Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913CB06/8A4D76BE07E411F1A34718A5213D8C67/VC3eAu1c1aeKWFAwa556fpn8Jgs.mft
File:                     VC3eAu1c1aeKWFAwa556fpn8Jgs.mft (raw, json)
Hash identifier:          VV5IDZD5Ux3NQZYhLPApcRvyzscwX+1nu1XYWCfqjac=
Subject key identifier:   0D:D8:8C:00:C2:6C:1C:47:61:A3:47:D3:EC:E6:FB:0E:4E:D6:5C:15
Authority key identifier: 54:2D:DE:02:ED:5C:D5:A7:8A:58:50:30:6B:9E:7A:7E:99:FC:26:0B
Certificate issuer:       /CN=A913CB06/serialNumber=542DDE02ED5CD5A78A5850306B9E7A7E99FC260B
Certificate serial:       41
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/VC3eAu1c1aeKWFAwa556fpn8Jgs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913CB06/8A4D76BE07E411F1A34718A5213D8C67/VC3eAu1c1aeKWFAwa556fpn8Jgs.mft
Manifest number:          3F
Signing time:             Fri 05 Jun 2026 08:57:05 +0000
Manifest this update:     Fri 05 Jun 2026 08:57:04 +0000
Manifest next update:     Fri 12 Jun 2026 08:57:04 +0000
Files and hashes:         1: VC3eAu1c1aeKWFAwa556fpn8Jgs.crl (hash: bRrlk7M3sYU2mkPuCZx8wpXiRNK2MC2ZfnurxBqqPww=)
                          2: D111CFB407E411F1ADC4A5A5213D8C67.roa (hash: lUmpfgR/p5W8luIbaZ+1ADUqFYn/T6101vy4MSXsnuo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913CB06/8A4D76BE07E411F1A34718A5213D8C67/VC3eAu1c1aeKWFAwa556fpn8Jgs.crl
                          rsync://rpki.apnic.net/member_repository/A913CB06/8A4D76BE07E411F1A34718A5213D8C67/VC3eAu1c1aeKWFAwa556fpn8Jgs.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/VC3eAu1c1aeKWFAwa556fpn8Jgs.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 08:57:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913CB06, serialNumber=542DDE02ED5CD5A78A5850306B9E7A7E99FC260B
        Validity
            Not Before: Jun  5 08:57:04 2026 GMT
            Not After : Jun 12 08:57:04 2026 GMT
        Subject: CN=6a228f61-8abf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9a:cb:b7:94:cb:ce:a6:8b:ac:17:80:15:00:
                    f0:b9:e2:78:4b:e0:f2:87:46:c9:59:d3:a4:46:a8:
                    d5:78:4d:e6:9e:0b:93:d2:08:d1:5b:9f:2c:3f:73:
                    b9:b5:b6:2c:0a:f8:a4:9d:ec:38:d3:5b:28:7d:0a:
                    79:1d:b1:a5:69:48:61:48:d1:c8:52:ff:b1:94:b7:
                    77:9e:5f:7e:15:78:6a:85:90:b9:52:f1:1e:e8:ec:
                    cd:b5:97:18:41:f8:b6:16:5b:fd:ba:04:b3:e2:46:
                    d4:d5:05:70:35:2c:e6:b6:6d:eb:80:39:9f:76:3f:
                    d8:1d:06:2f:37:11:2b:7c:dd:a7:97:c8:85:94:4e:
                    fe:80:d3:96:36:24:90:a3:b7:36:61:28:7b:8a:40:
                    44:04:79:ce:00:26:fb:ff:4a:9f:7c:0c:d7:8a:54:
                    b2:ed:8b:fe:cf:36:31:07:f6:f9:f4:55:37:f8:52:
                    54:50:35:70:72:cd:ba:fe:d4:fb:e7:72:f9:18:a1:
                    33:92:4e:45:ae:57:94:ea:da:37:ef:a7:26:c8:23:
                    3c:e7:64:16:c4:5d:b8:eb:53:12:44:a9:88:21:2a:
                    f9:f4:2f:e6:8c:fa:01:5f:cb:0f:9c:74:19:30:01:
                    66:e9:c1:02:5b:25:f5:75:41:f4:8e:45:2c:7c:96:
