Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913CB06/8A4D76BE07E411F1A34718A5213D8C67/VC3eAu1c1aeKWFAwa556fpn8Jgs.mft
File:                     VC3eAu1c1aeKWFAwa556fpn8Jgs.mft (raw, json)
Hash identifier:          LrO2KgvciSC7hALHMIJwnimk1jiLvI65Nvj1InnxmgA=
Subject key identifier:   8E:BC:E1:78:38:CB:62:B9:3E:41:DF:F4:65:E7:21:69:79:EE:96:C3
Authority key identifier: 54:2D:DE:02:