Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft
File:                     VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft (raw, json)
Hash identifier:          QUOFRYhIJe544rOAv48F7SeAGKx6X2HFWegI6wNgBPw=
Subject key identifier:   51:49:75:FC:88:57:3B:6B:1B:59:30:78:2D:E0:10:D4:C2:DB:DE:0C
Authority key identifier: 55:E4:85:18:8C:5C:9D:2E:24:C8:34:5C:97:BC:34:62:72:1C:98:CE
Certificate issuer:       /CN=A912FBD2/serialNumber=55E485188C5C9D2E24C8345C97BC3462721C98CE
Certificate serial:       04B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VeSFGIxcnS4kyDRcl7w0YnIcmM4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft
Manifest number:          04AD
Signing time:             Sat 04 Apr 2026 23:42:42 +0000
Manifest this update:     Sat 04 Apr 2026 23:42:41 +0000
Manifest next update:     Sat 11 Apr 2026 23:42:41 +0000
Files and hashes:         1: VeSFGIxcnS4kyDRcl7w0YnIcmM4.crl (hash: QRgQGwND1jgeruYjQkfoc7rIRQR7O77HCez4KAfNZ84=)
                          2: 8A7E8D5C6F5511ECB5FAA20FC4F9AE02.roa (hash: Ye+a8GT+XgDN4u+M9N9k3FjrUxRsvTyLwzxddvL9o4Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.crl
                          rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VeSFGIxcnS4kyDRcl7w0YnIcmM4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 23:42:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1203 (0x4b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912FBD2, serialNumber=55E485188C5C9D2E24C8345C97BC3462721C98CE
        Validity
            Not Before: Apr  4 23:42:41 2026 GMT
            Not After : Apr 11 23:42:41 2026 GMT
        Subject: CN=69d1a1f2-de34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7f:78:41:d7:05:d2:d7:c2:65:5c:11:26:f8:
                    6a:04:e1:50:fd:a0:9b:1a:88:f6:1f:70:8c:ed:b4:
                    44:f4:e6:c0:3d:33:1f:61:fa:a9:08:d3:d5:f3:b7:
                    c9:be:86:ae:09:23:88:aa:7d:5d:bc:f2:f4:f6:3b:
                    74:bb:73:80:dc:db:4e:ee:fd:05:5e:f4:c4:7b:f2:
                    90:a3:ae:98:b5:83:37:f4:12:f2:f5:49:56:b2:70:
                    6b:7c:18:4d:a7:61:3f:b3:cd:98:f3:f2:37:f0:92:
                    8f:40:4f:d0:f1:8a:08:57:b4:c4:86:80:9b:fa:45:
                    b4:3b:3e:0e:2d:48:cd:34:ac:a0:2c:9f:19:e2:9d:
                    2c:8f:bc:5e:76:f8:25:28:fe:6e:f1:09:cd:0a:95:
                    08:c1:07:3f:39:8a:d0:7c:5e:9c:f9:f8:ff:69:32:
                    93:0b:3f:5c:0c:f8:e7:2a:23:c7:bc:59:39:85:fc:
                    7d:10:b3:ec:c9:ea:2f:9f:2c:ef:87:b7:53:7e:9a:
                    f8:d1:f0:74:c1:78:ec:61:02:8d:d6:28:e2:e7:c7:
                    35:2e:83:b1:54:41:c3:7d:fb:60:b0:6d:6e:53:f2:
                    ce:77:87:ba:a4:7d:b5:e0:fd:d1:d2:53:bb:fd:7e:
                    16:5d:4f:0c:40:2c:48:47:c0:d9:70:17:28:36:57:
                    60:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:49:75:FC:88:57:3B:6B:1B:59:30:78:2D:E0:10:D4:C2:DB:DE:0C
            X509v3 Authority Key Identifier:
                keyid:55:E4:85:18:8C:5C:9D:2E:24:C8:34:5C:97:BC:34:62:72:1C:98:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VeSFGIxcnS4kyDRcl7w0YnIcmM4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:24:db:f9:3f:83:14:f0:7d:3e:5e:78:20:3d:ed:a5:1e:e2:
         3f:46:35:4b:23:35:9e:7a:1e:dc:ec:14:7a:51:e7:41:5f:f6:
         4a:21:d9:f9:39:98:4d:a5:b7:68:67:48:7e:70:a6:f2:87:26:
         3d:1e:9d:38:f7:82:ba:5c:55:e8:2c:55:8f:42:06:1b:0d:4e:
         26:2c:89:8d:a1:17:b3:d2:26:85:ae:49:86:f8:f7:56:7c:41:
         11:50:cb:d1:0d:86:30:de:eb:59:d1:77:71:05:14:0b:4b:fd:
         bd:78:ca:17:2a:eb:04:39:a7:5e:89:9c:57:f0:48:40:ec:e8:
         83:80:bc:3a:b5:f3:4a:75:70:c2:94:c3:a7:b7:0e:5b:bb:02:
         30:88:41:59:0c:92:e0:19:aa:f6:7b:18:61:eb:a6:de:b0:5f:
         3d:9a:13:cd:6e:b3:e5:bb:f5:c4:76:40:21:ea:c0:48:e8:1f:
         d7:01:11:81:a1:8d:5d:45:d8:8f:56:03:0f:05:86:b2:05:0f:
         f4:e7:dd:1a:0c:3a:84:79:44:35:4d:77:f1:ac:04:a3:80:9b:
         66:c7:e4:b7:d2:76:27:85:c2:a8:b0:04:fb:85:d7:ed:e5:e0:
         8f:52:fb:a6:db:54:f4:6d:6b:bb:d4:56:18:8b:d4:07:d7:dc:
         17:af:b2:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:54:04 2026 by rpki-client