Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft
File:                     VELdytiYUdlLqsCrc5LOQZohisw.mft (raw, json)
Hash identifier:          +F85mROqCkVOA0idh4FyLizi1zJ4KwDAq5Hm/s4EwYI=
Subject key identifier:   2F:DB:69:B3:F3:49:E0:6C:D8:E3:D5:52:3A:D0:4D:9D:99:E5:12:F4
Authority key identifier: 54:42:DD:CA:D8:98:51:D9:4B:AA:C0:AB:73:92:CE:41:9A:21:8A:CC
Certificate issuer:       /CN=A91BA0F9/serialNumber=5442DDCAD89851D94BAAC0AB7392CE419A218ACC
Certificate serial:       1D54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VELdytiYUdlLqsCrc5LOQZohisw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft
Manifest number:          52CC
Signing time:             Tue 22 Sep 2026 15:11:51 +0000
Manifest this update:     Tue 22 Sep 2026 15:11:51 +0000
Manifest next update:     Tue 29 Sep 2026 15:11:51 +0000
Files and hashes:         1: VELdytiYUdlLqsCrc5LOQZohisw.crl (hash: yq0Wj/xDsSsbYb32NCV50RXrTGM3j9c1bXKjBnvw+1E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.crl
                          rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VELdytiYUdlLqsCrc5LOQZohisw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 15:11:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7508 (0x1d54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA0F9, serialNumber=5442DDCAD89851D94BAAC0AB7392CE419A218ACC
        Validity
            Not Before: Sep 22 15:11:51 2026 GMT
            Not After : Sep 29 15:11:51 2026 GMT
        Subject: CN=6ab29ab7-7f4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1f:c0:63:1e:cb:4b:69:d6:ae:e4:7e:21:12:
                    80:aa:6d:ac:b5:7b:12:af:da:a9:be:7f:b4:aa:28:
                    2e:88:f5:8a:53:18:73:15:5f:17:55:fb:17:92:3d:
                    0e:57:21:5e:f6:88:a8:61:ef:79:d2:09:bf:da:f6:
                    19:a2:e7:de:08:b6:53:11:7b:b1:e5:24:cb:a0:f2:
                    31:7b:c8:3c:76:19:1f:96:5c:7d:0b:cf:40:b9:9b:
                    6d:69:c5:a3:4c:02:52:22:40:5a:39:df:7a:62:d8:
                    c5:66:85:8a:c9:3a:1f:2c:c5:1d:2b:6c:95:88:43:
                    45:8d:f7:b9:67:48:b2:89:ca:77:dc:db:90:73:0c:
                    02:e8:bf:51:e9:2f:98:ff:93:1d:a8:a4:9a:9d:2f:
                    f6:af:43:13:88:7b:c4:0b:f1:e6:d7:a9:89:f4:8d:
                    46:82:8b:1f:7e:2c:e8:62:7a:26:e8:93:77:7a:65:
                    a0:3c:b4:5f:4c:f2:d6:d6:b5:88:bf:90:e3:32:4b:
                    15:ff:57:6b:f3:49:bd:d7:5c:d5:af:ff:f3:7b:15:
                    b8:8a:08:2d:19:99:c7:07:23:71:f2:8f:bb:58:06:
                    7c:f4:36:48:17:ad:2c:f7:c2:30:10:08:8d:13:0e:
                    e9:02:c6:4f:7e:58:59:62:1e:62:cb:19:d4:2e:1e:
                    8e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:DB:69:B3:F3:49:E0:6C:D8:E3:D5:52:3A:D0:4D:9D:99:E5:12:F4
            X509v3 Authority Key Identifier:
                keyid:54:42:DD:CA:D8:98:51:D9:4B:AA:C0:AB:73:92:CE:41:9A:21:8A:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VELdytiYUdlLqsCrc5LOQZohisw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:a6:71:a5:5f:1d:94:ed:6e:91:d5:93:9c:82:14:ab:99:31:
         3c:11:b5:eb:35:ad:b5:90:de:37:75:8b:0c:b5:36:97:57:90:
         91:c9:c0:bf:11:4c:0c:01:56:f3:74:46:e3:04:cd:41:0a:1e:
         df:21:5c:d9:00:6c:27:ba:24:a8:1b:44:36:91:10:14:7b:66:
         0a:50:c4:39:77:15:3e:da:d4:27:55:29:ac:71:83:e0:30:99:
         ec:63:32:06:bf:29:fa:84:25:8d:6a:be:bb:a5:65:d8:36:e6:
         dd:be:77:41:87:85:3b:23:20:37:48:9a:d2:48:1f:f7:d4:22:
         0d:20:a5:8f:19:1d:10:d2:a2:c3:58:d7:07:f1:97:e1:a0:e9:
         b1:24:7f:b7:33:a3:5d:09:7e:f5:9a:04:a4:a6:6c:0c:58:43:
         ad:4a:34:bd:c6:aa:5b:db:68:f9:05:41:65:50:65:b3:df:08:
         4e:df:c3:0b:20:cc:9d:ee:d2:30:99:55:3a:0d:2b:ea:08:99:
         5c:85:d9:46:e7:69:9c:d1:e5:5d:f2:a2:2e:1e:59:e9:ea:71:
         37:a4:51:bb:58:47:92:67:e5:3e:24:2d:ab:d7:c3:23:64:e2:
         a6:f2:ac:6e:ae:04:a1:63:40:b9:aa:6b:a7:df:3a:65:d6:23:
         41:62:56:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:09:10 2026 by rpki-client