Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.mft
File:                     VJnONj3wXJSTIjSIKXmbEO_x05I.mft (raw, json)
Hash identifier:          Oc2ZowQiBdYTxbO/EydUmfQ56+J5TAJmc1FaBRD9Ifk=
Subject key identifier:   58:00:16:D4:5A:B2:93:97:C9:54:52:98:92:2E:D9:DE:F1:8B:25:21
Authority key identifier: 54:99:CE:36:3D:F0:5C:94:93:22:34:88:29:79:9B:10:EF:F1:D3:92
Certificate issuer:       /CN=A912DB83/serialNumber=5499CE363DF05C949322348829799B10EFF1D392
Certificate serial:       0396
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJnONj3wXJSTIjSIKXmbEO_x05I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.mft
Manifest number:          0386
Signing time:             Mon 13 Jul 2026 00:50:39 +0000
Manifest this update:     Mon 13 Jul 2026 00:50:38 +0000
Manifest next update:     Mon 20 Jul 2026 00:50:38 +0000
Files and hashes:         1: VJnONj3wXJSTIjSIKXmbEO_x05I.crl (hash: tDu4nYMICfu69co2bREb729BS3MdtORikpKIcQx15qs=)
                          2: 8698FF1E541811F0A468570BC4F9AE02.roa (hash: Q5BQwN/PPkIsr7xi5UZqC/JjxBSQW4yJruIR//oJ9Eg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.crl
                          rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJnONj3wXJSTIjSIKXmbEO_x05I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Jul 2026 00:50:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 918 (0x396)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912DB83, serialNumber=5499CE363DF05C949322348829799B10EFF1D392
        Validity
            Not Before: Jul 13 00:50:38 2026 GMT
            Not After : Jul 20 00:50:38 2026 GMT
        Subject: CN=6a54365f-75d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e8:f4:62:5e:1b:ea:a4:19:08:80:01:a1:06:
                    ec:18:47:14:80:2c:77:83:a8:f0:71:23:83:77:ab:
                    2b:8f:6a:67:92:b4:44:eb:da:37:4e:75:bb:27:e1:
                    83:ce:f8:de:7c:81:36:97:cd:71:27:47:11:c2:04:
                    29:68:dc:ed:30:7c:3e:2e:ef:1d:e9:e2:15:50:97:
                    bd:63:45:4f:24:25:0d:ac:df:ea:77:cb:6f:38:2a:
                    6d:98:0d:1b:c0:07:2d:88:2f:d7:53:41:64:33:2b:
                    9e:25:a1:7d:47:d8:99:62:06:ae:e2:e8:54:b3:92:
                    03:06:40:14:d5:12:2a:a5:84:a6:56:4d:fc:17:d3:
                    76:7e:cf:8b:b5:91:54:e6:fb:b2:99:88:4e:8f:3c:
                    1a:96:26:a7:2e:9f:7a:7d:79:37:75:db:dd:bd:8f:
                    66:9b:2d:e3:3f:13:1d:b1:7f:17:00:7a:1b:e0:09:
                    e0:ee:90:ed:74:1e:85:3b:6d:cb:fc:6f:bd:12:46:
                    24:e6:12:8b:f1:f5:c5:40:8e:b9:f7:d6:de:69:c2:
                    4c:c7:80:c7:74:40:e0:b4:a8:df:60:7d:a9:37:de:
                    f4:3f:a0:38:00:bf:5c:d1:8d:50:9f:dd:30:1d:8b:
                    ea:23:24:13:13:83:01:63:3c:c3:8a:01:0e:b9:88:
                    ff:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:00:16:D4:5A:B2:93:97:C9:54:52:98:92:2E:D9:DE:F1:8B:25:21
            X509v3 Authority Key Identifier:
                keyid:54:99:CE:36:3D:F0:5C:94:93:22:34:88:29:79:9B:10:EF:F1:D3:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJnONj3wXJSTIjSIKXmbEO_x05I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:6d:6f:a0:b3:d5:fe:5b:43:60:1b:18:bb:f8:13:6d:cf:c8:
         5b:f1:8f:be:30:aa:23:46:6e:2f:52:77:48:14:bb:ee:05:a4:
         94:67:9c:72:f7:0d:c9:39:11:01:16:f0:0c:9e:6c:42:66:d4:
         b1:dd:55:84:80:5b:90:6b:8f:10:3e:67:ef:14:9b:ce:c3:16:
         08:0e:f1:2f:ef:11:ff:2e:ed:cd:a0:b6:1a:eb:44:bd:6c:35:
         b7:0e:ef:76:af:87:59:98:d6:b6:f4:93:46:06:ef:a3:39:0b:
         47:ca:a4:41:10:0f:b3:6e:fb:e2:fb:cc:03:a6:22:92:33:c2:
         64:65:cf:af:e1:3c:2b:05:90:da:bc:ad:11:20:a7:66:ec:68:
         9e:bc:16:73:4a:bc:fa:6e:f6:6a:6a:f7:76:62:79:de:9a:38:
         d4:37:95:21:f4:92:1c:99:3f:43:99:ec:42:18:f1:ec:a9:95:
         ba:c4:42:6d:40:d7:8c:58:b6:73:11:0d:33:0c:47:16:d8:b8:
         7d:bb:36:af:fe:0b:08:31:66:00:1e:8b:7e:0e:cc:33:5a:66:
         e6:8f:7e:db:a7:48:70:82:e8:0c:e2:2b:61:92:b3:57:1c:8e:
         7c:ed:13:89:d2:f3:e0:2f:7c:95:eb:f4:10:17:fb:b4:d5:7e:
         ae:bc:aa:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 13:53:24 2026 by rpki-client