Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft
File:                     vvMhsD2CRd537IDdAzG_uo0IWdg.mft (raw, json)
Hash identifier:          1bi3tBinCUZsIAetDLzJS6lz3y07VR/yxNQJeqwBZ/U=
Subject key identifier:   5A:97:AC:75:C4:0B:B6:C7:64:1A:88:3B:49:F7:56:F2:FD:1F:5A:2B
Authority key identifier: BE:F3:21:B0:3D:82:45:DE:77:EC:80:DD:03:31:BF:BA:8D:08:59:D8
Certificate issuer:       /CN=A91EE8AC/serialNumber=BEF321B03D8245DE77EC80DD0331BFBA8D0859D8
Certificate serial:       01AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft
Manifest number:          0432
Signing time:             Thu 11 Jun 2026 03:56:36 +0000
Manifest this update:     Thu 11 Jun 2026 03:56:36 +0000
Manifest next update:     Thu 18 Jun 2026 03:56:36 +0000
Files and hashes:         1: vvMhsD2CRd537IDdAzG_uo0IWdg.crl (hash: 26bpa8kgpOiS4P6i7gy5Vg+Yn12g6dVozbH/m5Xe2Gw=)
                          2: 5F3C0F26EAEF11EE8CCDB375C4F9AE02.roa (hash: iqq89iXsMkjAcx6f+H8qgQsfKuzOgvixAUFvX+cUdpk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.crl
                          rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 03:56:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 427 (0x1ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE8AC, serialNumber=BEF321B03D8245DE77EC80DD0331BFBA8D0859D8
        Validity
            Not Before: Jun 11 03:56:36 2026 GMT
            Not After : Jun 18 03:56:36 2026 GMT
        Subject: CN=6a2a31f4-9875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:de:ef:99:21:ab:32:fc:e6:7c:93:eb:09:82:
                    40:64:b6:ed:32:a7:7b:1d:7a:a6:1d:bf:9b:b1:c1:
                    46:94:6f:7d:f7:5a:02:99:b7:77:e2:a7:99:e4:cf:
                    94:2b:99:77:ee:6b:ac:be:89:7a:67:28:03:e1:f7:
                    d2:3a:7f:3d:2e:96:30:33:3b:4d:a2:92:fc:db:94:
                    0e:d4:e7:40:55:bb:4b:70:a8:40:1b:8e:28:12:af:
                    f7:99:c4:4e:2f:56:13:40:3c:85:51:ab:be:49:3f:
                    4d:25:f9:9a:ef:27:13:2f:2d:57:2e:26:d4:20:f0:
                    19:78:85:bb:23:f0:28:de:dd:99:5a:44:d2:8f:e2:
                    64:fd:7b:5a:09:1d:98:d4:11:7b:75:58:94:22:bf:
                    2a:92:c6:49:e8:70:94:2b:68:44:ce:84:19:e3:b3:
                    85:98:64:da:34:ee:32:72:bc:af:6d:6f:ca:34:f2:
                    90:9b:04:bf:8e:93:f7:35:ee:98:b3:d2:6a:05:6e:
                    2b:3d:9d:b9:2e:84:35:65:d2:17:1c:7f:db:f8:4b:
                    e8:95:08:89:ce:48:bd:2f:22:8c:ce:d3:0d:d9:06:
                    d0:b4:a6:7e:a6:da:88:31:b3:68:42:29:25:6a:f7:
                    4c:34:6a:13:91:18:6b:7b:1c:39:7d:e9:ad:97:9a:
                    7b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:97:AC:75:C4:0B:B6:C7:64:1A:88:3B:49:F7:56:F2:FD:1F:5A:2B
            X509v3 Authority Key Identifier:
                keyid:BE:F3:21:B0:3D:82:45:DE:77:EC:80:DD:03:31:BF:BA:8D:08:59:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:a3:0c:c4:41:e7:1e:a1:ca:cb:45:7b:e5:ec:ac:1a:5d:48:
         a9:17:25:fe:38:b4:99:65:fb:7a:a5:42:59:75:54:f7:0c:08:
         a6:2b:cb:62:99:74:bf:b4:90:7b:26:cb:48:fa:f6:d6:8c:f8:
         da:b5:ec:23:4c:09:a3:ea:5a:97:a4:cb:bc:de:c2:10:20:ff:
         dc:9b:70:4e:af:fa:25:ff:d8:f2:6a:94:61:28:06:01:73:31:
         29:e7:c3:ab:35:73:80:b9:dc:d9:a6:88:1a:ae:6b:bc:60:b7:
         44:81:3a:6f:04:13:f4:3a:2c:6b:dd:2a:c6:ce:8d:e8:27:3d:
         15:11:22:4e:53:6b:5f:cd:05:33:79:59:66:8f:4b:33:ec:2f:
         1f:c5:7d:05:17:70:83:70:d9:cf:e8:7d:20:2c:72:a3:1a:eb:
         6d:67:75:1c:a7:6a:6e:63:82:33:07:25:a9:33:02:d5:b2:e0:
         8f:82:71:47:ec:ec:3b:3e:c2:37:8d:aa:ff:4b:a4:7f:89:dd:
         1f:3f:67:9b:31:88:ff:51:f2:60:2d:bd:51:56:47:9e:a4:15:
         50:ff:c6:0a:59:64:8e:d1:57:4f:69:63:08:c3:8e:7b:65:9f:
         76:45:48:a2:72:d3:39:c0:41:9c:ae:bb:7b:e8:a0:c4:ff:48:
         c3:00:cb:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 17:36:59 2026 by rpki-client