Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft
File:                     Vg3ED_OlCfnv21Jg7huzhi222N8.mft (raw, json)
Hash identifier:          SK+kNmPiYqhaXujQz1+GUjn2K0Vj9RLEwV+Pzv0nwGQ=
Subject key identifier:   56:0E:E0:64:08:B9:0F:40:C8:02:21:9C:A7:05:3D:66:8B:16:C0:2A
Authority key identifier: 56:0D:C4:0F:F3:A5:09:F9:EF:DB:52:60:EE:1B:B3:86:2D:B6:D8:DF
Certificate issuer:       /CN=A912E926/serialNumber=560DC40FF3A509F9EFDB5260EE1BB3862DB6D8DF
Certificate serial:       0217
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vg3ED_OlCfnv21Jg7huzhi222N8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft
Manifest number:          0213
Signing time:             Wed 25 Mar 2026 02:15:14 +0000
Manifest this update:     Wed 25 Mar 2026 02:15:14 +0000
Manifest next update:     Wed 01 Apr 2026 02:15:14 +0000
Files and hashes:         1: Vg3ED_OlCfnv21Jg7huzhi222N8.crl (hash: dpuxe53XlZZKjLW67XjQZtZRZH/Ie2Tot5TeVtqKzcI=)
                          2: 46BF7E7CFA0611ED802A1C29C4F9AE02.roa (hash: WgI7CDc59isqqRIyCU2539zLb8jArZwcztjdz4JpKEQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.crl
                          rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vg3ED_OlCfnv21Jg7huzhi222N8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:15:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 535 (0x217)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E926, serialNumber=560DC40FF3A509F9EFDB5260EE1BB3862DB6D8DF
        Validity
            Not Before: Mar 25 02:15:14 2026 GMT
            Not After : Apr  1 02:15:14 2026 GMT
        Subject: CN=69c34532-0e12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b7:f5:c4:87:3a:33:eb:af:90:41:45:c7:3e:
                    f4:9e:ae:e0:a7:1b:d8:37:93:2d:6f:c6:9c:bd:71:
                    e5:75:57:4b:02:84:24:2c:2b:c4:f2:a0:9d:2c:e7:
                    76:88:e6:4b:f6:20:4a:f7:d8:15:92:bc:50:83:61:
                    1b:e4:0e:3a:c6:97:74:d2:06:70:19:d8:c6:ed:d5:
                    5b:88:3b:9a:ad:51:4d:1f:04:bb:b5:3d:98:1b:96:
                    85:9c:8b:c4:b8:97:78:a8:7f:4c:5d:ca:dc:25:00:
                    b9:5b:68:72:ac:e0:df:25:a5:b7:22:f1:24:c1:d5:
                    3a:f2:a4:52:e3:9c:3f:77:4f:5a:92:1c:d1:f6:f3:
                    f8:17:e5:73:f6:52:b6:e3:b8:9d:e7:50:4a:ac:cd:
                    0e:2e:9d:16:8e:45:30:ec:50:6e:c1:17:0f:d5:db:
                    e3:52:c4:9c:73:c2:84:ca:ba:a2:92:6c:fd:56:fc:
                    6a:25:cc:79:c2:65:ae:dd:2c:9d:ec:ec:54:f7:3d:
                    97:88:30:f4:9a:76:fe:4b:52:b6:f5:12:d0:ec:ae:
                    e5:4b:72:fb:5e:30:b3:10:0e:67:bd:5d:62:8e:0c:
                    4a:a3:3f:61:d4:cf:6c:e6:e2:8b:d0:41:61:21:9a:
                    eb:12:1d:ae:8c:8b:e9:c1:ff:a3:1f:b1:89:f6:60:
                    1e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:0E:E0:64:08:B9:0F:40:C8:02:21:9C:A7:05:3D:66:8B:16:C0:2A
            X509v3 Authority Key Identifier:
                keyid:56:0D:C4:0F:F3:A5:09:F9:EF:DB:52:60:EE:1B:B3:86:2D:B6:D8:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vg3ED_OlCfnv21Jg7huzhi222N8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:ce:fb:f6:71:db:51:fe:3a:ec:d6:dc:a0:29:13:f4:cb:24:
         cf:3c:e9:4f:f6:ba:b3:6e:46:e3:58:36:24:0b:23:0a:da:c6:
         dd:a1:a7:75:6f:ef:41:99:bd:fc:fd:69:1a:f5:09:dc:a2:c9:
         e1:6f:19:88:6b:14:35:2c:6f:a3:ba:da:a6:8d:fc:9e:2a:ab:
         3b:d7:f5:8d:55:3b:9f:34:76:38:09:5e:98:c8:ed:72:a0:29:
         5d:6f:81:0c:59:4c:e2:60:c3:20:9b:3b:d0:24:d7:38:32:b0:
         49:4d:7c:f7:76:56:e2:ca:9c:0c:59:5b:b1:3f:42:e6:25:00:
         27:a9:32:6d:b4:d4:51:87:3c:fc:8b:bf:59:bb:4a:3a:ac:32:
         46:21:ae:a4:86:90:80:86:b6:db:79:16:86:95:21:31:49:db:
         4d:eb:e3:55:d0:d8:f7:97:c6:91:fb:10:b2:b3:69:e0:9c:73:
         cf:cf:b7:ff:fa:b7:50:92:a1:ea:04:92:35:3c:ac:ef:f7:37:
         6c:5c:bb:d9:42:bd:89:a0:40:ce:18:bb:63:07:7c:4d:20:4d:
         87:dc:69:3f:c6:ea:41:29:1a:86:a1:54:c2:81:f2:31:ab:52:
         45:48:2b:82:b4:73:14:66:b9:0b:cc:ad:20:a1:e1:4e:63:bf:
         18:a2:a4:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:34:13 2026 by rpki-client