Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.mft
File:                     VJJGIQXOsFLbqdrou2NfBfd3Fh0.mft (raw, json)
Hash identifier:          rWtcZfK17CpMbER6YUycgHywzaIIyDtEXJPhV55IlKs=
Subject key identifier:   7C:37:72:E9:39:E1:6C:24:A5:DB:00:CE:B5:D8:F5:90:19:00:CA:FC
Authority key identifier: 54:92:46:21:05:CE:B0:52:DB:A9:DA:E8:BB:63:5F:05:F7:77:16:1D
Certificate issuer:       /CN=A912F62D/serialNumber=5492462105CEB052DBA9DAE8BB635F05F777161D
Certificate serial:       0138
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJJGIQXOsFLbqdrou2NfBfd3Fh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.mft
Manifest number:          0132
Signing time:             Fri 25 Sep 2026 05:43:11 +0000
Manifest this update:     Fri 25 Sep 2026 05:43:10 +0000
Manifest next update:     Fri 02 Oct 2026 05:43:10 +0000
Files and hashes:         1: VJJGIQXOsFLbqdrou2NfBfd3Fh0.crl (hash: xz3IDwwYMZa/+kX1WhM5ErgbtODlM+YT17d91V3ZeQM=)
                          2: 6DAFB1EAEA7E11EF93A91726C4F9AE02.roa (hash: R/A26YpYyRkyxcMhqlO+0e6c4yWzwg0UkoqcC9MSJ/Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.crl
                          rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJJGIQXOsFLbqdrou2NfBfd3Fh0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 05:43:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 312 (0x138)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F62D, serialNumber=5492462105CEB052DBA9DAE8BB635F05F777161D
        Validity
            Not Before: Sep 25 05:43:10 2026 GMT
            Not After : Oct  2 05:43:10 2026 GMT
        Subject: CN=6ab609ef-f714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:b7:5e:b8:de:3f:15:35:22:9a:43:94:76:1c:
                    2f:08:8f:f0:52:d9:16:98:af:61:57:eb:3e:b2:8a:
                    da:66:ac:d0:a6:c9:71:86:70:54:74:5d:5d:8f:98:
                    a9:36:c2:78:55:59:5c:fd:ea:7b:b9:82:d8:59:f1:
                    08:1a:a0:fd:cd:3d:06:c6:94:dc:73:b4:1b:e6:e7:
                    40:83:83:f3:70:59:a8:22:0d:35:05:7a:3d:3e:30:
                    b4:d5:f5:a1:8a:8c:0f:6f:4a:0e:54:87:9a:28:b2:
                    98:11:ba:dc:b5:40:5c:d5:63:f1:bc:7e:87:e7:4e:
                    8c:b8:c6:4f:5f:79:8f:81:30:d8:43:7a:9c:91:5c:
                    77:0e:4b:5f:81:ba:a3:2e:57:f6:f1:98:67:19:16:
                    57:52:77:54:2e:01:b6:28:52:d0:5b:fa:46:c0:4c:
                    43:92:49:49:0d:24:b9:a3:4a:1f:d8:ea:18:d5:6e:
                    15:8b:1e:cf:42:58:60:50:74:5e:da:9c:3c:af:18:
                    23:61:eb:db:00:7c:e8:6d:0a:96:62:f8:05:78:b7:
                    f4:b1:39:9e:7e:2a:54:c7:ca:14:1c:b0:f0:8e:5d:
                    ec:44:90:f5:44:14:2a:da:1a:d7:99:39:1e:c0:c6:
                    63:04:b2:d0:18:88:4f:c4:3f:18:3e:f4:8a:b4:a8:
