Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.mft
File:                     vTfx1AdHvmxfXGujMH32Vgq2gaM.mft (raw, json)
Hash identifier:          UuA+4BHgyWvffHtbiRvSv9+QOjdqBxFHKbFwc7RabcE=
Subject key identifier:   55:6F:58:2F:32:FA:57:90:72:03:17:BC:75:B9:ED:41:DF:42:3A:86
Authority key identifier: BD:37:F1:D4:07:47:BE:6C:5F:5C:6B:A3:30:7D:F6:56:0A:B6:81:A3
Certificate issuer:       /CN=A91817E6/serialNumber=BD37F1D40747BE6C5F5C6BA3307DF6560AB681A3
Certificate serial:       013E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vTfx1AdHvmxfXGujMH32Vgq2gaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.mft
Manifest number:          0CD4
Signing time:             Sun 26 Jul 2026 20:30:58 +0000
Manifest this update:     Sun 26 Jul 2026 20:30:57 +0000
Manifest next update:     Sun 02 Aug 2026 20:30:57 +0000
Files and hashes:         1: vTfx1AdHvmxfXGujMH32Vgq2gaM.crl (hash: ppvVB13URIm7xc4dCkiuriILJZdAs0wXyAwiIay1S1A=)
                          2: 28C454FCB41211EF8D2EC946C4F9AE02.roa (hash: OVcfnxD6CMvVurhACrOK00amhdxUOIGPBugGO8sY/mg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.crl
                          rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vTfx1AdHvmxfXGujMH32Vgq2gaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 20:30:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 318 (0x13e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91817E6, serialNumber=BD37F1D40747BE6C5F5C6BA3307DF6560AB681A3
        Validity
            Not Before: Jul 26 20:30:57 2026 GMT
            Not After : Aug  2 20:30:57 2026 GMT
        Subject: CN=6a666e82-5320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:28:2c:e4:86:92:b0:fa:12:5c:e6:a8:bb:a3:
                    98:3f:99:83:87:1b:fe:36:ae:3f:3e:64:8f:df:43:
                    af:5f:c9:e0:97:c6:62:48:ba:e7:df:d6:5b:91:d2:
                    78:dd:3d:dc:62:5d:bd:43:86:16:e9:3a:9f:2e:f9:
                    ad:74:6b:69:21:79:cf:c8:4f:78:c1:fc:a3:02:d0:
                    4a:c1:ca:be:85:fc:fe:f2:eb:7a:26:29:95:bb:62:
                    54:79:6d:be:2d:48:9f:ed:9a:4f:78:23:c8:d3:91:
                    e3:d3:76:08:ee:24:a3:41:54:58:55:9e:b4:1b:cd:
                    f7:e0:7b:f8:76:c8:af:fc:9a:f3:5a:71:38:cb:a3:
                    71:95:a2:9c:6d:47:23:19:63:f6:9b:59:c3:c3:1a:
                    17:47:0f:e5:fd:ba:d5:e2:67:6f:c8:6b:1b:62:4b:
                    21:ea:7c:91:37:d8:0b:88:dc:0d:56:39:ae:12:91:
                    9d:5f:aa:e0:67:bc:ce:9b:f8:23:56:f2:d8:61:15:
                    b1:11:3c:db:1c:8f:d9:15:bb:5a:9c:dd:5d:df:e1:
                    88:d1:4f:16:57:ba:51:ab:cc:44:42:a9:c1:3b:ab:
                    90:5a:13:3d:9a:9b:f2:50:6e:9a:b6:2c:84:a9:6e:
                    d7:b4:63:ca:cc:e1:47:c6:1a:f0:54:76:b5:17:4d:
                    5a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:6F:58:2F:32:FA:57:90:72:03:17:BC:75:B9:ED:41:DF:42:3A:86
            X509v3 Authority Key Identifier:
                keyid:BD:37:F1:D4:07:47:BE:6C:5F:5C:6B:A3:30:7D:F6:56:0A:B6:81:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vTfx1AdHvmxfXGujMH32Vgq2gaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:62:b5:bd:ad:a4:8d:9d:75:28:0b:67:93:80:3a:de:bc:35:
         bf:7e:d0:4f:f5:8a:e6:69:89:b1:9f:ed:7e:fe:63:51:1f:1c:
         37:4b:38:b8:af:cf:5a:c0:9e:09:71:f7:74:4a:a5:0d:e1:2d:
         23:8c:df:bf:20:d2:e2:47:29:d8:ee:3d:f1:f5:53:46:e6:be:
         9f:88:58:48:b4:d7:ae:db:e0:80:c5:ff:f5:b9:53:ce:24:85:
         56:9b:cf:91:14:03:19:93:fa:29:59:90:77:74:ee:20:09:96:
         bc:fb:21:e3:44:e8:e7:db:10:36:c6:97:9d:33:5f:8a:dc:da:
         69:ca:1c:43:d4:53:0d:8b:7b:8a:47:cb:84:9c:62:45:da:8b:
         92:a2:61:5d:59:62:8c:13:62:be:33:f0:c3:7b:5c:da:76:4e:
         23:08:df:27:9a:1d:88:f8:d1:b2:00:b6:3d:a3:9b:c1:70:65:
         b0:4e:cd:a0:cf:e8:83:cc:11:f4:8f:34:c3:9c:71:f7:e2:a7:
         41:36:9b:aa:32:4e:7e:f4:0f:81:c4:46:ea:92:64:b4:85:52:
         1a:7c:af:27:f8:3e:62:2a:6f:d4:97:7a:70:27:08:ac:7f:c0:
         f2:53:81:bb:2d:8c:d6:69:71:7e:7b:15:04:2b:cd:74:45:f4:
         11:20:be:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:11:37 2026 by rpki-client