                    ae:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:D8:8C:00:C2:6C:1C:47:61:A3:47:D3:EC:E6:FB:0E:4E:D6:5C:15
            X509v3 Authority Key Identifier:
                keyid:54:2D:DE:02:ED:5C:D5:A7:8A:58:50:30:6B:9E:7A:7E:99:FC:26:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913CB06/8A4D76BE07E411F1A34718A5213D8C67/VC3eAu1c1aeKWFAwa556fpn8Jgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/VC3eAu1c1aeKWFAwa556fpn8Jgs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CB06/8A4D76BE07E411F1A34718A5213D8C67/VC3eAu1c1aeKWFAwa556fpn8Jgs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:27:c9:f6:38:8d:cc:41:4c:d1:54:71:62:9f:5d:bc:73:7d:
         e1:5b:7d:11:91:1e:af:de:d2:53:5f:8b:8c:c1:f9:0c:ea:90:
         a2:71:88:8b:0e:dd:af:42:48:c1:1e:3b:1c:dc:86:ee:d6:0b:
         88:1f:7a:d7:a7:17:b7:57:5c:ab:e7:01:69:82:5e:89:1e:07:
         04:28:a4:c3:84:b2:74:45:7f:d6:9d:f6:42:7e:e2:1c:24:df:
         31:9e:c7:32:df:dd:a4:12:83:ae:2a:02:4e:7a:69:ae:7e:b4:
         cb:b5:f7:97:27:93:a4:d5:1e:71:93:d0:78:af:12:10:10:9e:
         34:86:ef:b9:d0:66:70:74:54:fd:42:f3:95:82:b1:09:3b:ae:
         a0:ae:9c:90:1e:d7:68:76:8b:dc:da:05:6d:8c:83:1b:c1:c3:
         39:31:49:69:1d:37:22:fd:2a:47:1c:cb:d9:20:bb:d2:bd:ea:
         38:34:b6:6c:77:39:a2:cd:a1:1f:67:3d:2b:4d:eb:49:c5:53:
         75:a0:60:ea:70:0e:bc:00:d4:35:59:cc:80:9b:39:07:fd:da:
         e1:05:e6:63:2d:12:a6:9b:5f:80:54:59:c7:8e:98:f5:62:9c:
         8d:d0:33:95:cf:cc:e4:78:32:81:27:3a:32:6b:04:8a:d9:8d:
         61:f1:92:a3
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
Q0IwNjExMC8GA1UEBRMoNTQyRERFMDJFRDVDRDVBNzhBNTg1MDMwNkI5RTdBN0U5
OUZDMjYwQjAeFw0yNjA2MDUwODU3MDRaFw0yNjA2MTIwODU3MDRaMBgxFjAUBgNV
BAMTDTZhMjI4ZjYxLThhYmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCpmsu3lMvOpousF4AVAPC54nhL4PKHRslZ06RGqNV4TeaeC5PSCNFbnyw/c7m1
tiwK+KSd7DjTWyh9CnkdsaVpSGFI0chS/7GUt3eeX34VeGqFkLlS8R7o7M21lxhB
+LYWW/26BLPiRtTVBXA1LOa2beuAOZ92P9gdBi83ESt83aeXyIWUTv6A05Y2JJCj
tzZhKHuKQEQEec4AJvv/Sp98DNeKVLLti/7PNjEH9vn0VTf4UlRQNXByzbr+1Pvn
cvkYoTOSTkWuV5Tq2jfvpybIIzznZBbEXbjrUxJEqYghKvn0L+aM+gFfyw+cdBkw
AWbpwQJbJfV1QfSORSx8lq7pAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUDdiMAMJs
HEdho0fT7Ob7Dk7WXBUwHwYDVR0jBBgwFoAUVC3eAu1c1aeKWFAwa556fpn8Jgsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNDQjA2LzhBNEQ3NkJFMDdF
NDExRjFBMzQ3MThBNTIxM0Q4QzY3L1ZDM2VBdTFjMWFlS1dGQXdhNTU2ZnBuOEpn
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvVkMzZUF1MWMxYWVLV0ZBd2E1NTZmcG44SmdzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTND
QjA2LzhBNEQ3NkJFMDdFNDExRjFBMzQ3MThBNTIxM0Q4QzY3L1ZDM2VBdTFjMWFl
S1dGQXdhNTU2ZnBuOEpncy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQANJ8n2OI3MQUzRVHFin128c33hW30RkR6v3tJTX4uMwfkM6pCicYiLDt2vQkjB
Hjsc3Ibu1guIH3rXpxe3V1yr5wFpgl6JHgcEKKTDhLJ0RX/WnfZCfuIcJN8xnscy
392kEoOuKgJOemmufrTLtfeXJ5Ok1R5xk9B4rxIQEJ40hu+50GZwdFT9QvOVgrEJ
O66grpyQHtdodovc2gVtjIMbwcM5MUlpHTci/SpHHMvZILvSveo4NLZsdzmizaEf
Zz0rTetJxVN1oGDqcA68ANQ1WcyAmzkH/drhBeZjLRKmm1+AVFnHjpj1YpyN0DOV
z8zkeDKBJzoyawSK2Y1h8ZKj
-----END CERTIFICATE-----
Generated at Sat Jun 6 12:20:48 2026 by rpki-client