Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft
File:                     VNOpVcw0GoQYFajN6hkK6lEC384.mft (raw, json)
Hash identifier:          ZNwinpn9wUhoXB96Bd2jwM1nPVZ0kt6FeGaToSmeLls=
Subject key identifier:   2F:E4:CA:FE:75:1D:25:0A:48:7B:BD:48:86:C3:01:7D:EC:6A:71:09
Authority key identifier: 54:D3:A9:55:CC:34:1A:84:18:15:A8:CD:EA:19:0A:EA:51:02:DF:CE
Certificate issuer:       /CN=A91C1FAC/serialNumber=54D3A955CC341A841815A8CDEA190AEA5102DFCE
Certificate serial:       0D23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft
Manifest number:          0D1A
Signing time:             Tue 28 Jul 2026 18:21:55 +0000
Manifest this update:     Tue 28 Jul 2026 18:21:54 +0000
Manifest next update:     Tue 04 Aug 2026 18:21:54 +0000
Files and hashes:         1: VNOpVcw0GoQYFajN6hkK6lEC384.crl (hash: ZgQYuq8Qnoz3UWO/1KyHEV5L1EImiTU1aQnPle6DN/I=)
                          2: 86B7FE9005FF11EAB499A845C4F9AE02.roa (hash: CimA7kcPi/5547nh1YW65CDbGdKlvu8eSXBt/kVLyoc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.crl
                          rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 18:21:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3363 (0xd23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1FAC, serialNumber=54D3A955CC341A841815A8CDEA190AEA5102DFCE
        Validity
            Not Before: Jul 28 18:21:54 2026 GMT
            Not After : Aug  4 18:21:54 2026 GMT
        Subject: CN=6a68f343-6759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d7:9e:0b:f3:be:d1:30:b1:e9:35:8f:ed:61:
                    cb:24:dc:f6:97:99:d8:22:bf:cd:57:96:30:76:b7:
                    25:a1:83:2e:ae:1b:f3:db:05:11:4b:88:d0:b8:87:
                    84:cc:46:22:21:11:45:b5:4b:95:8a:85:3f:5a:6d:
                    ca:4c:06:f2:98:ce:04:d0:b6:c6:07:c1:69:09:a3:
                    d3:75:42:97:60:89:17:cd:2b:15:d5:90:3f:bd:51:
                    28:1e:14:e9:c2:fe:92:ec:5a:f5:f9:52:07:d7:0d:
                    24:42:7a:fa:e1:f0:26:97:b0:2b:44:4c:5a:88:eb:
                    51:89:c0:cb:d8:b5:ff:dc:ef:20:37:b8:3e:21:12:
                    8e:ff:51:69:84:7b:9b:c8:9d:b2:04:b5:44:9d:61:
                    f4:b9:0b:17:a0:70:64:ba:9b:4a:8f:b4:98:23:3e:
                    18:d6:1d:d8:7d:17:71:e9:a2:a9:a7:e6:96:0d:3c:
                    a0:33:62:aa:d3:6e:74:f7:4d:29:79:14:58:7e:3d:
                    bf:32:63:c2:99:67:6f:cd:54:1e:50:f3:cc:e8:81:
                    f1:14:3e:df:ca:38:3e:88:9d:90:04:46:26:87:21:
                    6a:5b:16:d5:88:7c:f8:9a:b6:ba:6f:b5:73:95:de:
                    b6:0e:f5:1f:86:5a:01:f9:b3:5a:e3:bc:a9:38:20:
                    f0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:E4:CA:FE:75:1D:25:0A:48:7B:BD:48:86:C3:01:7D:EC:6A:71:09
            X509v3 Authority Key Identifier:
                keyid:54:D3:A9:55:CC:34:1A:84:18:15:A8:CD:EA:19:0A:EA:51:02:DF:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:fc:a4:e9:2f:9a:70:53:d6:b7:8f:b4:0b:c6:e3:97:23:64:
         f3:d4:6b:c7:21:f6:03:67:eb:0a:79:4b:76:08:98:23:8c:a4:
         f5:12:d1:2c:ba:51:69:19:7f:6a:17:63:d3:a6:e5:28:02:71:
         e9:80:32:42:7c:de:82:90:8c:aa:0f:a8:c7:49:1d:94:f8:9f:
         c2:0b:63:ce:ac:c7:c5:41:5b:4e:03:d8:56:77:a8:3e:a1:c3:
         48:25:d3:ab:9d:f3:9a:ab:96:c0:cc:2f:28:c5:b5:35:27:8f:
         a3:8b:98:f5:54:1d:65:16:72:45:0f:d2:19:1a:af:a3:e9:24:
         7d:3e:ac:b4:9f:4f:c0:f6:75:61:b7:b3:05:d3:35:66:8c:07:
         91:d3:30:9e:f6:d8:57:1e:79:71:b3:c8:47:96:03:3c:08:80:
         aa:c8:ac:dc:e4:ed:77:91:08:1d:a7:85:68:dd:9b:61:3d:4c:
         93:2f:99:ce:d8:16:03:64:45:e4:bd:7d:bd:03:8a:91:6b:8a:
         3d:ed:34:e4:71:c3:56:3c:88:a5:44:02:df:68:4e:e2:e8:74:
         7c:fe:b4:c7:75:04:2a:a0:2a:e2:3b:0f:d3:73:30:7a:b9:98:
         5d:89:c3:81:ec:e8:23:00:d6:59:28:d6:26:e4:04:3a:da:17:
         31:86:43:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:21:33 2026 by rpki-client