Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.mft
File:                     VsaTBbXrpUJVXYx4xWGremzRqiw.mft (raw, json)
Hash identifier:          wbBqfosLQ5e2LOyjnKKZqSjGburWkKTnsWwbvS7SOxw=
Subject key identifier:   5E:D8:D0:E0:DF:50:2A:E1:B0:C9:D4:58:8E:E8:A7:C4:2F:81:79:35
Authority key identifier: 56:C6:93:05:B5:EB:A5:42:55:5D:8C:78:C5:61:AB:7A:6C:D1:AA:2C
Certificate issuer:       /CN=A911EEF8/serialNumber=56C69305B5EBA542555D8C78C561AB7A6CD1AA2C
Certificate serial:       012E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VsaTBbXrpUJVXYx4xWGremzRqiw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.mft
Manifest number:          0122
Signing time:             Tue 23 Jun 2026 06:03:29 +0000
Manifest this update:     Tue 23 Jun 2026 06:03:29 +0000
Manifest next update:     Tue 30 Jun 2026 06:03:29 +0000
Files and hashes:         1: VsaTBbXrpUJVXYx4xWGremzRqiw.crl (hash: n8q9/SsZRmeQKuLgJRrxxGeMR5GHyYWWuZaP9X2EVck=)
                          2: 57680C9CCA9911F0A4E15D65C4F9AE02.roa (hash: EJnyDwuSIzHst7JusIvMU9zwalSsj+VmD0NvAr/I8zI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.crl
                          rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VsaTBbXrpUJVXYx4xWGremzRqiw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 06:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 302 (0x12e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911EEF8, serialNumber=56C69305B5EBA542555D8C78C561AB7A6CD1AA2C
        Validity
            Not Before: Jun 23 06:03:29 2026 GMT
            Not After : Jun 30 06:03:29 2026 GMT
        Subject: CN=6a3a21b1-288b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5e:4d:b4:0e:9f:a6:bd:1b:66:c5:a1:7c:f8:
                    a0:46:45:94:62:97:3f:22:94:11:d7:c9:1b:3c:9e:
                    c1:e7:15:ca:e9:31:33:25:ea:c3:2a:c2:60:9d:4b:
                    17:50:d9:88:b2:e4:08:87:1d:93:55:c3:30:2b:7b:
                    f3:25:09:33:e8:8f:1b:33:63:45:b1:fa:95:a8:2f:
                    28:ac:85:15:66:2d:f6:ac:b7:83:df:5b:92:06:d0:
                    c5:c4:b6:5b:f5:65:9d:a9:31:dc:7a:e9:5b:15:e8:
                    5a:2b:28:6e:df:35:6f:e7:ff:8d:af:89:ce:21:75:
                    97:53:5e:ac:6e:74:53:ed:1d:71:a0:49:bf:df:81:
                    1b:17:88:e8:52:bd:db:0e:51:85:3a:9d:02:6c:b4:
                    60:ad:67:e4:e6:fd:69:3a:be:d8:ef:21:2a:1b:50:
                    c9:bc:17:4d:3d:c5:4e:5f:31:81:31:e3:57:7a:36:
                    91:73:6b:15:55:21:dc:76:61:85:8c:da:b2:92:8c:
                    59:e5:82:e2:97:bc:12:41:0e:23:0c:12:dc:87:94:
                    69:5d:00:97:6f:a5:d2:49:ae:54:5c:e0:20:5a:1d:
                    0d:09:30:5a:5e:d7:1e:05:eb:d7:d0:c4:e9:b5:9c:
                    45:7e:50:b4:01:31:18:92:d1:b7:b9:66:9d:37:82:
                    fe:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:D8:D0:E0:DF:50:2A:E1:B0:C9:D4:58:8E:E8:A7:C4:2F:81:79:35
            X509v3 Authority Key Identifier:
                keyid:56:C6:93:05:B5:EB:A5:42:55:5D:8C:78:C5:61:AB:7A:6C:D1:AA:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VsaTBbXrpUJVXYx4xWGremzRqiw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:46:23:f5:26:bd:90:30:b4:d8:e5:54:4e:a3:ec:c8:7b:b0:
         30:4c:f0:a3:26:a3:66:b1:86:93:4d:78:a2:0b:81:2a:36:5b:
         ac:43:5e:74:09:e2:b8:43:22:54:e0:10:77:e7:f8:0d:55:6d:
         07:e8:0b:1d:bf:e9:4d:6d:ac:ff:ca:f3:6d:37:48:2f:e9:56:
         bf:2c:72:20:e3:a4:bb:57:54:d8:8f:7b:b6:c4:9e:25:e8:10:
         4e:b8:81:46:b8:64:53:2d:7d:7c:59:bc:d5:5e:4d:4d:32:d3:
         c2:c0:65:2b:7d:42:d7:31:74:2a:dd:f1:c1:84:20:27:6a:da:
         bb:b0:11:66:99:24:d0:56:6e:ac:fd:15:b4:69:c5:e8:66:24:
         af:b5:cb:da:01:0b:fb:b0:b2:30:0f:14:30:15:00:55:73:e1:
         ab:a1:c0:a0:cf:48:87:f6:18:e2:cf:ed:b7:88:78:cf:8a:0a:
         19:27:3f:7a:e3:2e:44:6c:9b:1d:dc:59:89:cd:6d:6e:c9:71:
         0d:66:67:2a:fc:06:61:e7:96:49:ce:3b:31:d5:f1:9f:b4:d4:
         06:f0:e9:e4:4d:cb:3f:d7:16:d2:0a:56:5d:61:4b:11:ad:b3:
         09:26:32:ca:72:f6:37:2a:f5:98:04:ee:f3:7f:94:f7:e5:b1:
         e0:3b:57:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:26:57 2026 by rpki-client