Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft
File:                     vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft (raw, json)
Hash identifier:          0S7xnZ20gL+Mzg+saETfcSH0v+FLEW8OOJ5Q1lqKTTA=
Subject key identifier:   1F:2B:23:EB:BF:96:89:FD:AD:74:7E:E2:6F:40:E2:6F:6B:EE:6E:94
Authority key identifier: BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03
Certificate issuer:       /CN=A91AA48F/serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503
Certificate serial:       35B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft
Manifest number:          3580
Signing time:             Thu 04 Jun 2026 14:37:48 +0000
Manifest this update:     Thu 04 Jun 2026 14:37:48 +0000
Manifest next update:     Thu 11 Jun 2026 14:37:48 +0000
Files and hashes:         1: vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl (hash: +MC14uQH1Z/GAX2orqCwhWqZHVB+MDmx2oyoETeuZHk=)
                          2: 21C0B7E23BD311F0B1BF6C56C4F9AE02.roa (hash: ei/pNFfYuuTuQw4Uvc9PFgEYvRb+k6YfbWf/kyJWsGU=)
                          3: 08347C420BFB11EDA31A0961C4F9AE02.roa (hash: bKCsW0HOObswpaBTmtOg5un1FXNgtKQBykPxtUBttFM=)
                          4: 8E0F37D4AD9911EF8F5AF92EC4F9AE02.roa (hash: M2tZaZY+VtTJR4ttrGMuLbgoQBKpx51lR8nHOr7SfHc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl
                          rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 14:37:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13752 (0x35b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AA48F, serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503
        Validity
            Not Before: Jun  4 14:37:48 2026 GMT
            Not After : Jun 11 14:37:48 2026 GMT
        Subject: CN=6a218dbc-0f49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b8:76:67:1e:c3:3a:38:db:3b:ec:dd:64:09:
                    86:1f:d2:9f:c7:8d:d9:70:a0:59:00:3e:96:b4:51:
                    14:d7:2c:c7:70:a6:2b:52:2a:d9:78:23:a4:a8:33:
                    30:e3:45:c4:2b:e7:73:65:d9:e4:8c:fe:3c:a9:b1:
                    32:5f:8c:9a:d0:47:1a:d9:9f:1c:a0:5b:b6:90:29:
                    f6:69:6d:a0:55:92:a8:5b:97:d9:a7:31:79:43:39:
                    06:9c:31:e0:71:fe:a9:27:4d:70:6e:75:1e:ae:ff:
                    a2:9d:10:6b:85:a4:98:2a:80:c9:71:46:68:ce:7b:
                    02:76:3b:5a:2f:eb:7c:99:30:87:b4:8f:e4:4d:9d:
                    d1:87:00:d3:98:54:23:89:de:46:f9:24:54:6d:02:
                    d3:c9:25:3f:4d:74:ef:cd:26:9f:6f:ba:44:2c:c4:
                    f2:dc:e3:94:fa:bb:d8:5d:b2:ad:a7:03:8e:65:04:
                    c3:fe:07:e0:9e:6c:59:98:9e:a9:37:d1:ec:f5:1e:
                    87:dd:43:90:a0:c3:aa:c7:61:10:61:51:92:f2:ab:
                    4a:25:7d:86:c5:2d:86:f8:ba:1f:a2:90:f7:ae:0a:
                    e9:c0:b2:90:94:61:09:4b:1c:33:ea:8e:93:4e:60:
                    dd:95:5b:91:b1:18:94:d5:1e:fa:b0:fd:ad:0d:7c:
                    06:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:2B:23:EB:BF:96:89:FD:AD:74:7E:E2:6F:40:E2:6F:6B:EE:6E:94
            X509v3 Authority Key Identifier:
                keyid:BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:73:4b:83:f5:a9:32:82:37:71:79:42:33:03:9c:2f:65:72:
         50:67:68:f3:b0:a2:44:91:50:56:2b:22:c0:b2:e9:8a:14:49:
         9d:63:dc:9d:ce:6b:da:5c:79:bb:2c:ff:58:b1:4f:74:c0:e5:
         d9:06:61:98:cb:c3:08:c3:87:ca:0e:e2:a5:dc:4b:41:67:30:
         18:32:03:1b:41:7b:79:7f:b7:f0:8f:ea:a3:fb:ab:8b:b1:f0:
         85:e0:9b:30:7d:70:ce:1d:14:90:55:42:68:ae:7b:c6:0f:db:
         80:3f:d1:5d:4e:5e:b9:a1:da:87:1f:ed:54:ee:4b:3d:d1:1a:
         dc:02:68:dd:56:0c:7c:e2:1a:6f:15:22:21:35:1f:60:00:0e:
         19:67:50:2d:a4:be:a4:31:8c:32:14:46:4a:12:54:e9:f8:68:
         87:27:55:4b:a7:24:a6:08:11:96:5e:2a:ff:71:65:f7:06:62:
         f4:1b:bd:eb:db:24:8e:aa:06:17:1f:13:cf:34:d9:43:41:a4:
         a3:56:21:5c:e5:4b:0d:a6:19:11:14:67:b5:47:81:df:c3:a3:
         7a:32:04:12:33:42:7c:e1:f4:e5:9e:17:15:1a:bd:26:4c:1d:
         76:27:b7:b3:a4:52:1c:22:d1:9b:4c:d7:07:3b:13:bb:97:6a:
         b3:ae:67:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:14:30 2026 by rpki-client