issuer:       /CN=A911DE88/serialNumber=BE3F8BDF81B66B4ED2E1C74EB5D5FB01B5F77641
Certificate serial:       02A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-L34G2a07S4cdOtdX7AbX3dkE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.mft
Manifest number:          0289
Signing time:             Tue 21 Jul 2026 03:09:18 +0000
Manifest this update:     Tue 21 Jul 2026 03:09:18 +0000
Manifest next update:     Tue 28 Jul 2026 03:09:18 +0000
Files and hashes:         1: vj-L34G2a07S4cdOtdX7AbX3dkE.crl (hash: p2DejbXGFupWGI+ABsEr+4w+Yt9R/Vytx47gOca3fdE=)
                          2: F6732580607111EF9102BD19C4F9AE02.roa (hash: vjw0ZDNhGZYYZvURoK7T9a0f/Cvv2iSDqaaJOXeDsko=)
                          3: 3D5EC616694B11EFABF9221EC4F9AE02.roa (hash: E4M2glENp14yC8XqERK+K5RnK+5kQXHvoIyYZ3+OkHg=)
                          4: 9D006D76ABFF11EFB2C29330C4F9AE02.roa (hash: gpTT47Zm52/oXmlCRQ9joE/pQOm48+JhXhIfyvy7DVY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.crl
                          rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-L34G2a07S4cdOtdX7AbX3dkE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 03:09:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 677 (0x2a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DE88, serialNumber=BE3F8BDF81B66B4ED2E1C74EB5D5FB01B5F77641
        Validity
            Not Before: Jul 21 03:09:18 2026 GMT
            Not After : Jul 28 03:09:18 2026 GMT
        Subject: CN=6a5ee2de-6197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:1d:fd:de:f2:27:34:23:d6:b8:9c:05:0c:ab:
                    38:b9:cb:b4:34:7a:e7:08:5f:fe:e0:ce:e8:f2:25:
                    63:64:f6:70:35:23:3f:40:3d:37:12:10:74:5c:f3:
                    97:1d:1a:2a:99:f9:69:ba:62:fd:8a:bc:2c:b0:53:
                    35:14:25:2f:86:98:aa:d3:11:02:ee:0d:fc:03:54:
                    26:11:81:6a:10:f5:4b:99:06:7c:04:cb:9b:31:32:
                    68:c2:07:a7:46:80:df:40:b9:a5:0b:72:a8:ed:84:
                    6a:5f:06:6d:6e:21:cd:56:f6:e2:ce:d9:0b:e4:cd:
                    3a:37:a4:b0:4e:dd:79:e5:47:94:6d:7f:93:0d:d1:
                    2a:8d:58:62:8e:bf:cd:05:cf:59:c1:63:8a:ba:dc:
                    15:95:da:f3:d9:67:d3:0f:51:32:dc:48:e8:40:eb:
                    98:9c:63:ee:79:47:bc:4c:e3:de:d5:08:d6:f9:a4:
                    41:a1:f1:5a:ed:d7:34:65:45:1b:57:d3:1c:2b:6b:
                    ba:ab:e9:cb:65:e3:21:11:7d:fc:81:bc:aa:57:05:
                    2c:93:d8:ce:7e:e7:1a:b4:97:bc:d8:94:c0:ed:11:
                    0e:b8:9a:36:2c:fa:1f:a2:1f:49:8f:0d:77:6f:d6:
                    f6:8f:f3:a6:de:60:dc:4c:e1:15:37:0e:7e:ea:09:
                    e6:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:01:78:F9:BC:64:A2:D7:91:0A:A1:65:64:B6:F1:1D:FB:B4:FA:6A
            X509v3 Authority Key Identifier:
                keyid:BE:3F:8B:DF:81:B6:6B:4E:D2:E1:C7:4E:B5:D5:FB:01:B5:F7:76:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-L34G2a07S4cdOtdX7AbX3dkE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:b9:1a:fa:86:0a:00:da:bd:e8:2c:17:ad:97:08:9c:3f:57:
         5f:3e:ae:e3:12:6c:38:84:19:d9:45:60:71:49:87:97:da:39:
         fc:42:ee:6c:59:69:9b:7d:5d:29:b7:99:5a:80:d6:e0:4b:dd:
         ea:be:53:98:8b:1b:2c:e1:cb:cf:1c:da:47:5b:a5:a5:72:c7:
         ed:41:28:6e:b4:90:e0:a2:d5:3b:0c:69:53:d6:7d:f6:12:5c:
         b0:91:44:ea:60:b4:24:dd:e3:b7:a5:73:c3:11:9c:49:6c:4f:
         50:8f:61:35:ef:94:ec:6f:8e:d5:96:25:46:4e:4f:0e:9a:9b:
         59:64:59:1d:37:f7:41:de:03:7e:95:41:c9:ee:ac:bf:3f:89:
         ee:23:42:93:ce:df:1d:0b:74:ca:d1:80:cd:a7:41:31:c1:b6:
         77:db:1d:b1:66:63:91:3d:1d:99:af:25:7e:a7:68:25:ba:45:
         7d:d2:5a:72:91:21:94:8a:ed:ac:8c:00:6d:34:3a:b7:bc:3d:
         89:de:e1:ac:e2:a5:13:1f:29:5d:82:f5:7b:8b:14:30:a5:1f:
         d5:cd:18:d1:e7:53:99:e3:ce:87:f4:8f:bb:71:9e:08:88:5f:
         e4:59:f8:0f:5a:11:71:2f:94:4c:a3:e7:5d:af:38:e0:fa:e0:
         a0:64:a9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 03:05:41 2026 by rpki-client