Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft
File:                     0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft (raw, json)
Hash identifier:          eiYoQOBEai4NJ3S759F7y4k4X1l/CRgsYWDgESiCHxI=
Subject key identifier:   CD:A8:15:33:0C:3A:2E:DE:41:E9:AF:F4:10:13:16:3C:A7:2F:EB:88
Authority key identifier: D1:5A:5A:F9:AF:8D:99:DF:E5:E4:4D:35:EE:55:01:05:FE:D9:45:11
Certificate issuer:       /CN=A91A20A3/serialNumber=D15A5AF9AF8D99DFE5E44D35EE550105FED94511
Certificate serial:       357D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft
Manifest number:          356D
Signing time:             Tue 28 Jul 2026 15:04:21 +0000
Manifest this update:     Tue 28 Jul 2026 15:04:20 +0000
Manifest next update:     Tue 04 Aug 2026 15:04:20 +0000
Files and hashes:         1: 0Vpa-a-Nmd_l5E017lUBBf7ZRRE.crl (hash: 27vU1P38zot3uOCeyHwIPvW7R6D8RetI9evSWmW4y/w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.crl
                          rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:04:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13693 (0x357d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A20A3, serialNumber=D15A5AF9AF8D99DFE5E44D35EE550105FED94511
        Validity
            Not Before: Jul 28 15:04:20 2026 GMT
            Not After : Aug  4 15:04:20 2026 GMT
        Subject: CN=6a68c4f5-8ede
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:69:70:15:3f:76:73:cb:10:42:86:43:29:67:
                    33:bf:3f:37:92:7c:7a:2e:c1:42:12:3e:c4:3b:7f:
                    69:4a:e6:09:0e:c3:69:37:00:cf:af:34:ff:7f:76:
                    a5:db:df:44:c8:9d:a0:aa:5d:38:83:fb:c6:91:01:
                    da:d5:88:94:2a:52:b5:aa:98:11:af:73:23:06:2f:
                    99:bf:ab:4b:fe:2b:71:55:6d:e0:2d:1d:fc:d6:62:
                    22:c4:40:e3:8f:24:ae:f6:0c:9e:b2:1a:1a:ab:d6:
                    3d:cb:a4:ef:98:74:e8:2e:22:c4:cc:f1:49:f7:b5:
                    10:1e:0c:7e:79:f8:ac:c6:7a:c7:25:83:7f:4f:8f:
                    78:e4:83:2f:ef:5d:95:74:3d:c7:ca:a4:5e:f0:2c:
                    30:e6:45:f2:0f:d1:43:01:a9:f8:26:6f:c5:e6:aa:
                    89:aa:0b:c0:0e:29:9f:c2:2e:75:51:9e:5c:a0:7e:
                    e8:d4:24:e9:0d:4a:53:72:a3:3f:ba:41:d0:9c:52:
                    21:d2:c2:ee:fa:82:40:1f:27:4c:ec:2b:de:b6:57:
                    dd:8f:2e:88:7a:d0:5b:c9:3b:c0:e9:76:03:28:d0:
                    70:04:9e:5e:cd:f2:a6:ff:e9:96:72:4b:9e:55:8c:
                    7b:f5:87:e9:56:36:31:26:57:1f:40:13:5f:92:2b:
                    83:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:A8:15:33:0C:3A:2E:DE:41:E9:AF:F4:10:13:16:3C:A7:2F:EB:88