                    67:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:37:72:E9:39:E1:6C:24:A5:DB:00:CE:B5:D8:F5:90:19:00:CA:FC
            X509v3 Authority Key Identifier:
                keyid:54:92:46:21:05:CE:B0:52:DB:A9:DA:E8:BB:63:5F:05:F7:77:16:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJJGIQXOsFLbqdrou2NfBfd3Fh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:6a:73:bb:58:d8:6a:6d:9f:40:15:c8:ac:85:fc:c6:34:35:
         0c:bb:5b:f2:bb:49:67:50:62:27:6a:7a:1a:e9:9d:ce:d5:a5:
         4b:27:fe:64:dd:11:67:e3:da:98:e5:0a:98:23:c4:15:a4:30:
         1f:e9:22:57:3c:6c:5e:a8:23:e5:60:0d:cc:6a:93:1f:64:eb:
         4d:bc:e1:3d:3d:2f:73:53:2c:ce:26:74:63:6f:81:fe:21:af:
         ff:b6:ad:76:1e:73:cf:38:02:ec:3a:94:c8:ad:c1:69:f5:e7:
         2b:65:9a:e7:79:2c:ee:2b:5e:c4:92:c9:40:4e:c8:78:c1:4f:
         92:86:fe:e4:f0:60:e9:e3:a2:b6:bc:c6:62:5c:df:14:ac:36:
         52:4b:f2:2a:f5:e2:a7:99:6a:ad:98:09:a0:7e:d1:70:ef:99:
         2a:da:30:13:3b:f0:e0:af:1c:b5:bc:a9:2a:64:4d:ea:1c:e1:
         19:81:b5:54:42:30:1a:31:36:92:bb:5c:09:64:f8:51:60:ba:
         f1:e9:fd:fc:96:d0:b4:ff:70:05:85:9a:4e:ac:fe:46:ca:c6:
         2d:21:10:48:2e:f0:46:05:31:a1:56:36:e2:37:53:26:ac:81:
         a0:f1:f7:eb:56:8c:07:4e:b1:1a:08:0c:59:86:e2:52:db:22:
         ed:8a:93:d3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkY2MkQxMTAvBgNVBAUTKDU0OTI0NjIxMDVDRUIwNTJEQkE5REFFOEJCNjM1RjA1
Rjc3NzE2MUQwHhcNMjYwOTI1MDU0MzEwWhcNMjYxMDAyMDU0MzEwWjAYMRYwFAYD
VQQDEw02YWI2MDllZi1mNzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7bdeuN4/FTUimkOUdhwvCI/wUtkWmK9hV+s+soraZqzQpslxhnBUdF1dj5ip
NsJ4VVlc/ep7uYLYWfEIGqD9zT0GxpTcc7Qb5udAg4PzcFmoIg01BXo9PjC01fWh
iowPb0oOVIeaKLKYEbrctUBc1WPxvH6H506MuMZPX3mPgTDYQ3qckVx3Dktfgbqj
Llf28ZhnGRZXUndULgG2KFLQW/pGwExDkklJDSS5o0of2OoY1W4Vix7PQlhgUHRe
2pw8rxgjYevbAHzobQqWYvgFeLf0sTmefipUx8oUHLDwjl3sRJD1RBQq2hrXmTke
wMZjBLLQGIhPxD8YPvSKtKhnuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHw3cuk5
4WwkpdsAzrXY9ZAZAMr8MB8GA1UdIwQYMBaAFFSSRiEFzrBS26na6LtjXwX3dxYd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjYyRC8yREE1N0MzQ0VB
NzAxMUVGODE1NEMzNkJDNEY5QUUwMi9WSkpHSVFYT3NGTGJxZHJvdTJOZkJmZDNG
aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZKSkdJUVhPc0ZMYnFkcm91Mk5mQmZkM0ZoMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RjYyRC8yREE1N0MzQ0VBNzAxMUVGODE1NEMzNkJDNEY5QUUwMi9WSkpHSVFYT3NG
TGJxZHJvdTJOZkJmZDNGaDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbWpzu1jYam2fQBXIrIX8xjQ1DLtb8rtJZ1BiJ2p6GumdztWlSyf+ZN0RZ+Pa
mOUKmCPEFaQwH+kiVzxsXqgj5WANzGqTH2TrTbzhPT0vc1MsziZ0Y2+B/iGv/7at
dh5zzzgC7DqUyK3BafXnK2Wa53ks7itexJLJQE7IeMFPkob+5PBg6eOitrzGYlzf
FKw2UkvyKvXip5lqrZgJoH7RcO+ZKtowEzvw4K8ctbypKmRN6hzhGYG1VEIwGjE2
krtcCWT4UWC68en9/JbQtP9wBYWaTqz+RsrGLSEQSC7wRgUxoVY24jdTJqyBoPH3
61aMB06xGggMWYbiUtsi7YqT0w==
-----END CERTIFICATE-----
Generated at Sat Sep 26 15:17:56 2026 by rpki-client