Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.mft
File:                     vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.mft (raw, json)
Hash identifier:          wf1PNaDrPRKol0yEuWIM+lSeY0/ViDfi1NjmC8tlKQI=
Subject key identifier:   C9:1B:E2:44:3B:FF:D7:C2:1E:16:08:8A:85:87:72:72:AD:21:62:A5
Authority key identifier: BD:89:78:16:56:D9:D1:58:34:7B:7B:14:C0:4A:D9:EA:44:1C:C9:97
Certificate issuer:       /CN=A918E1C4/serialNumber=BD89781656D9D158347B7B14C04AD9EA441CC997
Certificate serial:       65
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.mft
Manifest number:          62
Signing time:             Mon 01 Jun 2026 08:51:33 +0000
Manifest this update:     Mon 01 Jun 2026 08:51:32 +0000
Manifest next update:     Mon 08 Jun 2026 08:51:32 +0000
Files and hashes:         1: vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.crl (hash: t7e1uV3oaeaLRVmJ+r2foZpDgAKQBNRDAkM2cJoSMtY=)
                          2: 722C58FACE9311F0A2C11D25C4F9AE02.roa (hash: ERXxcYaD/BipGW6AIZDMmzRHcboCoePXi+aLABZ/mKA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.crl
                          rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 08:51:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101 (0x65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E1C4, serialNumber=BD89781656D9D158347B7B14C04AD9EA441CC997
        Validity
            Not Before: Jun  1 08:51:32 2026 GMT
            Not After : Jun  8 08:51:32 2026 GMT
        Subject: CN=6a1d4814-0853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:25:0f:02:84:25:b2:76:61:cc:51:6e:21:7e:
                    cb:53:7a:2f:07:da:bb:91:f0:23:62:1f:74:9b:68:
                    da:aa:82:e2:ce:c2:f4:20:de:e2:d4:0c:5f:52:60:
                    62:fb:78:98:7a:c3:b3:4d:f9:3c:e0:21:e7:aa:a1:
                    19:27:01:d5:67:32:0e:4f:61:c6:36:33:06:cb:23:
                    bc:bb:4a:87:c1:c2:ca:b0:44:0a:51:0a:3e:f1:79:
                    dc:18:db:39:ae:07:8f:22:0b:ab:82:bf:ef:64:71:
                    67:6a:83:b2:b3:22:d4:cd:9b:2d:f9:ab:f2:40:97:
                    6f:d2:c2:d4:a3:3c:59:30:5c:2a:0e:76:59:4b:02:
                    f3:0d:11:49:51:b0:2c:95:fb:45:bf:3e:89:0d:b6:
                    71:b2:8c:a1:2f:64:44:19:20:ed:d3:46:1b:b3:fb:
                    d7:b6:b5:61:a4:90:f2:9c:25:13:cc:d6:ff:6f:94:
                    1b:a2:88:cd:aa:e2:74:45:81:d3:77:65:2f:80:35:
                    14:67:0b:7a:b0:ea:c6:ec:42:d0:9a:ad:52:fc:a2:
                    94:42:4d:8b:11:11:df:9b:49:68:75:22:d9:ff:73:
                    9a:1e:6f:23:c4:d7:09:9f:e4:b3:1a:65:9d:28:dc:
                    65:5a:6e:43:35:f7:15:2b:ba:18:c3:47:03:aa:36:
                    32:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:1B:E2:44:3B:FF:D7:C2:1E:16:08:8A:85:87:72:72:AD:21:62:A5
            X509v3 Authority Key Identifier:
                keyid:BD:89:78:16:56:D9:D1:58:34:7B:7B:14:C0:4A:D9:EA:44:1C:C9:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:37:4a:1b:e1:a8:77:e8:08:2f:52:1f:70:d9:5e:34:4e:60:
         8b:c9:16:e0:e9:ab:83:c0:ca:89:9d:b0:b5:43:aa:de:47:17:
         bd:64:29:ee:3a:8b:4f:21:fd:53:b7:ca:98:05:89:c5:9e:9e:
         fd:34:24:5f:68:8e:de:e3:fd:3b:63:3d:76:ba:f3:9d:0d:b6:
         3d:c1:e5:ab:98:65:c2:28:35:4d:8f:25:39:20:20:19:7a:aa:
         61:db:64:75:83:c5:70:1b:cd:5b:57:a0:15:27:de:8b:9d:c8:
         db:e4:a1:b1:6c:e9:87:0f:e7:90:5d:0b:90:5b:39:92:40:06:
         44:3b:bb:30:14:d5:84:be:44:72:e3:1e:b6:35:5c:e5:5b:77:
         81:8c:aa:17:bc:6e:89:b6:bf:1f:98:bb:38:3d:0e:7f:c9:52:
         94:7e:96:fc:f3:af:98:f6:2b:73:c1:c3:5b:e1:27:79:bc:a1:
         fa:ec:96:c9:1f:9b:bc:a8:60:d3:b8:10:c9:d8:13:b6:25:0c:
         8d:25:ff:67:bd:fa:2f:7a:34:ae:e5:cb:e6:83:21:6b:e0:73:
         c7:37:3a:54:e8:30:4f:4b:58:b7:03:11:32:95:91:a8:74:b1:
         05:d9:dc:fc:88:c7:5b:86:a4:d4:da:4e:3c:d3:43:99:95:4c:
         ad:e4:f2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:20:10 2026 by rpki-client