Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft
File:                     Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft (raw, json)
Hash identifier:          veDkIo7Tdbgx/4QlBsq8sMvdDVwIFNyj9jJVE2FJjpY=
Subject key identifier:   02:38:13:D7:B0:C9:F7:E0:DF:E1:78:35:9C:88:8C:5C:B1:F5:1B:DB
Authority key identifier: 55:FB:7B:CC:A7:40:28:5F:C8:1A:A3:60:F0:2C:E3:2F:95:81:6D:B6
Certificate issuer:       /CN=A91127C1/serialNumber=55FB7BCCA740285FC81AA360F02CE32F95816DB6
Certificate serial:       029A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vft7zKdAKF_IGqNg8CzjL5WBbbY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft
Manifest number:          0294
Signing time:             Tue 12 May 2026 19:40:23 +0000
Manifest this update:     Tue 12 May 2026 19:40:23 +0000
Manifest next update:     Tue 19 May 2026 19:40:23 +0000
Files and hashes:         1: Vft7zKdAKF_IGqNg8CzjL5WBbbY.crl (hash: wvSYMalRLVZjL1JKSh1fU5Tb7Hh90wIlq816cxaFZpI=)
                          2: 8ED301D0782011F0BDB6E683C4F9AE02.roa (hash: WdYTpOxwaQ+j+4KBzA/L+jmy1fW724k61VLOBUYqe/g=)
                          3: 96C1C6A0782111F0A5880F87C4F9AE02.roa (hash: or57mv8ZhngJVzct5ohW9eT9dxQJSb4OczHWwGVKrtg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.crl
                          rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vft7zKdAKF_IGqNg8CzjL5WBbbY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:40:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 666 (0x29a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91127C1, serialNumber=55FB7BCCA740285FC81AA360F02CE32F95816DB6
        Validity
            Not Before: May 12 19:40:23 2026 GMT
            Not After : May 19 19:40:23 2026 GMT
        Subject: CN=6a038227-454d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f5:0b:b7:a9:4d:3c:79:27:76:29:41:47:8f:
                    a7:c4:c6:0e:b8:a3:72:c7:26:5a:8f:a0:b4:8a:6b:
                    d5:06:7a:35:50:8d:c8:ba:5d:20:87:44:32:92:d7:
                    c9:30:61:8b:84:a4:6e:dc:72:34:65:35:d8:d1:31:
                    0c:12:bb:9b:42:1e:c3:d1:01:03:40:03:4a:d2:25:
                    2a:9c:9b:93:29:de:59:c7:32:c9:ec:8d:08:72:22:
                    48:23:a0:01:1d:4b:8c:56:b5:80:8b:85:01:96:c5:
                    f0:46:a2:e5:90:88:9b:2e:95:7c:a7:70:d3:02:6c:
                    4e:d6:14:c1:80:c5:d6:c3:48:b4:98:48:90:98:37:
                    e9:4f:7c:a9:cb:0d:b9:22:1f:51:60:ce:c2:aa:61:
                    d2:a9:2d:48:a6:51:10:bd:eb:86:90:1e:22:fe:5e:
                    df:21:2f:f4:73:1f:58:07:c6:ae:77:39:21:4f:0e:
                    35:d9:53:29:d1:ac:ec:8e:35:10:71:a3:32:d5:91:
                    c2:45:be:16:ba:81:59:9b:32:a4:5c:86:c0:bc:b5:
                    8a:07:cc:1c:6b:89:e6:8f:fe:7d:1a:13:06:26:a5:
                    19:13:11:c8:c0:e3:eb:ba:e6:4f:2f:89:8e:ca:b1:
                    bd:11:0c:f2:5a:ff:16:bb:96:f5:b1:a1:fd:9a:3d:
