Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/VKPgwj06DM7GesLqh4PlREixngU.mft
File:                     VKPgwj06DM7GesLqh4PlREixngU.mft (raw, json)
Hash identifier:          c60/UGR/9h0l+vzHktXezWDIdpris33eqvXGz4NOW48=
Subject key identifier:   95:08:E8:85:D2:8D:E6:EA:4C:37:04:72:3F:96:48:59:45:F4:C2:A2
Authority key identifier: 54:A3:E0:C2:3D:3A:0C:CE:C6:7A:C2:EA:87:83:E5:44:48:B1:9E:05
Certificate issuer:       /CN=A916CAE6/serialNumber=54A3E0C23D3A0CCEC67AC2EA8783E54448B19E05
Certificate serial:       0A5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VKPgwj06DM7GesLqh4PlREixngU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/VKPgwj06DM7GesLqh4PlREixngU.mft
Manifest number:          0AFD
Signing time:             Tue 18 Aug 2026 19:58:31 +0000
Manifest this update:     Tue 18 Aug 2026 19:58:30 +0000
Manifest next update:     Tue 25 Aug 2026 19:58:30 +0000
Files and hashes:         1: VKPgwj06DM7GesLqh4PlREixngU.crl (hash: B965dGL6zfKEbCDTCBnkg1adE+kfTnFeyzU09YVJAmc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/VKPgwj06DM7GesLqh4PlREixngU.crl
                          rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/VKPgwj06DM7GesLqh4PlREixngU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VKPgwj06DM7GesLqh4PlREixngU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 19:58:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2651 (0xa5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916CAE6, serialNumber=54A3E0C23D3A0CCEC67AC2EA8783E54448B19E05
        Validity
            Not Before: Aug 18 19:58:30 2026 GMT
            Not After : Aug 25 19:58:30 2026 GMT
        Subject: CN=6a84b967-7af8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6e:89:e6:9d:57:bd:92:c3:26:83:43:ed:90:
                    4c:7b:8f:76:2b:09:a7:27:09:b6:f2:2d:3b:f0:ad:
                    86:31:95:d7:bc:14:6b:8c:f2:72:ec:04:44:7a:cd:
                    92:2f:ea:3a:31:4e:ba:8f:23:ce:e9:34:59:0c:c2:
                    e5:9e:75:3f:f1:2d:a7:37:af:2a:ad:ac:45:f6:21:
                    85:11:4e:1f:31:11:33:9f:5e:51:36:58:b6:0b:5d:
                    d8:10:1b:8e:50:15:9d:51:f4:ca:44:fd:42:1d:ea:
                    0a:d9:67:9c:e5:46:8f:03:c1:46:70:ea:a6:01:6f:
                    0a:37:eb:ac:0a:81:84:2b:82:a6:99:1d:e3:41:35:
                    35:94:29:a4:d0:6a:68:1c:28:68:25:58:74:61:ba:
                    88:a3:47:aa:34:a3:e6:4e:86:70:9b:9b:3d:5a:e8:
                    2f:52:2a:79:4b:ef:b9:79:f1:9d:5d:c2:5f:48:61:
                    9a:e1:19:ce:94:7c:56:fe:45:ee:60:65:78:79:6d:
                    a0:b7:86:2f:ea:c1:ad:aa:2e:87:68:7d:3c:49:35:
                    ee:a0:03:ff:ed:e8:75:b9:4b:ee:ec:a7:c1:65:14:
                    62:49:38:6f:4c:e6:56:f8:e9:05:aa:e3:85:b7:7e:
                    f7:e4:92:b6:ae:38:13:4f:db:28:74:a7:f2:36:c9:
                    20:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:08:E8:85:D2:8D:E6:EA:4C:37:04:72:3F:96:48:59:45:F4:C2:A2
            X509v3 Authority Key Identifier:
                keyid:54:A3:E0:C2:3D:3A:0C:CE:C6:7A:C2:EA:87:83:E5:44:48:B1:9E:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/VKPgwj06DM7GesLqh4PlREixngU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VKPgwj06DM7GesLqh4PlREixngU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/VKPgwj06DM7GesLqh4PlREixngU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:3f:94:59:e8:58:12:32:1b:b0:9a:4c:ea:c3:d9:df:83:22:
         aa:ae:15:dd:dc:c1:a6:f5:2f:b3:37:1a:24:a3:6f:3e:93:38:
         98:24:f2:4b:58:08:b7:2f:89:37:1d:59:8e:5e:0e:a0:d7:50:
         1c:88:e2:92:0c:d8:42:a4:e0:11:93:4f:e2:b9:86:e0:eb:e1:
         90:25:f5:fd:92:70:40:b9:27:5f:93:ad:e3:7f:2e:54:e4:cd:
         db:f8:07:60:a0:75:73:eb:ce:2b:3f:57:24:00:99:f1:9a:10:
         8c:e8:98:f6:94:2b:b7:5c:6c:ea:b8:97:d2:12:8c:89:24:ea:
         b1:e0:41:05:5b:88:ad:48:dd:a4:27:08:01:89:01:24:14:53:
         cf:6a:00:75:ec:1d:3d:14:99:38:ac:68:c8:a4:32:de:f3:a4:
         f3:c7:6e:80:74:1e:96:6f:83:f2:9e:68:d0:be:9f:cb:0c:97:
         11:35:17:6c:31:53:1e:48:ea:91:09:08:9b:4b:a7:23:fb:00:
         53:c5:da:55:11:c7:d4:27:e2:e4:80:6c:ae:07:86:ec:cf:b5:
         59:76:ec:81:75:65:a8:be:ca:75:ff:81:db:93:32:e8:bd:d8:
         b7:33:6f:38:bb:b6:e8:ee:cd:ab:e2:f7:19:bb:82:94:c1:b8:
         09:ad:31:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:31:48 2026 by rpki-client