Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft
File:                     vK5XMu8hlzK0msgoTbGBTpLIaxE.mft (raw, json)
Hash identifier:          sPSVGA53GaujSECmWTFegL3R6WjFbTtgIk41kSi1YQ8=
Subject key identifier:   99:EA:F9:4F:4D:F3:1B:65:A4:0A:7D:A1:A0:A4:97:77:56:25:DE:0B
Authority key identifier: BC:AE:57:32:EF:21:97:32:B4:9A:C8:28:4D:B1:81:4E:92:C8:6B:11
Certificate issuer:       /CN=A91B653B/serialNumber=BCAE5732EF219732B49AC8284DB1814E92C86B11
Certificate serial:       096E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft
Manifest number:          095A
Signing time:             Tue 28 Jul 2026 20:30:14 +0000
Manifest this update:     Tue 28 Jul 2026 20:30:14 +0000
Manifest next update:     Tue 04 Aug 2026 20:30:14 +0000
Files and hashes:         1: vK5XMu8hlzK0msgoTbGBTpLIaxE.crl (hash: gwYDZ2yLpsCQbI58moktURTJS8sWEDmVW7N/iiFNJbc=)
                          2: 2015E6B2C66F11EAA0B1B019C4F9AE02.roa (hash: 00gQhpdm0DGJO/AQ/2cxeV1F7zOqgqX/nHAnGUfY5fk=)
                          3: 1F99EBD4C66F11EAA0B1B019C4F9AE02.roa (hash: OerNxvvq3phHMkXzM6uc+sc+f5PWAHWyBJri0cIQ79g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.crl
                          rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 20:30:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2414 (0x96e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B653B, serialNumber=BCAE5732EF219732B49AC8284DB1814E92C86B11
        Validity
            Not Before: Jul 28 20:30:14 2026 GMT
            Not After : Aug  4 20:30:14 2026 GMT
        Subject: CN=6a691156-040d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:94:3d:9e:10:d6:3b:e2:f9:2d:c1:c3:24:58:
                    81:ab:11:62:d1:8f:31:c5:3f:5d:15:9a:46:a6:93:
                    15:5e:04:f6:2e:e4:c5:32:9a:8f:e5:7f:8d:70:31:
                    80:35:ec:8b:ff:75:f9:74:3e:98:d1:9b:38:c2:87:
                    4f:31:97:8b:8d:ad:f4:73:67:a7:97:86:92:e7:a0:
                    6d:7d:39:e6:c3:97:e0:f2:8f:33:09:a6:69:32:f1:
                    87:12:9d:4c:aa:f1:22:d3:25:2d:f5:83:87:47:3f:
                    b2:a3:27:5a:47:e7:52:b9:39:10:80:82:83:28:b8:
                    55:72:32:35:43:46:5c:82:ab:32:ce:4d:83:03:a9:
                    70:f3:7b:65:b3:83:c8:82:c1:3a:c8:9e:e9:d1:be:
                    46:8f:04:6f:09:6b:f4:48:29:9c:72:9e:70:0c:8b:
                    8d:a2:8b:0d:31:29:8d:26:18:6e:fc:79:41:43:ef:
                    ea:35:6e:3f:7b:d6:57:20:c6:9f:2b:3e:24:82:bb:
                    6d:cb:7f:21:65:73:af:72:85:19:82:4b:dc:b5:40:
                    1f:bd:a8:b9:c0:3b:43:6a:38:0f:3a:5e:dd:b4:2a:
                    91:e1:4e:f8:87:cb:3d:41:d6:de:0d:30:1c:8c:b1:
                    2a:e3:e2:79:2c:74:da:c7:6d:22:4c:61:09:c5:12:
                    f0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:EA:F9:4F:4D:F3:1B:65:A4:0A:7D:A1:A0:A4:97:77:56:25:DE:0B
            X509v3 Authority Key Identifier:
                keyid:BC:AE:57:32:EF:21:97:32:B4:9A:C8:28:4D:B1:81:4E:92:C8:6B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:57:76:a4:1b:62:03:e5:19:8a:4d:aa:69:d7:df:99:0d:88:
         65:b5:6c:17:8c:f5:9a:a3:27:6a:9c:50:b3:65:f5:42:33:53:
         55:63:10:4d:dd:83:94:67:16:27:17:bf:2f:7e:b7:ee:e0:d2:
         77:60:28:2b:46:46:f5:b7:d8:1f:a1:76:b5:69:41:79:ec:37:
         45:ce:c8:51:01:73:be:25:98:60:1f:22:fb:47:3f:cb:45:ce:
         00:c0:c8:54:65:44:73:95:61:1a:de:3e:e4:4b:2a:2a:4e:83:
         90:91:de:e2:83:93:20:05:92:69:5e:83:d7:9b:f1:87:5e:8f:
         45:08:2c:36:ea:20:2b:4e:b4:b6:0b:56:49:0f:69:52:ee:62:
         88:93:b7:57:4b:e7:d7:28:f0:90:b9:90:74:73:f3:b9:a0:0b:
         cd:2c:cc:6f:ce:9e:b3:69:f1:cb:91:4f:a9:60:c5:86:3a:e8:
         1f:38:ad:bf:7e:cd:be:40:47:c4:48:b2:a0:76:f5:03:9d:8d:
         e6:7f:e0:9a:bd:f1:ee:c4:02:54:d3:df:31:94:1b:7c:2e:72:
         6a:75:ae:54:d9:47:d6:25:32:16:47:1a:f3:da:03:89:a2:68:
         b9:65:8a:d5:29:02:b7:1b:51:a0:8c:c8:b6:75:69:59:ed:36:
         d4:54:18:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:46:39 2026 by rpki-client