            X509v3 Authority Key Identifier:
                keyid:D1:5A:5A:F9:AF:8D:99:DF:E5:E4:4D:35:EE:55:01:05:FE:D9:45:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:b8:b9:d4:cf:eb:5a:f4:13:cb:cc:fc:99:85:38:52:dd:36:
         07:e6:04:79:2d:68:9a:6b:d6:61:8e:b5:af:52:1e:27:5d:e9:
         cf:9c:df:8f:63:e0:98:ea:54:90:84:c3:73:7f:0c:94:67:09:
         80:e5:b8:53:18:cc:6d:6a:fb:22:ce:9a:c6:fb:e7:07:8f:5c:
         57:b5:bc:31:53:50:87:33:25:2f:54:11:83:9e:3d:19:34:50:
         5b:ee:7c:20:40:df:e6:e6:2b:21:4a:f2:fe:aa:aa:7c:e1:c1:
         ba:91:70:be:68:7e:d3:d3:41:57:54:e7:ad:cd:a9:04:81:df:
         b4:89:82:b8:32:cc:74:75:d0:ae:a2:3d:38:34:84:b2:da:19:
         bc:d4:27:74:b1:67:32:e6:77:48:7b:a6:97:05:9f:3a:7e:b0:
         3f:48:29:0e:5b:5c:c1:18:3a:91:4d:ab:63:7b:97:97:35:96:
         e9:38:f4:89:3d:8f:4a:a5:1e:92:4c:65:b3:ff:f7:e2:a3:51:
         73:2d:03:c5:35:cc:96:b1:a6:82:dd:a4:c8:35:26:00:4d:3a:
         d9:69:98:f2:e5:26:c0:5f:26:73:04:68:47:f0:7c:1f:c6:98:
         2a:14:84:a4:9e:68:20:1e:ae:87:ac:6f:3c:f5:6f:1a:e1:af:
         5d:ff:4f:31
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTIwQTMxMTAvBgNVBAUTKEQxNUE1QUY5QUY4RDk5REZFNUU0NEQzNUVFNTUwMTA1
RkVEOTQ1MTEwHhcNMjYwNzI4MTUwNDIwWhcNMjYwODA0MTUwNDIwWjAYMRYwFAYD
VQQDEw02YTY4YzRmNS04ZWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5WlwFT92c8sQQoZDKWczvz83knx6LsFCEj7EO39pSuYJDsNpNwDPrzT/f3al
299EyJ2gql04g/vGkQHa1YiUKlK1qpgRr3MjBi+Zv6tL/itxVW3gLR381mIixEDj
jySu9gyeshoaq9Y9y6TvmHToLiLEzPFJ97UQHgx+efisxnrHJYN/T4945IMv712V
dD3HyqRe8Cww5kXyD9FDAan4Jm/F5qqJqgvADimfwi51UZ5coH7o1CTpDUpTcqM/
ukHQnFIh0sLu+oJAHydM7Cvetlfdjy6IetBbyTvA6XYDKNBwBJ5ezfKm/+mWckue
VYx79YfpVjYxJlcfQBNfkiuDOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM2oFTMM
Oi7eQemv9BATFjynL+uIMB8GA1UdIwQYMBaAFNFaWvmvjZnf5eRNNe5VAQX+2UUR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjBBMy9BRjRCOEE2MjFE
OUUxMUUyOEU1M0MwOEUwOEIwMkNEMi8wVnBhLWEtTm1kX2w1RTAxN2xVQkJmN1pS
UkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBWcGEtYS1ObWRfbDVFMDE3bFVCQmY3WlJSRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MjBBMy9BRjRCOEE2MjFEOUUxMUUyOEU1M0MwOEUwOEIwMkNEMi8wVnBhLWEtTm1k
X2w1RTAxN2xVQkJmN1pSUkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZbi51M/rWvQTy8z8mYU4Ut02B+YEeS1ommvWYY61r1IeJ13pz5zfj2PgmOpU
kITDc38MlGcJgOW4UxjMbWr7Is6axvvnB49cV7W8MVNQhzMlL1QRg549GTRQW+58
IEDf5uYrIUry/qqqfOHBupFwvmh+09NBV1Tnrc2pBIHftImCuDLMdHXQrqI9ODSE
stoZvNQndLFnMuZ3SHumlwWfOn6wP0gpDltcwRg6kU2rY3uXlzWW6Tj0iT2PSqUe
kkxls//34qNRcy0DxTXMlrGmgt2kyDUmAE062WmY8uUmwF8mcwRoR/B8H8aYKhSE
pJ5oIB6uh6xvPPVvGuGvXf9PMQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:42:52 2026 by rpki-client