Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft
File:                     VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft (raw, json)
Hash identifier:          FO68J1xODA5/SuuXjy7EAKB87E/QIWyV6jS8OG60iG0=
Subject key identifier:   44:AD:D1:06:5B:3D:75:0F:E0:AB:D4:AC:E2:CD:AB:3F:54:8E:95:BA
Authority key identifier: 56:38:CB:1E:26:D1:19:9D:AB:E8:B8:C7:ED:22:B0:3C:4C:E8:C8:0A
Certificate issuer:       /CN=A91D6F2B/serialNumber=5638CB1E26D1199DABE8B8C7ED22B03C4CE8C80A
Certificate serial:       0410
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VjjLHibRGZ2r6LjH7SKwPEzoyAo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft
Manifest number:          0408
Signing time:             Wed 13 May 2026 00:32:33 +0000
Manifest this update:     Wed 13 May 2026 00:32:32 +0000
Manifest next update:     Wed 20 May 2026 00:32:32 +0000
Files and hashes:         1: VjjLHibRGZ2r6LjH7SKwPEzoyAo.crl (hash: xlRjxX6/yhLEmWZHUJiUilx7QIlyuRVaaXcGe0/Zflo=)
                          2: 2A22D2FCB6CB11ECA43EEE87C4F9AE02.roa (hash: 84Ty7wcmoehSksw6QkgqM/3dAcuuvgPeVakKxHJDpTI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.crl
                          rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VjjLHibRGZ2r6LjH7SKwPEzoyAo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 00:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1040 (0x410)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6F2B, serialNumber=5638CB1E26D1199DABE8B8C7ED22B03C4CE8C80A
        Validity
            Not Before: May 13 00:32:32 2026 GMT
            Not After : May 20 00:32:32 2026 GMT
        Subject: CN=6a03c6a0-d918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:fc:ff:a6:2f:fd:2e:ce:27:2d:cf:1a:d2:72:
                    7e:82:08:24:50:b0:f5:06:db:5b:a3:fc:e6:88:4f:
                    b7:d5:98:94:cb:83:68:e4:7c:aa:f4:e8:ea:c9:31:
                    94:2d:68:09:82:a4:a1:d9:74:07:56:ee:a1:6b:02:
                    18:21:dc:7c:d3:06:5b:96:e1:d2:18:c4:b2:f2:36:
                    46:9b:c7:bb:d6:5e:00:2e:c1:4a:88:d9:5e:c7:39:
                    aa:b9:af:88:35:54:b8:5a:f8:1e:81:35:89:66:a9:
                    5a:69:6c:07:61:aa:40:a7:9e:ee:df:2c:72:f1:fd:
                    b0:0f:0c:53:74:73:7f:60:90:11:d5:2a:e2:58:19:
                    e0:72:ec:87:e7:d7:88:d4:68:45:58:e1:a9:83:88:
                    78:96:e2:b5:3e:6b:2d:5d:cd:72:df:4b:cd:d6:a1:
                    ab:f4:19:be:2a:01:48:ec:24:2f:38:34:81:b6:6f:
                    73:9f:13:2f:e0:64:0f:e7:17:48:d4:5b:ea:88:3c:
                    5b:d9:21:6b:fa:33:da:77:f1:74:40:68:21:45:4c:
                    e7:de:93:87:f0:da:16:86:c7:ef:6a:98:1d:f3:5d:
                    06:58:24:cf:7f:23:c6:88:25:71:1b:04:08:11:36:
                    1f:7c:ff:b6:6f:83:9a:73:97:8f:33:a5:48:c3:9a:
                    f8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:AD:D1:06:5B:3D:75:0F:E0:AB:D4:AC:E2:CD:AB:3F:54:8E:95:BA
            X509v3 Authority Key Identifier:
                keyid:56:38:CB:1E:26:D1:19:9D:AB:E8:B8:C7:ED:22:B0:3C:4C:E8:C8:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VjjLHibRGZ2r6LjH7SKwPEzoyAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:6a:80:22:f6:76:a2:d3:3a:54:ba:eb:3a:35:c6:01:02:18:
         e2:c6:1e:00:24:c3:11:00:1d:1b:05:af:c3:c9:1f:53:e8:3d:
         40:3c:ab:1a:1e:07:55:91:2a:28:ee:c9:36:7a:b2:f0:7a:7c:
         e8:46:62:53:25:f4:4f:ff:07:03:99:ed:bd:53:8e:0f:bc:70:
         79:73:da:7e:27:dd:a6:4a:96:d6:f5:5e:d2:01:0d:4c:17:8e:
         0c:41:c3:1d:f8:dd:20:b9:f8:54:69:e0:1b:fa:12:ac:66:4a:
         f9:a1:4a:4f:ca:19:59:50:d1:3c:30:a8:d3:ae:26:c0:cb:ca:
         9a:54:19:3a:c6:30:99:c1:64:da:5b:31:21:66:cb:c2:3b:fc:
         a0:67:0f:27:15:eb:82:cd:86:9b:ce:70:17:77:cb:26:c2:22:
         2d:6b:2e:de:f1:ce:2a:cd:2d:9a:3e:e8:ab:54:ae:81:ec:11:
         f9:25:79:3d:b1:3b:5b:33:dd:5f:e2:b9:1e:91:94:77:d4:47:
         ec:e8:bc:60:a9:11:1d:4d:d9:51:36:d9:27:4e:98:69:4b:a6:
         7a:cf:bf:a8:ce:85:5a:01:ac:cd:dd:33:c2:0f:b1:cc:c1:b3:
         45:5e:e9:56:a7:54:4e:fb:f4:1a:f6:e3:2f:29:18:6c:48:b0:
         03:f1:2d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:30:18 2026 by rpki-client