Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.mft
File:                     VB3RXhVOUI-wD9skXE528q09iB0.mft (raw, json)
Hash identifier:          EzbZANrRs0JD8tZ9twAqFUtVWB78MhbkW+Xm2woCL3E=
Subject key identifier:   D7:C6:CA:AE:38:0E:47:2F:CA:2B:CD:B8:9F:10:9E:E6:80:7D:64:2C
Authority key identifier: 54:1D:D1:5E:15:4E:50:8F:B0:0F:DB:24:5C:4E:76:F2:AD:3D:88:1D
Certificate issuer:       /CN=A911CE4A/serialNumber=541DD15E154E508FB00FDB245C4E76F2AD3D881D
Certificate serial:       C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB3RXhVOUI-wD9skXE528q09iB0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.mft
Manifest number:          C1
Signing time:             Thu 23 Jul 2026 08:50:51 +0000
Manifest this update:     Thu 23 Jul 2026 08:50:50 +0000
Manifest next update:     Thu 30 Jul 2026 08:50:50 +0000
Files and hashes:         1: VB3RXhVOUI-wD9skXE528q09iB0.crl (hash: AWQKeFuHGkflBPqv1LKftH1XSTvwnPyuKoeW7CNUHEA=)
                          2: BA2C0A9E673A11F0B876713DC4F9AE02.roa (hash: k7KAeEujUB9hyqnv/uSDh4wrDBFacTBtGdVKJFRlzqg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.crl
                          rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB3RXhVOUI-wD9skXE528q09iB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 08:50:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 197 (0xc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CE4A, serialNumber=541DD15E154E508FB00FDB245C4E76F2AD3D881D
        Validity
            Not Before: Jul 23 08:50:50 2026 GMT
            Not After : Jul 30 08:50:50 2026 GMT
        Subject: CN=6a61d5eb-1f8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f2:91:ce:9c:4e:13:45:bd:0c:7c:ba:40:db:
                    1a:64:33:b8:7b:26:bf:a8:e9:bc:d3:9b:e6:40:f0:
                    c7:91:09:eb:0f:cf:4b:2d:49:22:71:2c:00:68:31:
                    df:0a:6c:94:03:20:bf:5a:de:27:be:1f:3f:16:45:
                    19:fe:a4:5b:c0:8b:71:0f:6e:c7:b0:23:50:e5:f9:
                    f1:24:d0:03:6f:43:64:26:2c:e5:a0:fa:f2:d3:35:
                    9e:f0:75:eb:2c:1f:db:03:40:04:4c:8f:e0:65:d3:
                    f0:fb:e4:06:ee:f6:63:1a:98:e4:51:ae:41:a4:8f:
                    6b:f7:c5:eb:40:0d:b5:a4:49:06:d6:be:d4:45:9f:
                    f0:2c:e0:85:cf:d0:3e:df:94:bb:59:9f:2c:d0:01:
                    b1:0e:3d:8b:5b:85:45:ca:e7:6c:d9:e1:1f:6e:be:
                    73:31:b1:94:98:97:3c:09:a8:30:74:d4:ec:98:89:
                    25:b5:b0:ba:6c:7e:50:8c:04:4e:7a:66:d4:67:b4:
                    0a:ad:c8:ef:dd:7f:65:30:89:fc:71:14:03:ec:f0:
                    f1:ca:fb:ff:e3:4e:fb:b7:9e:16:a6:99:e5:08:dc:
                    b7:cf:a5:fc:97:f1:1d:22:67:70:22:e4:2c:07:e4:
                    ec:e5:52:e1:cb:31:a5:db:8a:f6:4f:f4:d1:90:0c:
                    6a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:C6:CA:AE:38:0E:47:2F:CA:2B:CD:B8:9F:10:9E:E6:80:7D:64:2C
            X509v3 Authority Key Identifier:
                keyid:54:1D:D1:5E:15:4E:50:8F:B0:0F:DB:24:5C:4E:76:F2:AD:3D:88:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB3RXhVOUI-wD9skXE528q09iB0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:f4:03:c3:e9:0e:d8:5a:dd:72:5e:86:91:a0:ab:b6:53:56:
         81:51:c6:5e:3d:fb:ed:e0:20:a7:3e:5d:08:bd:c7:69:50:ca:
         30:8b:5d:a5:1d:70:a1:27:60:f7:11:ce:e8:e2:f2:6e:67:52:
         8c:eb:9d:74:55:fc:e6:2c:f6:6d:b8:b0:a3:4e:11:10:8c:63:
         b6:7a:80:bd:b7:f4:62:27:45:ef:62:75:e8:dd:5d:cd:2e:e8:
         cf:f7:c0:2f:53:4b:7d:7b:f4:e7:6d:64:27:ed:90:1c:d5:dc:
         46:31:9f:ac:48:17:07:a3:5e:f7:35:96:24:87:1e:5d:2a:ca:
         b9:cc:3b:cd:e8:f6:8c:fd:da:bb:75:94:0e:ce:60:b8:26:a3:
         4e:ca:b0:b5:87:8c:5b:1e:8b:c3:b3:e9:32:33:5e:c8:76:e3:
         68:d5:2f:9d:2c:b5:79:20:39:aa:c8:9c:53:7c:1d:39:88:8d:
         2f:9d:07:83:a8:e9:23:79:dd:b3:90:29:31:6e:3a:8b:54:36:
         6c:a5:7b:47:37:1b:f0:24:66:f6:61:ca:9f:e5:58:b2:3f:37:
         a9:ce:9b:b9:da:57:51:fa:fc:cb:94:6e:23:ac:fe:f5:5e:f7:
         dd:d6:77:aa:c4:69:2f:44:89:13:97:bd:1b:50:47:94:ff:3f:
         8b:18:67:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:41:30 2026 by rpki-client