Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/vNgnSl8YLOQAgCwIPo0VQi-bthE.mft
File:                     vNgnSl8YLOQAgCwIPo0VQi-bthE.mft (raw, json)
Hash identifier:          sQkIUlkuPtpojMPsMtFVdBUxfLGiSlfpEe1kMyyZDCk=
Subject key identifier:   FA:BE:40:CC:9F:F0:57:0F:42:E3:5C:2C:6E:61:07:C9:F2:CD:61:F8
Authority key identifier: BC:D8:27:4A:5F:18:2C:E4:00:80:2C:08:3E:8D:15:42:2F:9B:B6:11
Certificate issuer:       /CN=A91554E6/serialNumber=BCD8274A5F182CE400802C083E8D15422F9BB611
Certificate serial:       03A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNgnSl8YLOQAgCwIPo0VQi-bthE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/vNgnSl8YLOQAgCwIPo0VQi-bthE.mft
Manifest number:          05B6
Signing time:             Mon 27 Jul 2026 01:46:08 +0000
Manifest this update:     Mon 27 Jul 2026 01:46:08 +0000
Manifest next update:     Mon 03 Aug 2026 01:46:08 +0000
Files and hashes:         1: vNgnSl8YLOQAgCwIPo0VQi-bthE.crl (hash: NhP8jEHZKqM+YTkoIQYTJDcGT5JDUwSjPHaC8KN+ElE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/vNgnSl8YLOQAgCwIPo0VQi-bthE.crl
                          rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/vNgnSl8YLOQAgCwIPo0VQi-bthE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNgnSl8YLOQAgCwIPo0VQi-bthE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 01:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 937 (0x3a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91554E6, serialNumber=BCD8274A5F182CE400802C083E8D15422F9BB611
        Validity
            Not Before: Jul 27 01:46:08 2026 GMT
            Not After : Aug  3 01:46:08 2026 GMT
        Subject: CN=6a66b860-a684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:2a:ef:a3:b7:89:9b:dc:ce:4c:f8:4f:0f:d6:
                    55:8b:01:d4:91:78:ba:f0:2a:a0:1c:e4:ce:af:b6:
                    5c:17:6b:4b:31:18:06:b1:57:c5:6f:1b:66:c2:b7:
                    10:e5:b2:59:25:68:35:57:20:04:23:cc:e0:8b:c9:
                    7e:69:b2:b4:c4:d7:f0:e3:d3:d7:a9:8b:04:ca:dc:
                    54:77:35:18:07:37:a1:2e:15:73:4f:12:69:41:91:
                    dd:b6:b5:e5:85:6e:3e:53:e3:94:58:fa:38:ba:ff:
                    6a:f6:71:a2:03:d6:4b:5b:cc:e5:f2:28:da:ce:d2:
                    26:02:03:1b:00:a5:22:ca:77:79:c7:b1:6c:09:eb:
                    fb:0a:9e:ef:69:61:f4:d1:b4:1d:74:b6:69:7b:96:
                    49:4a:ca:04:ec:f7:d2:dd:b4:ad:90:a2:56:b2:56:
                    3f:32:90:a7:bb:ec:d0:40:c2:ae:bc:31:fe:c8:46:
                    8d:1d:67:8e:ea:ae:2e:1e:b7:1f:b3:78:1b:b4:e5:
                    ac:7f:60:6b:8c:49:b2:6f:f8:76:98:94:e4:fe:e3:
                    25:22:f7:63:16:99:7a:4b:bc:50:05:fd:ac:ba:89:
                    50:1b:30:40:f2:d8:03:9a:50:6f:64:72:bf:6c:b8:
                    a5:d7:fb:e2:1e:46:ef:0b:aa:50:67:5f:9f:b5:53:
                    62:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:BE:40:CC:9F:F0:57:0F:42:E3:5C:2C:6E:61:07:C9:F2:CD:61:F8
