Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft
File:                     vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft (raw, json)
Hash identifier:          jyFkrh6i4Sqfz8r5K34OFepF7vdeSteh/v3aS4Ftgtk=
Subject key identifier:   8E:3E:68:73:49:6E:6A:83:30:23:41:03:CA:60:8B:CF:06:21:87:1A
Authority key identifier: BE:01:91:37:A8:1D:7E:9C:D9:AF:56:CD:91:C5:87:C2:EF:06:E9:3B
Certificate issuer:       /CN=A91F9E9D/serialNumber=BE019137A81D7E9CD9AF56CD91C587C2EF06E93B
Certificate serial:       0213
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft
Manifest number:          0207
Signing time:             Thu 23 Jul 2026 04:28:36 +0000
Manifest this update:     Thu 23 Jul 2026 04:28:35 +0000
Manifest next update:     Thu 30 Jul 2026 04:28:35 +0000
Files and hashes:         1: vgGRN6gdfpzZr1bNkcWHwu8G6Ts.crl (hash: c2jC2hiNmlzOuPQk4dP8rT0rvS2MiLrSKpcj3jUwlaA=)
                          2: 06CB0AC26AE011F1AF7EC1267047A888.roa (hash: 91FFd5VQ1GUvnVFlmIU8+Ug11oAeUUwOUC9UDvOOWe0=)
                          3: 3DA5441A070611F1ACA42273223D8C67.roa (hash: 5bZH49LJAnGshgObn97HVHbZgrl3zidwMemvnAadtsI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.crl
                          rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:28:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 531 (0x213)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9E9D, serialNumber=BE019137A81D7E9CD9AF56CD91C587C2EF06E93B
        Validity
            Not Before: Jul 23 04:28:35 2026 GMT
            Not After : Jul 30 04:28:35 2026 GMT
        Subject: CN=6a619874-f83f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1a:d7:0f:40:ad:89:75:fd:83:7b:40:f9:ee:
                    50:d3:63:29:ae:d7:f1:1a:08:7d:77:b9:ba:56:3e:
                    5d:97:d1:37:18:d8:31:6b:68:a6:9f:4f:23:46:ee:
                    52:cd:74:3f:94:11:c9:3a:87:67:22:f0:19:8d:84:
                    07:c5:65:1d:a1:5d:72:f4:cf:1e:26:76:1b:75:4e:
                    4e:77:f4:58:d1:19:67:26:c6:1d:27:46:47:52:70:
                    86:b8:5e:92:fc:14:fe:f5:b5:f1:0b:6c:f8:ad:85:
                    5e:c6:bd:fc:4e:3e:5a:36:77:7f:62:c7:b6:e7:56:
                    86:32:d9:50:c4:78:16:00:98:89:65:ef:99:62:2b:
                    5c:bb:c1:f7:fe:7d:3c:77:a1:6d:90:1a:06:40:82:
                    9a:90:d4:54:5b:3d:11:35:c2:f4:f7:49:d4:bc:c6:
                    63:69:ee:58:05:30:77:e4:fb:9b:7a:3c:3a:39:11:
                    b5:db:78:bb:c0:11:17:50:a8:19:40:86:5f:e1:7e:
                    ed:41:c0:49:fa:97:ff:5c:e7:b2:c5:0f:d4:23:a2:
                    d3:0c:74:74:2f:48:c4:87:0a:2b:e0:3c:74:d1:5e:
                    cc:2f:5c:a3:64:4c:c6:2c:41:83:96:4c:5c:19:1d:
                    28:af:41:f2:cd:02:9f:ec:32:3a:1f:41:69:fc:1e:
                    ea:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:3E:68:73:49:6E:6A:83:30:23:41:03:CA:60:8B:CF:06:21:87:1A
            X509v3 Authority Key Identifier:
                keyid:BE:01:91:37:A8:1D:7E:9C:D9:AF:56:CD:91:C5:87:C2:EF:06:E9:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:c6:24:b2:ff:04:ef:2e:13:d7:40:ca:9f:8b:08:5b:83:6a:
         b2:24:56:49:1d:e2:19:be:13:9b:dd:60:79:c5:a1:04:73:2d:
         f1:f9:98:8b:af:5f:30:42:35:89:a5:be:dc:12:db:57:bd:f9:
         d0:f7:3c:07:ca:47:f4:10:45:3b:8d:62:07:7a:49:9a:c3:70:
         ad:db:ef:80:99:8b:32:36:42:32:fb:97:74:7c:71:8b:a5:2c:
         27:6b:9e:92:c6:fe:44:d0:20:4b:21:0e:7b:d3:e1:da:2a:64:
         70:a3:e3:fc:91:e8:29:d4:4f:86:f7:22:71:97:3c:4a:c8:55:
         9c:8b:06:24:b7:16:b4:a2:52:75:00:c9:90:b7:cb:4b:ff:b2:
         84:11:c8:7b:6d:03:0c:a0:25:65:dd:30:30:ec:27:3c:41:69:
         96:54:94:d8:14:46:03:24:59:68:d8:63:6f:97:2f:c6:a7:df:
         f6:fe:03:81:92:62:70:7d:df:84:dc:27:12:09:93:44:a6:5c:
         f9:19:60:45:98:06:24:98:38:90:e2:cb:9b:bd:50:af:62:0b:
         fb:bf:23:82:a2:fb:6f:ed:e1:1f:a0:3f:c0:dd:79:ea:4f:a3:
         89:37:8f:55:b3:50:3b:a4:11:30:68:b5:0e:93:23:39:6a:d9:
         1f:09:d2:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:05:18 2026 by rpki-client