Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft
File:                     vkY_wZGbQUKyOCgTgn-3FtbukoM.mft (raw, json)
Hash identifier:          /2F5BVdb/E/ka/5qT6InpYJgb/RIOdwa7VVn30ZDTJ8=
Subject key identifier:   64:C4:90:E7:FA:E1:7B:FB:27:EE:B2:D4:5D:BA:FD:55:E8:C1:72:0E
Authority key identifier: BE:46:3F:C1:91:9B:41:42:B2:38:28:13:82:7F:B7:16:D6:EE:92:83
Certificate issuer:       /CN=A91D40BF/serialNumber=BE463FC1919B4142B2382813827FB716D6EE9283
Certificate serial:       0845
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkY_wZGbQUKyOCgTgn-3FtbukoM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft
Manifest number:          082D
Signing time:             Tue 28 Jul 2026 21:30:58 +0000
Manifest this update:     Tue 28 Jul 2026 21:30:57 +0000
Manifest next update:     Tue 04 Aug 2026 21:30:57 +0000
Files and hashes:         1: vkY_wZGbQUKyOCgTgn-3FtbukoM.crl (hash: U/ecD6kV7ibz4wRAYQez4LFJQ6mM7h0aeiYu4MD2XEo=)
                          2: 28543AA0BABA11EB8A51C234C4F9AE02.roa (hash: MXT5jcze9muAxIxhhOptgI/97lbgIlxVB1859ZI8SAI=)
                          3: 58E4A6E8B60811F0AF40B71EC4F9AE02.roa (hash: NWtw2IjiZwHzr7Ei9IeYyzwE1/5bXF8AdCPLNALzVv4=)
                          4: ACEBC29CC5B911EBB41FAF2DC4F9AE02.roa (hash: hEvbM2TDCEqoCuZAHKQXjeGPqQdN31EzYyfXKDjCAtg=)
                          5: 2798B9A6BABA11EB8A51C234C4F9AE02.roa (hash: na85BHLSVJrfFZCA8hXSu9PL6apmvY8kB85ybE30XtQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.crl
                          rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkY_wZGbQUKyOCgTgn-3FtbukoM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 21:30:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2117 (0x845)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D40BF, serialNumber=BE463FC1919B4142B2382813827FB716D6EE9283
        Validity
            Not Before: Jul 28 21:30:57 2026 GMT
            Not After : Aug  4 21:30:57 2026 GMT
        Subject: CN=6a691f92-4fea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f1:5f:52:ed:9e:6f:a6:82:fd:8d:f7:e4:57:
                    1c:d3:64:19:5e:f2:ec:9b:71:42:9a:0e:cb:b3:75:
                    5c:fa:f3:92:ee:e4:58:1a:d5:83:0a:18:01:70:8a:
                    fa:18:5a:88:ea:24:ad:9f:96:fc:64:db:6b:f2:1a:
                    82:ef:1a:f9:22:54:55:be:14:84:e6:3c:ab:1b:d8:
                    54:14:b2:b6:7c:ee:7b:4e:44:eb:50:af:53:b5:e3:
                    d3:dd:f9:63:df:6b:50:3e:73:bd:b7:9d:6e:a6:07:
                    9c:e8:f2:32:c2:d0:96:af:82:6f:1c:d7:21:4b:f7:
                    07:df:d1:c3:39:82:30:a2:d4:96:5b:ff:02:8d:a3:
                    49:a6:db:62:d1:6c:bd:2a:c4:9b:f3:30:f5:e5:f0:
                    c9:8f:56:3e:fb:a9:9b:04:2e:42:9e:92:9e:11:3e:
                    cd:92:7f:25:02:55:9b:bf:f3:30:8f:0a:13:a5:24:
                    53:10:6e:96:27:fe:da:7d:37:92:ec:a0:2f:f1:d5:
                    12:78:84:d4:a4:29:55:92:4d:74:9d:06:ff:3d:ed:
                    10:51:b2:d7:c4:e0:2a:27:7d:37:3f:cd:46:a1:64:
                    ea:a5:d3:3f:54:c6:11:69:59:fd:3b:d0:9b:04:f5:
                    3b:9b:84:74:57:17:46:ee:24:58:9f:cf:b9:34:de:
                    ed:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:C4:90:E7:FA:E1:7B:FB:27:EE:B2:D4:5D:BA:FD:55:E8:C1:72:0E
            X509v3 Authority Key Identifier:
                keyid:BE:46:3F:C1:91:9B:41:42:B2:38:28:13:82:7F:B7:16:D6:EE:92:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkY_wZGbQUKyOCgTgn-3FtbukoM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:5c:9f:99:87:8f:42:2b:7f:30:16:72:8e:60:de:61:cf:0c:
         cc:57:fa:de:67:7c:14:52:91:57:b4:2c:59:62:54:4e:16:4c:
         93:8f:32:fe:2b:66:44:71:d1:e6:4b:25:34:ac:0b:b0:5c:ad:
         9e:da:91:03:19:a4:06:de:e5:d5:11:2a:84:78:00:16:85:e3:
         d6:b3:7f:02:5d:78:20:ae:8c:ad:72:d9:38:53:9f:43:e7:33:
         d6:51:bb:af:70:f4:3b:2d:88:a0:94:de:60:57:35:86:87:50:
         ef:4e:51:e3:3e:ff:fe:33:db:d5:ef:fb:6a:80:85:f1:a1:6c:
         ef:ea:a6:ec:13:a3:f2:34:77:5f:09:fa:0f:35:18:05:1c:91:
         b6:c9:27:ba:46:8a:c8:ab:14:18:91:2b:4c:42:94:3f:f7:87:
         1e:3e:95:35:53:0f:11:37:00:90:ca:67:e0:8d:c0:9a:c4:7f:
         df:13:d5:a6:fc:35:1d:6c:2b:95:4e:e7:28:f8:00:2b:0e:99:
         a1:bc:34:77:b3:37:7d:37:4a:dd:2d:d3:28:cb:f4:9a:c3:2d:
         20:ca:93:25:38:28:53:ee:00:0c:68:f3:6b:d5:5d:15:15:da:
         20:d1:e6:1e:c2:0e:5b:ec:d1:8b:53:b3:ff:32:e3:98:10:28:
         eb:11:75:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:42:00 2026 by rpki-client