Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.mft
File:                     vIYhQTCXFsDk3Dff_zPlqwxVStA.mft (raw, json)
Hash identifier:          8FQiSfPjr4sadwPkWuw7q/1wJFvTrLHwp+h8pkA5Qo4=
Subject key identifier:   DD:D4:09:53:C2:33:50:75:A8:AB:A7:BA:6E:9E:B0:93:19:19:78:6E
Authority key identifier: BC:86:21:41:30:97:16:C0:E4:DC:37:DF:FF:33:E5:AB:0C:55:4A:D0
Certificate issuer:       /CN=A911EA27/serialNumber=BC862141309716C0E4DC37DFFF33E5AB0C554AD0
Certificate serial:       02D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYhQTCXFsDk3Dff_zPlqwxVStA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.mft
Manifest number:          02CB
Signing time:             Wed 29 Jul 2026 02:09:31 +0000
Manifest this update:     Wed 29 Jul 2026 02:09:31 +0000
Manifest next update:     Wed 05 Aug 2026 02:09:31 +0000
Files and hashes:         1: vIYhQTCXFsDk3Dff_zPlqwxVStA.crl (hash: pizzS2X7QOPameLYBtC3E41Bo45w4s0P4ZHU9Vyhld0=)
                          2: 3DE0E9065F0811EDB42DC97FC4F9AE02.roa (hash: NcHl9AJMYCFpUIi+eqsBTaf+YrjXdd3uK3fAP8cyrek=)
                          3: 3F2E65045F0811EDB42DC97FC4F9AE02.roa (hash: c+rgLPv7uhR0sgis57QLeIpTo3mpCxApvYMQGknvhqw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.crl
                          rsync://rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYhQTCXFsDk3Dff_zPlqwxVStA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 02:09:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 728 (0x2d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911EA27, serialNumber=BC862141309716C0E4DC37DFFF33E5AB0C554AD0
        Validity
            Not Before: Jul 29 02:09:31 2026 GMT
            Not After : Aug  5 02:09:31 2026 GMT
        Subject: CN=6a6960db-4d22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:86:75:ad:5b:27:e3:a5:3c:2c:72:23:9b:31:
                    1d:30:07:68:1c:b1:25:8a:28:00:a7:4f:cf:79:04:
                    02:15:cc:fa:7e:6e:de:5d:e0:b5:5a:f5:39:d2:62:
                    2a:5c:47:bd:5b:59:c1:4c:42:13:6b:26:1f:21:1f:
                    aa:ee:96:92:49:95:11:ea:27:9e:d2:24:9f:f7:f6:
                    5d:7c:2f:0d:64:16:c2:4e:64:5e:9b:9a:99:c1:99:
                    e6:06:8d:10:67:2c:53:a6:41:1a:88:84:88:fa:5e:
                    8f:1e:80:09:aa:ca:29:19:99:e2:d6:23:1d:73:ca:
                    da:20:08:79:12:ab:cb:ff:b9:aa:06:61:b2:e6:79:
                    d7:88:0f:1d:df:c0:10:9e:73:7c:9a:6a:44:c9:74:
                    e6:1c:61:3e:f8:af:c6:b9:5c:39:7b:7f:e1:43:21:
                    45:c9:ff:48:c2:22:60:20:8d:b5:be:6f:20:67:59:
                    05:8c:fd:4b:30:31:61:b3:3b:ee:43:6f:88:3e:b6:
                    a2:22:85:97:26:c0:8d:4d:25:53:85:da:61:5a:3d:
                    ce:57:05:a4:56:93:09:23:9d:f4:ad:41:b0:b5:28:
                    d9:23:09:10:a2:d8:02:63:f4:ca:90:62:93:5c:a2:
                    f1:12:61:16:12:44:25:88:7b:ed:92:85:3e:17:91:
                    2e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:D4:09:53:C2:33:50:75:A8:AB:A7:BA:6E:9E:B0:93:19:19:78:6E
            X509v3 Authority Key Identifier:
                keyid:BC:86:21:41:30:97:16:C0:E4:DC:37:DF:FF:33:E5:AB:0C:55:4A:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYhQTCXFsDk3Dff_zPlqwxVStA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:1d:a3:c1:1e:8e:ab:81:d3:e2:63:cd:7d:60:31:ec:68:08:
         40:95:be:80:46:d3:f6:91:c3:4c:00:b5:f8:da:6a:ac:3d:8e:
         89:d7:3a:4d:c2:f3:2b:a2:0e:f3:d6:1c:d7:a4:29:d1:32:4a:
         5b:60:21:79:4c:2e:cd:2f:a6:5a:ba:42:a7:5c:80:51:15:b6:
         39:4e:3d:e5:2e:96:9f:32:ed:92:63:29:1b:fb:14:88:bf:5e:
         e8:7f:1a:2d:c5:23:f6:1e:6e:e3:f8:ee:de:40:71:e4:c3:e3:
         8f:76:11:96:7c:83:a0:dd:ae:83:f3:d5:51:50:ef:61:ab:d9:
         90:f0:2f:eb:c3:76:80:73:aa:68:e5:25:0a:89:ff:87:97:94:
         98:0f:94:a4:f9:66:02:59:a7:57:b8:ab:b6:1d:4a:02:37:34:
         ca:06:74:d7:8e:d1:f6:a5:30:ce:6a:ec:a9:86:d5:ee:d3:7d:
         40:fc:5d:8a:02:d5:89:da:d5:48:cc:8a:23:fd:8e:60:c7:e3:
         80:48:d1:c2:94:15:04:00:86:49:b1:89:78:2c:92:e1:0b:49:
         71:49:00:6e:ae:5b:d4:42:fc:19:a3:8f:bb:c3:f9:9b:17:4f:
         0f:32:d7:d4:93:9a:b2:ed:89:e4:12:0b:b4:c8:72:23:65:03:
         a7:be:22:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:08:43 2026 by rpki-client