Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.mft
File:                     vj-L34G2a07S4cdOtdX7AbX3dkE.mft (raw, json)
Hash identifier:          D4HWf+KHUsgfqCX/vp1ElBJ9NhdrG2E74tIa+vQoruU=
Subject key identifier:   17:FB:01:EE:45:3E:DC:D6:E7:19:FE:CB:05:6A:01:00:7C:51:15:A7
Authority key identifier: BE:3F:8B:DF:81:B6:6B:4E:D2:E1:C7:4E:B5:D5:FB:01:B5:F7:76:41
Certificate issuer:       /CN=A911DE88/serialNumber=BE3F8BDF81B66B4ED2E1C74EB5D5FB01B5F77641
Certificate serial:       02A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-L34G2a07S4cdOtdX7AbX3dkE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.mft
Manifest number:          028A
Signing time:             Thu 23 Jul 2026 03:07:45 +0000
Manifest this update:     Thu 23 Jul 2026 03:07:45 +0000
Manifest next update:     Thu 30 Jul 2026 03:07:45 +0000
Files and hashes:         1: vj-L34G2a07S4cdOtdX7AbX3dkE.crl (hash: WsIJaNphvE6+Lj9oSk4eTSvM/HCewRjxdUpJbAr4UDg=)
                          2: F6732580607111EF9102BD19C4F9AE02.roa (hash: vjw0ZDNhGZYYZvURoK7T9a0f/Cvv2iSDqaaJOXeDsko=)
                          3: 9D006D76ABFF11EFB2C29330C4F9AE02.roa (hash: gpTT47Zm52/oXmlCRQ9joE/pQOm48+JhXhIfyvy7DVY=)
                          4: 3D5EC616694B11EFABF9221EC4F9AE02.roa (hash: E4M2glENp14yC8XqERK+K5RnK+5kQXHvoIyYZ3+OkHg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.crl
                          rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-L34G2a07S4cdOtdX7AbX3dkE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 03:07:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 678 (0x2a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DE88, serialNumber=BE3F8BDF81B66B4ED2E1C74EB5D5FB01B5F77641
        Validity
            Not Before: Jul 23 03:07:45 2026 GMT
            Not After : Jul 30 03:07:45 2026 GMT
        Subject: CN=6a618581-932d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1a:d9:b4:de:90:8e:f8:4e:7a:4a:11:ac:d2:
                    e8:16:db:4e:4b:4f:b2:66:4e:08:3e:e9:a4:0f:33:
                    54:f4:07:b9:a3:bb:5b:ca:43:00:20:62:54:6d:9c:
                    8a:10:ea:b5:97:0b:74:28:a0:72:a6:8b:dd:47:57:
                    1a:c4:14:c2:7a:63:44:2a:52:51:c6:62:f5:cf:55:
                    4e:52:7d:a9:58:9f:13:ba:80:cc:03:a5:a1:eb:08:
                    b3:0f:00:37:c9:a1:0d:d6:91:55:82:48:75:40:30:
                    c7:3b:42:fe:ee:b7:d5:ab:25:0c:7b:a7:6e:80:bc:
                    9b:bb:93:33:c5:dd:81:c2:90:cd:14:e7:32:21:b5:
                    2b:ef:eb:ba:b6:50:c5:5e:b5:2d:76:8e:2c:d7:b8:
                    f6:96:90:44:e7:d3:8d:f1:b2:d0:8c:e0:6b:d4:b2:
                    7e:4d:ea:79:61:96:6d:a0:3c:d5:bf:66:8f:2d:c1:
                    27:56:6d:ec:38:52:5a:92:cf:71:17:0d:db:b7:5e:
                    c6:06:7d:be:c6:c1:bd:b9:a8:79:9c:f2:56:32:71:
                    d0:ca:89:8e:e5:dc:c5:d0:92:e0:f8:3f:de:b2:e5:
                    38:99:70:d7:7b:76:30:83:41:4c:9e:e0:96:b1:71:
                    d1:84:28:8c:7c:94:10:b6:00:f3:21:b7:14:f3:87:
                    ff:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:FB:01:EE:45:3E:DC:D6:E7:19:FE:CB:05:6A:01:00:7C:51:15:A7
            X509v3 Authority Key Identifier:
                keyid:BE:3F:8B:DF:81:B6:6B:4E:D2:E1:C7:4E:B5:D5:FB:01:B5:F7:76:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-L34G2a07S4cdOtdX7AbX3dkE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:3a:28:8c:85:52:f3:a8:86:ca:8d:0b:15:47:b8:64:64:96:
         92:3a:82:a7:72:f1:ff:97:f6:63:83:06:58:ee:23:bd:b5:26:
         26:0d:05:29:6b:af:6a:07:21:db:8b:2b:6b:8f:79:58:ac:82:
         6a:b5:08:aa:55:93:69:f3:15:d3:2a:d7:4e:15:45:1f:97:13:
         f1:c7:7a:dc:df:84:c0:28:db:60:18:63:ce:fa:cb:e9:d5:ea:
         fc:f3:9d:28:88:0c:3e:22:78:cf:17:8d:d0:93:b8:c6:da:f8:
         9f:28:40:d0:fc:bc:47:e3:a9:67:f4:af:0f:cc:b3:1c:fd:8e:
         11:66:4a:dc:11:13:37:5b:59:49:ea:ce:0e:20:90:21:79:8a:
         91:5e:d2:bd:6e:4c:18:3e:3b:0a:b8:e7:90:60:02:7a:cb:44:
         cc:48:27:b0:de:49:75:e0:82:a1:0d:8b:29:1e:ec:f8:7c:db:
         82:4c:9b:cc:0f:82:68:5f:a9:3b:36:06:02:c7:a3:3d:f5:52:
         c9:a2:b3:ea:11:cb:eb:9e:a1:40:a9:22:12:ef:e6:2a:7f:18:
         b4:03:a3:32:65:4e:cd:71:52:7f:08:b9:9c:47:74:af:10:18:
         c0:bb:5f:87:62:a0:c3:54:83:e5:f7:74:82:1c:83:6d:d4:4e:
         7c:06:02:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:37:16 2026 by rpki-client