Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1DA2/B8BA899A229411F1BD86858EAE833773/VVf9XdSgiVmupCqY3iBy7QUB204.mft
File:                     VVf9XdSgiVmupCqY3iBy7QUB204.mft (raw, json)
Hash identifier:          oLIT8gZtl4pwogs27rLevKJ4Zt+O67tPpSVywXoaq48=
Subject key identifier:   55:EA:8F:F2:25:64:2B:F6:93:4F:2A:B1:98:88:BA:3E:C8:9B:73:F6
Authority key identifier: 55:57:FD:5D:D4:A0:89:59:AE:A4:2A:98:DE:20:72:ED:05:01:DB:4E
Certificate issuer:       /CN=A91F1DA2/serialNumber=5557FD5DD4A08959AEA42A98DE2072ED0501DB4E
Certificate serial:       45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVf9XdSgiVmupCqY3iBy7QUB204.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1DA2/B8BA899A229411F1BD86858EAE833773/VVf9XdSgiVmupCqY3iBy7QUB204.mft
Manifest number:          44
Signing time:             Mon 27 Jul 2026 10:45:14 +0000
Manifest this update:     Mon 27 Jul 2026 10:45:14 +0000
Manifest next update:     Mon 03 Aug 2026 10:45:14 +0000
Files and hashes:         1: VVf9XdSgiVmupCqY3iBy7QUB204.crl (hash: inmzmw8gX922vMPTaoq7r9dWj+WlQIZDG2XnscQjXiM=)
                          2: 1CEBECEC229511F1916F29FEAE833773.roa (hash: m1cTe0sjbHKB5Ksm5p5JN7pFm5DtOLvmL4Q6d+C3sDY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1DA2/B8BA899A229411F1BD86858EAE833773/VVf9XdSgiVmupCqY3iBy7QUB204.crl
                          rsync://rpki.apnic.net/member_repository/A91F1DA2/B8BA899A229411F1BD86858EAE833773/VVf9XdSgiVmupCqY3iBy7QUB204.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVf9XdSgiVmupCqY3iBy7QUB204.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 10:45:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69 (0x45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1DA2, serialNumber=5557FD5DD4A08959AEA42A98DE2072ED0501DB4E
        Validity
            Not Before: Jul 27 10:45:14 2026 GMT
            Not After : Aug  3 10:45:14 2026 GMT
        Subject: CN=6a6736ba-8ada
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d4:31:25:e5:ce:20:ec:bd:ef:a4:18:76:ae:
                    f5:ef:af:ca:00:e6:05:ac:f0:80:39:eb:0c:24:2e:
                    b8:06:3a:a6:37:b2:90:9f:9d:ab:32:af:96:31:8b:
                    05:db:f0:ae:03:32:e9:d2:b2:02:63:2f:47:53:dc:
                    a2:f3:1d:1b:63:fc:9c:35:e5:1a:b2:29:e1:5b:44:
                    dd:b5:08:4d:33:cb:b1:ed:3c:cc:10:4c:9f:ff:3a:
                    a0:3a:ea:48:a6:36:41:99:97:b3:2a:99:93:05:4f:
                    de:8c:14:3d:4e:15:f4:bc:95:00:c7:c1:22:12:6d:
                    80:d9:32:8c:11:dc:1b:64:cd:55:52:4c:83:cd:7e:
                    fa:c2:f5:44:a8:90:cf:d2:7d:4f:33:52:eb:c7:7e:
                    4c:48:68:7b:0e:da:78:9f:68:82:07:d6:32:0b:1a:
                    85:dd:d8:86:2c:cf:d3:2f:7c:cf:d2:e1:a5:b6:fa:
                    86:b6:da:fc:38:ae:ef:19:20:95:f8:81:a1:1d:bc:
                    b5:dc:a5:21:f4:ad:aa:49:cc:17:54:34:36:f3:b0:
                    31:df:5a:bd:cb:a9:e6:09:7f:86:64:0c:dc:18:0f:
                    07:e2:37:c0:ac:4c:48:59:9e:4b:b5:28:24:7f:61:
                    b5:3c:43:be:e3:7c:6c:8d:44:3a:f9:29:eb:c0:1b:
                    d9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:EA:8F:F2:25:64:2B:F6:93:4F:2A:B1:98:88:BA:3E:C8:9B:73:F6
            X509v3 Authority Key Identifier:
                keyid:55:57:FD:5D:D4:A0:89:59:AE:A4:2A:98:DE:20:72:ED:05:01:DB:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1DA2/B8BA899A229411F1BD86858EAE833773/VVf9XdSgiVmupCqY3iBy7QUB204.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVf9XdSgiVmupCqY3iBy7QUB204.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1DA2/B8BA899A229411F1BD86858EAE833773/VVf9XdSgiVmupCqY3iBy7QUB204.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:0b:06:5a:1e:54:23:0c:74:ea:f9:20:43:97:dc:ca:7c:96:
         67:6b:1b:5d:c7:35:89:77:8a:65:fc:74:37:ba:44:9e:3c:e9:
         85:25:4c:77:04:13:de:7b:b7:ce:74:8b:9d:c1:8d:37:31:31:
         16:0b:67:f7:ab:98:b1:48:70:3f:5d:99:db:6d:aa:c3:fb:df:
         41:cc:75:d2:53:b1:f1:57:1f:14:37:12:23:43:bc:3e:58:12:
         fd:cf:9b:91:0f:2c:97:ca:55:1b:54:e5:0b:c3:ce:8c:ac:0a:
         84:0d:22:0d:9f:87:33:80:7a:73:a1:01:9e:f5:18:ce:bb:c5:
         e6:80:92:d1:13:76:5b:c6:1c:cb:00:e0:82:7c:12:8f:c1:5d:
         a7:eb:aa:c5:7e:0a:ef:00:3b:6f:93:5b:0b:b2:f9:77:76:d1:
         10:c4:0a:41:df:b8:53:57:f0:5e:01:9c:39:33:cd:18:5f:3d:
         45:47:9b:e5:ca:c0:b4:ca:96:83:b7:16:93:d8:7c:a7:a9:40:
         b8:00:64:2e:f6:44:1c:2f:8b:c4:42:c1:b9:10:8c:71:da:97:
         0b:dd:62:fe:3e:a4:9d:da:79:aa:25:aa:ed:17:b9:3f:34:f8:
         05:fc:46:9c:e0:c5:f6:20:31:d0:76:62:0b:e0:6d:dc:12:af:
         24:10:66:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:14:31 2026 by rpki-client