            X509v3 Authority Key Identifier:
                keyid:BC:D8:27:4A:5F:18:2C:E4:00:80:2C:08:3E:8D:15:42:2F:9B:B6:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/vNgnSl8YLOQAgCwIPo0VQi-bthE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNgnSl8YLOQAgCwIPo0VQi-bthE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/vNgnSl8YLOQAgCwIPo0VQi-bthE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:54:56:24:6d:7f:f1:05:95:78:a9:96:3b:c8:54:fc:5b:8e:
         34:c5:4e:27:17:f3:6a:45:e7:3b:8b:06:a7:14:b2:77:5d:db:
         54:f9:d4:eb:3a:36:c9:2d:74:1b:66:88:11:9f:2f:7e:e9:f5:
         e0:03:db:7c:43:7e:2d:87:7a:26:20:ee:98:83:3c:a0:0c:1a:
         1b:fe:95:8c:ac:2d:f5:1d:04:f8:b3:d0:af:58:ae:7c:e5:1e:
         08:c1:f3:02:99:93:ae:02:4d:8f:8d:0e:bf:f0:d2:ee:2d:ac:
         7e:bd:d7:32:e9:d0:3f:87:a2:d0:7a:73:71:19:87:c7:1c:c5:
         f6:8c:18:c3:7e:cd:ca:22:ae:04:68:be:a5:4e:0f:c3:9d:95:
         38:a2:72:f6:e0:93:b1:02:c0:1b:2c:64:47:f9:5c:ac:b2:bf:
         aa:22:5f:19:cb:d1:0e:62:7a:40:ee:7e:f4:9f:5b:86:18:96:
         00:22:e4:79:11:dc:fe:93:e2:79:d9:b3:e6:f7:77:2b:d9:2c:
         38:3b:6a:84:55:65:40:6b:a2:5f:9a:f7:9f:b3:1a:cc:97:07:
         a9:21:7a:8f:72:0f:08:b1:32:c9:22:02:75:40:a7:72:2a:1a:
         70:47:79:88:fe:6e:42:1d:5b:9e:95:82:d9:a8:78:c3:1f:5f:
         d1:05:b8:ca
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA6kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTU0RTYxMTAvBgNVBAUTKEJDRDgyNzRBNUYxODJDRTQwMDgwMkMwODNFOEQxNTQy
MkY5QkI2MTEwHhcNMjYwNzI3MDE0NjA4WhcNMjYwODAzMDE0NjA4WjAYMRYwFAYD
VQQDEw02YTY2Yjg2MC1hNjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjCrvo7eJm9zOTPhPD9ZViwHUkXi68CqgHOTOr7ZcF2tLMRgGsVfFbxtmwrcQ
5bJZJWg1VyAEI8zgi8l+abK0xNfw49PXqYsEytxUdzUYBzehLhVzTxJpQZHdtrXl
hW4+U+OUWPo4uv9q9nGiA9ZLW8zl8ijaztImAgMbAKUiynd5x7FsCev7Cp7vaWH0
0bQddLZpe5ZJSsoE7PfS3bStkKJWslY/MpCnu+zQQMKuvDH+yEaNHWeO6q4uHrcf
s3gbtOWsf2BrjEmyb/h2mJTk/uMlIvdjFpl6S7xQBf2suolQGzBA8tgDmlBvZHK/
bLil1/viHkbvC6pQZ1+ftVNioQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPq+QMyf
8FcPQuNcLG5hB8nyzWH4MB8GA1UdIwQYMBaAFLzYJ0pfGCzkAIAsCD6NFUIvm7YR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTRFNi85RjA2Nzc0OEVE
NEIxMUVDQUI4RkFBNzdDNEY5QUUwMi92TmduU2w4WUxPUUFnQ3dJUG8wVlFpLWJ0
aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZOZ25TbDhZTE9RQWdDd0lQbzBWUWktYnRoRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NTRFNi85RjA2Nzc0OEVENEIxMUVDQUI4RkFBNzdDNEY5QUUwMi92TmduU2w4WUxP
UUFnQ3dJUG8wVlFpLWJ0aEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAi1RWJG1/8QWVeKmWO8hU/FuONMVOJxfzakXnO4sGpxSyd13bVPnU6zo2yS10
G2aIEZ8vfun14APbfEN+LYd6JiDumIM8oAwaG/6VjKwt9R0E+LPQr1iufOUeCMHz
ApmTrgJNj40Ov/DS7i2sfr3XMunQP4ei0HpzcRmHxxzF9owYw37NyiKuBGi+pU4P
w52VOKJy9uCTsQLAGyxkR/lcrLK/qiJfGcvRDmJ6QO5+9J9bhhiWACLkeRHc/pPi
edmz5vd3K9ksODtqhFVlQGuiX5r3n7MazJcHqSF6j3IPCLEyySICdUCncioacEd5
iP5uQh1bnpWC2ah4wx9f0QW4yg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:25:09 2026 by rpki-client