Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.mft
File:                     VJJGIQXOsFLbqdrou2NfBfd3Fh0.mft (raw, json)
Hash identifier:          TFxxBUz+qd3AKaP6nJcztNt2iazDX/wgHCK+vuRO57M=
Subject key identifier:   D3:30:C3:4B:46:B3:C9:9A:6E:9C:21:B1:E6:06:3A:C7:CB:4A:23:3B
Authority key identifier: 54:92:46:21:05:CE:B0:52:DB:A9:DA:E8:BB:63:5F:05:F7:77:16:1D
Certificate issuer:       /CN=A912F62D/serialNumber=5492462105CEB052DBA9DAE8BB635F05F777161D
Certificate serial:       D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJJGIQXOsFLbqdrou2NfBfd3Fh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.mft
Manifest number:          D2
Signing time:             Wed 25 Mar 2026 05:57:09 +0000
Manifest this update:     Wed 25 Mar 2026 05:57:09 +0000
Manifest next update:     Wed 01 Apr 2026 05:57:09 +0000
Files and hashes:         1: VJJGIQXOsFLbqdrou2NfBfd3Fh0.crl (hash: DPH4Fnz1q5bETDbVPpEC/aGiFOlDb01QauQfQch03Mk=)
                          2: 6DAFB1EAEA7E11EF93A91726C4F9AE02.roa (hash: bvcgffhWxjS/n7QVMktlVU8p36FL7wCiksDPf357oO4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.crl
                          rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJJGIQXOsFLbqdrou2NfBfd3Fh0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:57:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 214 (0xd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F62D, serialNumber=5492462105CEB052DBA9DAE8BB635F05F777161D
        Validity
            Not Before: Mar 25 05:57:09 2026 GMT
            Not After : Apr  1 05:57:09 2026 GMT
        Subject: CN=69c37935-7c3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:21:4a:d4:11:22:89:9f:f6:db:a3:2f:f8:f6:
                    3f:aa:72:63:9e:ec:7e:68:94:f9:3c:44:81:ed:04:
                    43:f0:bd:b2:04:c3:29:2b:2e:73:0d:2f:f9:29:1f:
                    60:b0:cb:ec:f8:b5:33:5b:34:df:e4:46:67:c0:98:
                    ee:ee:08:60:b9:37:10:c9:a8:16:33:02:8d:d1:93:
                    8e:93:3f:92:c6:a8:b2:41:63:97:46:29:7e:cd:26:
                    83:17:9f:3c:c3:80:03:f5:57:34:67:62:ab:58:2e:
                    ab:f4:72:9f:75:58:55:c3:0f:fb:81:7d:f3:98:bd:
                    1f:88:4a:77:82:a5:d2:7e:b1:10:41:76:44:af:36:
                    af:de:ca:ea:32:94:1c:dc:12:75:58:c1:4e:5a:a8:
                    e5:fd:c3:c5:00:d0:59:a4:1b:95:b7:7f:12:97:40:
                    52:52:37:25:64:89:ba:83:0b:f4:2f:ab:28:1d:ba:
                    95:13:fe:46:41:eb:8b:4f:b1:25:95:12:8d:28:f6:
                    8d:8b:d9:1b:c6:25:93:78:f4:39:b2:46:28:be:aa:
                    7f:54:78:36:d8:90:a2:81:8d:6d:bf:6c:e8:6d:d2:
                    45:96:1b:23:f7:4b:53:dc:8e:71:f4:8c:19:5f:27:
                    5f:ef:54:1f:68:a7:25:11:c5:4e:82:4a:83:32:92:
                    3b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:30:C3:4B:46:B3:C9:9A:6E:9C:21:B1:E6:06:3A:C7:CB:4A:23:3B
            X509v3 Authority Key Identifier:
                keyid:54:92:46:21:05:CE:B0:52:DB:A9:DA:E8:BB:63:5F:05:F7:77:16:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJJGIQXOsFLbqdrou2NfBfd3Fh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:7b:39:bf:aa:d8:71:31:86:3a:5a:7d:70:6b:c5:ab:d1:8d:
         42:14:30:b7:9c:6d:12:bb:aa:fb:4a:fd:e4:a8:f0:76:00:f4:
         ac:2c:dd:ba:fb:8f:e1:b3:9e:cd:e6:65:15:34:00:78:6c:fb:
         5c:76:ed:d7:20:ec:3b:a9:76:44:0b:77:3c:80:fd:17:79:01:
         ab:86:4e:1a:66:94:81:73:af:78:dd:77:51:51:14:99:d3:ff:
         b5:12:c7:13:e2:1a:68:81:bb:b3:70:41:5e:ce:ea:05:19:12:
         e9:b4:8f:a4:ed:39:e3:99:b6:b9:7c:40:35:11:8f:bb:d3:d1:
         02:2e:f7:e5:ae:1f:ca:92:87:50:f9:c5:a4:63:4d:c2:f3:88:
         de:69:38:69:c0:c4:8b:81:fb:01:b5:9b:2c:e2:c0:64:7f:94:
         30:d4:b3:62:7f:db:a4:e7:44:ec:f7:8c:dd:4c:2f:1a:1b:13:
         8d:a1:5c:a7:f7:99:ad:fa:ee:a2:cd:bd:80:4f:b6:c2:fa:bc:
         fc:e8:84:94:e3:99:34:d6:30:36:ac:1d:fd:ec:dc:d0:5a:92:
         a3:12:90:a9:88:4e:4a:ab:03:8a:50:79:65:b7:48:24:93:41:
         0b:49:6d:18:b1:92:ae:8f:59:aa:c8:c0:f9:bd:71:a0:d1:9b:
         5d:f8:66:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:18:03 2026 by rpki-client