Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft
File:                     VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft (raw, json)
Hash identifier:          izou/FR5s2+Cy3TuBBi1YSf2wjGjuwAd25A7KcQW82A=
Subject key identifier:   04:72:04:BD:2E:FF:DA:2B:87:C7:0F:87:C2:65:AA:BD:8F:F1:80:28
Authority key identifier: 54:58:3C:29:BB:FB:50:09:DB:9C:C0:56:14:F6:3D:62:BC:B7:7C:39
Certificate issuer:       /CN=A9195AA2/serialNumber=54583C29BBFB5009DB9CC05614F63D62BCB77C39
Certificate serial:       0D15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft
Manifest number:          15C7
Signing time:             Tue 28 Jul 2026 18:23:03 +0000
Manifest this update:     Tue 28 Jul 2026 18:23:03 +0000
Manifest next update:     Tue 04 Aug 2026 18:23:03 +0000
Files and hashes:         1: VFg8Kbv7UAnbnMBWFPY9Yry3fDk.crl (hash: eo4X+ZzJJ6YwDNUtRl9+pCuPj1F+SmMXAP0pyp0Aexw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.crl
                          rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 18:23:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3349 (0xd15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9195AA2, serialNumber=54583C29BBFB5009DB9CC05614F63D62BCB77C39
        Validity
            Not Before: Jul 28 18:23:03 2026 GMT
            Not After : Aug  4 18:23:03 2026 GMT
        Subject: CN=6a68f387-9e00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:15:31:b0:94:b7:69:ff:c6:16:67:12:29:b5:
                    0b:1a:3a:5d:1d:29:15:7d:bd:83:fd:e5:2f:6e:c1:
                    11:7b:85:54:30:4d:9a:a0:66:57:c7:c1:fe:25:72:
                    02:f4:ca:bf:b0:54:c3:f0:b8:01:1e:1d:a2:81:9d:
                    ee:5d:15:46:22:6f:9f:4a:39:30:21:a8:a2:44:c5:
                    e0:c5:e8:68:6a:dd:4b:a3:57:dd:c3:7d:04:77:39:
                    84:bf:ce:13:8d:4d:04:66:fc:05:a5:c6:29:a1:a2:
                    6e:18:05:4f:84:71:ac:14:54:de:24:34:58:7f:94:
                    29:3a:27:9e:85:0d:15:89:0b:a7:6d:73:0f:72:77:
                    72:5c:d8:10:55:33:00:aa:a2:c6:77:2a:5a:10:8e:
                    fd:55:b7:22:3f:16:3d:3e:63:3b:43:93:d0:44:30:
                    c4:5a:ff:a8:90:4b:78:9b:f6:30:14:a7:36:37:b4:
                    fe:56:2a:5d:3a:75:ac:f5:78:69:2c:3b:39:98:a4:
                    ba:ed:99:f9:36:93:25:e2:6b:73:f8:66:5a:3d:72:
                    99:ec:42:28:23:a2:1c:49:8d:1d:8c:f0:7d:fb:ef:
                    72:59:ed:4f:5b:f3:a1:ed:45:e3:9c:05:8f:dc:e3:
                    c2:a0:6f:46:81:43:f3:5c:21:b0:51:0d:e3:ab:14:
                    1c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:72:04:BD:2E:FF:DA:2B:87:C7:0F:87:C2:65:AA:BD:8F:F1:80:28
            X509v3 Authority Key Identifier:
                keyid:54:58:3C:29:BB:FB:50:09:DB:9C:C0:56:14:F6:3D:62:BC:B7:7C:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:ad:82:1c:c8:cd:47:ad:6e:c1:db:24:b6:b9:ed:fb:29:50:
         76:33:0f:38:1c:0e:1d:32:97:1e:83:4c:04:5f:2b:19:e6:fb:
         4b:06:e4:f2:09:e8:16:fa:7a:eb:18:c5:45:99:15:f4:22:3c:
         32:17:d5:53:96:2f:a5:07:1d:4d:5d:3f:b8:d8:a5:8e:05:77:
         8d:66:ea:d4:ce:cb:3b:d1:9a:36:3e:5c:8b:b2:83:12:ff:5b:
         8f:07:88:c4:83:6a:ca:48:cb:4d:80:15:e3:08:4b:f0:31:d3:
         b1:d9:7b:29:7a:ac:f0:ee:53:6e:65:4a:cc:02:cd:44:18:be:
         5b:fb:0f:69:cc:5d:93:e9:0a:26:31:aa:5a:1f:69:8f:9f:87:
         e5:b1:c4:27:4c:0f:a8:3d:70:01:cc:7f:e9:b2:b9:61:63:3b:
         89:67:d2:94:62:b1:a0:52:56:30:be:cc:da:f4:14:be:28:a9:
         a0:7b:9b:67:51:b5:d0:f8:50:fd:a3:03:4f:3f:2e:8c:cb:62:
         da:cc:33:0e:af:26:98:d1:17:34:42:87:a8:79:80:0d:25:69:
         9c:d9:07:1e:09:e2:a0:ce:75:24:5a:72:19:34:b8:4f:05:a2:
         3e:03:60:3e:69:a2:46:36:11:b1:64:24:26:55:92:54:fd:34:
         b4:bb:ec:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:53:16 2026 by rpki-client