                    22:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:38:13:D7:B0:C9:F7:E0:DF:E1:78:35:9C:88:8C:5C:B1:F5:1B:DB
            X509v3 Authority Key Identifier:
                keyid:55:FB:7B:CC:A7:40:28:5F:C8:1A:A3:60:F0:2C:E3:2F:95:81:6D:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vft7zKdAKF_IGqNg8CzjL5WBbbY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:26:f6:c0:a9:1a:7c:fc:75:6d:6c:85:ca:fa:c5:2b:70:62:
         86:83:57:69:98:9b:5e:7c:40:fc:d6:96:12:f3:34:e6:9b:53:
         c4:d4:2f:a2:d8:92:d6:c5:f3:f5:ed:36:3a:8a:0b:03:04:cc:
         5b:89:1f:29:18:92:9b:0e:43:fa:9d:2b:36:8a:33:a2:bf:6b:
         ff:6e:f5:56:27:1e:f8:4a:b7:11:7d:05:89:c6:48:0a:32:3e:
         4d:3b:6b:93:4b:80:01:93:55:09:0c:ff:10:ed:da:d9:55:07:
         4d:67:6c:32:0e:9a:e3:da:92:18:12:29:c5:8e:7a:ef:86:15:
         d2:81:4f:4b:4c:25:f0:ae:ca:e5:f7:2f:a1:a1:47:50:6f:17:
         5b:18:06:27:61:e3:7f:01:5b:71:34:c0:b6:6e:3c:74:24:e1:
         73:4b:ae:06:c0:c3:19:4d:15:19:04:2d:4b:2b:c7:1e:68:2f:
         93:07:82:2c:1b:60:64:76:0a:74:54:63:09:d3:bb:d1:56:0f:
         f3:4b:1b:15:86:3e:91:ac:a4:55:57:46:08:a3:00:28:31:c4:
         3d:a8:e6:29:9d:38:c1:17:ff:6c:fc:58:5a:f9:3e:ea:0b:4e:
         ae:8e:94:c1:f9:6a:bf:a8:49:a4:0e:f0:9c:e2:98:7d:19:49:
         32:a4:40:b7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICApowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTI3QzExMTAvBgNVBAUTKDU1RkI3QkNDQTc0MDI4NUZDODFBQTM2MEYwMkNFMzJG
OTU4MTZEQjYwHhcNMjYwNTEyMTk0MDIzWhcNMjYwNTE5MTk0MDIzWjAYMRYwFAYD
VQQDEw02YTAzODIyNy00NTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqvULt6lNPHkndilBR4+nxMYOuKNyxyZaj6C0imvVBno1UI3Iul0gh0QyktfJ
MGGLhKRu3HI0ZTXY0TEMErubQh7D0QEDQANK0iUqnJuTKd5ZxzLJ7I0IciJII6AB
HUuMVrWAi4UBlsXwRqLlkIibLpV8p3DTAmxO1hTBgMXWw0i0mEiQmDfpT3ypyw25
Ih9RYM7CqmHSqS1IplEQveuGkB4i/l7fIS/0cx9YB8audzkhTw412VMp0azsjjUQ
caMy1ZHCRb4WuoFZmzKkXIbAvLWKB8wca4nmj/59GhMGJqUZExHIwOPruuZPL4mO
yrG9EQzyWv8Wu5b1saH9mj0iNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAI4E9ew
yffg3+F4NZyIjFyx9RvbMB8GA1UdIwQYMBaAFFX7e8ynQChfyBqjYPAs4y+VgW22
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjdDMS9EQ0Y5OEExNjc3
ODExMUVEOTZCMzY0NjRDNEY5QUUwMi9WZnQ3ektkQUtGX0lHcU5nOEN6akw1V0Ji
YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1ZmdDd6S2RBS0ZfSUdxTmc4Q3pqTDVXQmJiWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MjdDMS9EQ0Y5OEExNjc3ODExMUVEOTZCMzY0NjRDNEY5QUUwMi9WZnQ3ektkQUtG
X0lHcU5nOEN6akw1V0JiYlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeCb2wKkafPx1bWyFyvrFK3BihoNXaZibXnxA/NaWEvM05ptTxNQvotiS1sXz
9e02OooLAwTMW4kfKRiSmw5D+p0rNoozor9r/271Vice+Eq3EX0FicZICjI+TTtr
k0uAAZNVCQz/EO3a2VUHTWdsMg6a49qSGBIpxY5674YV0oFPS0wl8K7K5fcvoaFH
UG8XWxgGJ2HjfwFbcTTAtm48dCThc0uuBsDDGU0VGQQtSyvHHmgvkweCLBtgZHYK
dFRjCdO70VYP80sbFYY+kaykVVdGCKMAKDHEPajmKZ04wRf/bPxYWvk+6gtOro6U
wflqv6hJpA7wnOKYfRlJMqRAtw==
-----END CERTIFICATE-----
Generated at Wed May 13 08:18:47 2026 by rpki-client