Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.mft
File:                     VB3RXhVOUI-wD9skXE528q09iB0.mft (raw, json)
Hash identifier:          nKKujI6bWrOQNYsBW0kY/9iZsZiBs34JV3XcZqeIKGY=
Subject key identifier:   68:47:98:A5:21:24:04:5E:5B:E6:FB:9B:2D:BF:E6:0F:79:CA:88:48
Authority key identifier: 54:1D:D1:5E:15:4E:50:8F:B0:0F:DB:24:5C:4E:76:F2:AD:3D:88:1D
Certificate issuer:       /CN=A911CE4A/serialNumber=541DD15E154E508FB00FDB245C4E76F2AD3D881D
Certificate serial:       A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB3RXhVOUI-wD9skXE528q09iB0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.mft
Manifest number:          9D
Signing time:             Mon 11 May 2026 07:35:16 +0000
Manifest this update:     Mon 11 May 2026 07:35:15 +0000
Manifest next update:     Mon 18 May 2026 07:35:15 +0000
Files and hashes:         1: VB3RXhVOUI-wD9skXE528q09iB0.crl (hash: H4bzcneyLEInt6ze9wtv92xwNISbF4r2FnNl1WO7XP4=)
                          2: BA2C0A9E673A11F0B876713DC4F9AE02.roa (hash: k7KAeEujUB9hyqnv/uSDh4wrDBFacTBtGdVKJFRlzqg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.crl
                          rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB3RXhVOUI-wD9skXE528q09iB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 07:35:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 161 (0xa1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CE4A, serialNumber=541DD15E154E508FB00FDB245C4E76F2AD3D881D
        Validity
            Not Before: May 11 07:35:15 2026 GMT
            Not After : May 18 07:35:15 2026 GMT
        Subject: CN=6a0186b3-2923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:62:3f:d9:82:21:5c:b5:c3:b8:1c:45:d5:2b:
                    32:4f:1b:fc:11:24:cd:ff:36:4d:96:9b:fd:6a:8d:
                    76:ff:be:a7:75:99:cb:a6:ec:f9:f9:cb:fa:57:19:
                    b0:4a:b2:84:78:c2:8e:ef:f4:24:d0:1b:cb:8b:15:
                    d6:ac:48:e6:16:28:81:f7:de:d9:6b:19:4c:de:09:
                    52:04:51:c4:0f:6f:b4:57:27:56:df:40:bb:8b:96:
                    c8:17:f8:d3:0d:b0:c2:67:5f:fa:61:f5:ab:c3:40:
                    0e:5d:a5:bd:4b:33:6c:84:d4:b8:d7:c3:9b:a9:e6:
                    da:17:98:ae:69:b4:3c:d2:00:7a:18:d7:96:73:d0:
                    e7:28:e5:29:c3:f1:bc:b7:24:35:1b:e2:4a:13:2f:
                    29:a7:18:27:e0:f9:1e:30:dd:ad:17:99:59:fa:bb:
                    46:71:5c:80:de:7e:79:86:c4:9f:84:ad:3e:ff:7f:
                    f4:cf:e0:97:57:61:e1:ae:3b:fe:fb:47:21:02:14:
                    34:b9:d3:67:0f:90:58:0b:d7:2d:0b:54:1b:16:d8:
                    dc:55:c1:10:9f:da:83:8a:1e:33:95:62:a4:86:a2:
                    b5:70:d1:40:1a:8c:78:b4:92:ef:8c:70:bf:db:d9:
                    a2:63:cb:62:fa:53:d7:b4:09:7a:49:78:bf:20:d9:
                    1a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:47:98:A5:21:24:04:5E:5B:E6:FB:9B:2D:BF:E6:0F:79:CA:88:48
            X509v3 Authority Key Identifier:
                keyid:54:1D:D1:5E:15:4E:50:8F:B0:0F:DB:24:5C:4E:76:F2:AD:3D:88:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB3RXhVOUI-wD9skXE528q09iB0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:4c:75:c4:a6:41:40:44:98:24:67:c3:06:13:40:c5:8a:b3:
         df:7e:46:e3:a5:43:3e:d0:37:99:90:13:11:cf:fd:94:b5:0e:
         60:2b:b7:3e:b1:ea:6e:c4:02:d8:5c:e5:5d:aa:a1:cd:5f:a2:
         4c:d3:1b:cb:c3:11:54:02:99:fd:f2:98:30:c3:74:e1:48:5c:
         7e:de:c2:18:64:d2:af:0f:92:aa:9e:e6:96:5a:f1:00:10:45:
         3d:61:64:cc:9a:45:5d:dd:31:96:01:77:fe:3c:e7:90:22:d1:
         f3:19:54:9c:e7:dc:a9:6e:f7:cf:c4:31:58:85:06:4c:ca:16:
         ea:71:6c:ad:23:c8:07:cb:e1:ba:00:07:d8:f5:fa:00:12:f3:
         b1:92:c9:c3:be:20:5f:74:db:6b:84:2c:68:4f:9b:af:76:f6:
         3f:e1:ec:57:1d:22:a0:42:c7:4f:24:07:35:c2:4a:43:77:c7:
         85:7b:9c:95:bd:0b:4f:9d:4b:a0:17:b6:54:1f:eb:ae:d2:8c:
         62:72:34:8f:b7:4c:f1:20:c1:91:6c:f6:63:c6:60:6f:3d:c2:
         19:b6:89:92:84:80:9d:93:a7:86:79:8d:bb:11:7d:5e:73:a5:
         c2:1e:65:de:a2:77:85:68:d5:86:69:59:77:2c:10:4e:01:24:
         4f:6a:8b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:36:44 2026 by rpki-client