Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft
File:                     VTOnxXv02x5Tj5534LSGi4-QxYI.mft (raw, json)
Hash identifier:          i8jgvfqCgC/w+N8TzBUKdczJ/Nn3H4xUFfWyEFtayDA=
Subject key identifier:   FA:AC:CC:C8:12:17:77:FE:46:F5:9D:E2:D5:E6:F5:AE:71:63:84:9E
Authority key identifier: 55:33:A7:C5:7B:F4:DB:1E:53:8F:9E:77:E0:B4:86:8B:8F:90:C5:82
Certificate issuer:       /CN=A91276FA/serialNumber=5533A7C57BF4DB1E538F9E77E0B4868B8F90C582
Certificate serial:       0146
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft
Manifest number:          0132
Signing time:             Mon 11 May 2026 05:39:32 +0000
Manifest this update:     Mon 11 May 2026 05:39:32 +0000
Manifest next update:     Mon 18 May 2026 05:39:32 +0000
Files and hashes:         1: VTOnxXv02x5Tj5534LSGi4-QxYI.crl (hash: rL/CNN6p3s3dbsoeFKogN5lOi57GuDtBeJHiKRif3Xs=)
                          2: 5D8DFB5684CA11EF9F92574DC4F9AE02.roa (hash: ui+QIvOSSm4JsqVWIgvAnE+tPuj6skIC4z/Y5KBBL/w=)
                          3: 7EC9705C84CA11EFA41F8D4DC4F9AE02.roa (hash: VkfTGGoNVUsbEcJxM7s1vcrxda5Fy3LpRVjxl0XTbMI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.crl
                          rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 05:39:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 326 (0x146)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91276FA, serialNumber=5533A7C57BF4DB1E538F9E77E0B4868B8F90C582
        Validity
            Not Before: May 11 05:39:32 2026 GMT
            Not After : May 18 05:39:32 2026 GMT
        Subject: CN=6a016b94-2df4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7e:95:45:17:8a:90:64:3a:4a:fb:db:0c:82:
                    8f:b0:53:89:58:64:b5:41:0d:90:17:87:c1:8c:ec:
                    34:2e:bd:62:0e:ad:71:9f:78:a0:6c:e2:de:da:fc:
                    2a:40:cd:0e:99:e6:8c:ca:e5:4e:6e:63:30:1c:cb:
                    ad:e9:77:46:f1:ec:50:c3:8e:b4:aa:d7:dd:33:99:
                    c1:8f:18:d9:a1:dd:71:38:91:42:01:a4:5d:04:b7:
                    35:b2:f6:99:0e:d9:af:f0:55:f1:fc:21:56:ad:36:
                    60:87:c0:75:b7:89:9f:7e:f4:b2:57:b2:d1:77:5c:
                    39:c2:bc:19:b5:78:cb:ff:d2:b4:a4:80:62:19:aa:
                    4b:bf:cf:6a:32:15:77:b0:6a:cf:46:ee:58:ca:85:
                    ad:07:84:0e:7c:23:07:b0:e2:42:26:48:76:59:39:
                    9e:df:26:10:48:ea:a9:7c:61:a1:27:ab:38:d9:7f:
                    2d:14:11:f2:c3:05:8f:c5:17:ed:b9:83:03:a0:1c:
                    22:33:74:c3:bc:a1:69:85:11:0f:5b:1e:60:a5:19:
                    c0:9c:a2:8a:8b:7d:6b:dc:7e:1a:48:95:62:52:36:
                    9d:af:8a:47:2f:19:e8:38:84:51:d8:67:77:37:08:
                    52:bb:c9:70:63:0b:82:7c:a4:0c:c2:18:a4:03:34:
                    28:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:AC:CC:C8:12:17:77:FE:46:F5:9D:E2:D5:E6:F5:AE:71:63:84:9E
            X509v3 Authority Key Identifier:
                keyid:55:33:A7:C5:7B:F4:DB:1E:53:8F:9E:77:E0:B4:86:8B:8F:90:C5:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:7e:d8:11:51:c2:17:a9:3f:f6:68:df:c0:d2:22:57:1e:79:
         80:7f:60:91:c4:6f:7f:f9:8a:3d:53:98:70:35:e3:52:b7:88:
         a9:3c:03:5c:3d:20:2b:fd:4e:cc:b7:8b:1f:41:17:85:b1:c9:
         72:03:54:99:3c:21:01:63:98:2e:e8:83:39:81:34:d0:93:d8:
         6c:d3:7a:72:40:80:38:22:b0:2e:70:68:d6:c7:a7:c9:1a:82:
         7d:7a:76:4d:2d:2f:0c:fe:2d:68:4f:d6:fb:9c:d5:da:99:6b:
         6d:ab:cc:38:83:eb:51:c2:bb:49:e7:0d:64:5a:14:ce:c1:d9:
         18:f8:f9:97:b0:1e:d3:7c:b2:6c:6e:5c:88:6e:0c:81:9d:cc:
         34:21:69:99:b6:ea:bd:59:7a:fb:c9:5e:39:29:71:2e:05:20:
         21:26:6a:89:2a:1b:f5:34:0e:20:2d:8c:92:7b:9e:25:80:98:
         8b:87:4b:30:38:d6:e4:20:68:c8:21:38:08:ad:05:35:e3:84:
         86:bb:6a:1e:db:8d:8e:09:d3:54:c0:51:b6:37:0e:5d:f5:f6:
         bb:9c:f7:9c:d2:10:cb:1a:19:a1:44:9b:95:cd:ad:05:35:6e:
         ad:cb:30:bd:76:ec:27:b0:0d:6e:c6:1b:ea:3d:28:74:4c:c9:
         cc:bf:c3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:00:58 2026 by rpki-client