Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft
File:                     Vg3ED_OlCfnv21Jg7huzhi222N8.mft (raw, json)
Hash identifier:          5jBBnJggHv+vy1AVZXwt1lJxQ/l/sIG3GJVtCkXUeAg=
Subject key identifier:   82:CC:4D:66:80:EE:AB:27:7D:45:99:E5:81:4D:AA:5F:9B:63:C0:AF
Authority key identifier: 56:0D:C4:0F:F3:A5:09:F9:EF:DB:52:60:EE:1B:B3:86:2D:B6:D8:DF
Certificate issuer:       /CN=A912E926/serialNumber=560DC40FF3A509F9EFDB5260EE1BB3862DB6D8DF
Certificate serial:       0264
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vg3ED_OlCfnv21Jg7huzhi222N8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft
Manifest number:          025F
Signing time:             Wed 19 Aug 2026 02:43:22 +0000
Manifest this update:     Wed 19 Aug 2026 02:43:21 +0000
Manifest next update:     Wed 26 Aug 2026 02:43:21 +0000
Files and hashes:         1: Vg3ED_OlCfnv21Jg7huzhi222N8.crl (hash: iI6lrqEWz751t3cv88C31gRIh5embk2/Xr4uLqmwQnc=)
                          2: 46BF7E7CFA0611ED802A1C29C4F9AE02.roa (hash: UyrWlJ/K5ewEnl3nB2amv545KdOMLbjx4FV1Gagszyg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.crl
                          rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vg3ED_OlCfnv21Jg7huzhi222N8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 02:43:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 612 (0x264)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E926, serialNumber=560DC40FF3A509F9EFDB5260EE1BB3862DB6D8DF
        Validity
            Not Before: Aug 19 02:43:21 2026 GMT
            Not After : Aug 26 02:43:21 2026 GMT
        Subject: CN=6a851849-1afe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1a:c7:55:87:83:57:32:b1:b0:f2:4a:df:b8:
                    4b:cb:c1:f2:1d:7f:ed:46:1d:d2:2f:2d:65:1f:a8:
                    57:87:a8:e1:6d:b7:96:f0:8a:34:0c:fd:cf:64:9b:
                    4f:f5:e5:76:08:ef:16:d0:ce:66:62:43:fb:f0:19:
                    fe:1e:6b:14:a5:ae:2a:90:b4:6d:7b:98:ee:e5:c3:
                    ca:29:b2:b9:b0:15:32:4c:ef:7e:03:e6:82:e2:71:
                    c5:fe:2b:87:6b:cc:d5:c5:78:9b:7c:7a:64:98:5a:
                    96:57:80:b3:1b:69:ac:62:43:82:9a:0a:82:54:4e:
                    8a:b3:aa:dc:65:7e:6a:ce:a0:9f:6d:99:48:08:ef:
                    3e:39:6f:41:d0:ff:29:45:47:c4:20:b4:4e:b8:31:
                    1a:10:46:31:ff:55:55:17:68:0e:88:39:96:9d:55:
                    48:85:d3:cb:d9:dd:26:20:d6:0e:2b:e7:3e:9c:83:
                    74:af:ca:9d:c2:a1:53:67:37:14:f0:73:74:dd:ee:
                    0d:71:c1:c7:af:75:f0:1b:3e:82:2b:77:b0:3e:7c:
                    fe:bc:40:1c:8a:33:6a:44:a9:0d:a0:1e:e2:cb:3a:
                    40:9b:08:33:f0:34:8a:9f:17:7b:47:d7:75:50:39:
                    df:61:78:e3:75:8b:84:88:25:12:6a:6d:07:8a:81:
                    83:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:CC:4D:66:80:EE:AB:27:7D:45:99:E5:81:4D:AA:5F:9B:63:C0:AF
            X509v3 Authority Key Identifier:
                keyid:56:0D:C4:0F:F3:A5:09:F9:EF:DB:52:60:EE:1B:B3:86:2D:B6:D8:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vg3ED_OlCfnv21Jg7huzhi222N8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:72:e6:81:79:3d:73:9c:7f:b3:1f:90:6c:90:35:a0:58:a0:
         ac:2d:60:35:de:d4:ad:28:cf:57:a4:70:cd:28:db:e1:d0:b9:
         d5:ba:cb:6d:18:79:22:d4:66:b5:dc:8d:20:07:4d:e0:31:23:
         ae:ed:44:fd:55:09:d7:c5:04:24:ae:d0:19:84:a6:56:0a:2e:
         73:ca:3b:c2:22:96:67:bd:40:11:63:ea:d8:7a:40:a9:58:db:
         91:62:d8:a3:59:d4:9a:59:a9:ef:ee:25:cd:94:32:79:e7:75:
         e8:43:f4:fc:64:26:79:d7:09:cc:14:7f:e3:8d:97:cb:31:2f:
         b5:48:61:c6:4e:cb:c2:11:86:a5:7e:27:1f:ee:5f:45:1d:e4:
         b2:10:b4:6e:89:70:bb:fd:da:f8:d0:f0:5e:bd:44:c9:c8:28:
         62:3b:aa:3c:77:86:31:9a:7e:b6:6a:88:81:3b:b4:54:64:27:
         8b:e2:09:d4:52:a0:6f:bc:d7:d4:75:72:b4:5d:4a:c1:94:d3:
         b7:5f:09:61:2b:f4:c3:13:da:eb:96:29:9f:8a:fc:7e:f0:2b:
         e6:d9:ed:6f:84:cd:e4:bc:c8:a5:ff:78:7c:4b:d1:95:81:48:
         21:e1:06:05:21:58:bd:de:78:ef:48:27:ed:fa:62:78:68:3d:
         98:bd:9b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:53 2026 by rpki-client