Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft
File:                     vNWr2ckcoefyxFVXBbKUBPUFvcU.mft (raw, json)
Hash identifier:          on/v02qgOPgZC07ak6twUUg5gQfgQbi0kVd8f9kSbuc=
Subject key identifier:   B4:A2:3C:20:90:7A:99:59:D8:C8:1C:4E:D9:6C:8A:CF:8E:E6:21:5F
Authority key identifier: BC:D5:AB:D9:C9:1C:A1:E7:F2:C4:55:57:05:B2:94:04:F5:05:BD:C5
Certificate issuer:       /CN=A912F281/serialNumber=BCD5ABD9C91CA1E7F2C4555705B29404F505BDC5
Certificate serial:       0128
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vNWr2ckcoefyxFVXBbKUBPUFvcU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft
Manifest number:          0124
Signing time:             Fri 17 Jul 2026 06:52:53 +0000
Manifest this update:     Fri 17 Jul 2026 06:52:53 +0000
Manifest next update:     Fri 24 Jul 2026 06:52:53 +0000
Files and hashes:         1: vNWr2ckcoefyxFVXBbKUBPUFvcU.crl (hash: GxC4VvORl1U/SfnTxamMezrkWpdfk9iQ06TCcpl924s=)
                          2: 89EA22F0C67011EFAE929D0DC4F9AE02.roa (hash: QoSObG+7a268+sX8T2Z5nD2wpsEf/h3WqHnAbvclosE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.crl
                          rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vNWr2ckcoefyxFVXBbKUBPUFvcU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 06:52:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 296 (0x128)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F281, serialNumber=BCD5ABD9C91CA1E7F2C4555705B29404F505BDC5
        Validity
            Not Before: Jul 17 06:52:53 2026 GMT
            Not After : Jul 24 06:52:53 2026 GMT
        Subject: CN=6a59d145-f6b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:01:5f:15:f8:1a:08:13:4c:f3:cf:fa:01:bf:
                    9e:6b:63:7b:5e:43:34:21:a8:b6:09:be:11:c0:62:
                    18:75:c7:2f:ed:5a:14:45:8a:99:3f:2b:14:d9:32:
                    99:20:34:2c:e1:5f:9f:ef:ae:fb:2c:6a:3e:ed:eb:
                    dc:94:b8:df:2f:d6:22:f2:52:33:50:8d:71:c3:14:
                    3a:cc:c0:06:9a:0f:0d:b4:af:01:33:3a:fe:4b:7b:
                    3a:7d:e9:fd:71:3c:8c:8f:34:b7:45:a2:d7:6b:b1:
                    eb:ba:42:71:20:d4:91:d9:81:21:56:82:81:0c:b2:
                    00:f8:e3:ed:70:60:0d:0c:01:a3:0d:ca:6a:0e:e8:
                    5d:77:61:a5:71:2e:27:c5:06:60:5c:28:7d:02:cf:
                    39:fc:37:8a:35:9c:db:68:f4:66:84:ee:17:f5:df:
                    c9:0a:fd:ed:34:cc:87:e7:f1:f6:ae:3b:8e:bd:11:
                    52:fa:6d:d3:6b:d2:91:12:aa:6c:9f:c5:16:60:f3:
                    88:a9:1f:59:fc:9b:92:66:c6:d6:97:38:91:bc:81:
                    4d:49:e0:52:ec:12:1a:05:8a:d5:9a:82:de:c9:5e:
                    53:65:7c:02:2f:07:2d:17:d2:1b:36:44:16:59:13:
                    b0:9c:7c:47:0d:85:6f:0a:8f:ac:4e:ae:a4:ac:61:
                    95:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:A2:3C:20:90:7A:99:59:D8:C8:1C:4E:D9:6C:8A:CF:8E:E6:21:5F
            X509v3 Authority Key Identifier:
                keyid:BC:D5:AB:D9:C9:1C:A1:E7:F2:C4:55:57:05:B2:94:04:F5:05:BD:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vNWr2ckcoefyxFVXBbKUBPUFvcU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:b8:8f:9c:e2:1a:df:28:10:35:cc:33:21:d0:c7:64:1f:ff:
         12:85:9a:ed:35:d7:64:08:72:3c:cd:82:87:ad:80:c4:1a:11:
         aa:0d:67:73:11:80:eb:6a:85:85:d5:66:0f:9f:41:b5:aa:78:
         29:14:10:51:63:1c:07:4e:f4:50:73:90:e4:8f:b7:49:6f:35:
         d1:13:65:76:1f:e6:61:4d:bb:36:5c:1f:e1:b4:e7:4e:67:ba:
         46:20:4d:af:93:ac:30:3b:e3:f2:da:62:65:b1:01:db:1d:b1:
         3c:3e:f3:d8:40:b6:7e:c0:0c:09:7f:ad:76:51:cc:96:f7:38:
         50:81:cd:c7:ac:fd:10:0e:36:6c:dd:91:46:44:21:a5:ed:58:
         8f:69:97:8d:35:de:58:05:d3:96:64:72:1e:d3:bf:ad:9e:98:
         1e:99:05:b4:db:49:46:c3:08:ca:6c:8a:ed:c7:35:aa:06:78:
         62:36:22:20:e4:21:49:20:5f:3c:18:fc:7f:09:69:09:5c:d8:
         da:f7:e5:bb:c9:73:8f:32:b9:e0:b3:f8:e4:fe:7e:82:0c:03:
         ee:8c:7e:de:11:1b:f4:aa:34:dc:69:8b:93:f1:0f:9f:61:55:
         5e:3f:ba:5e:00:9b:af:1d:18:8e:26:8f:3f:cc:dc:b3:38:84:
         21:f8:ec:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:22:34 2026 by rpki-client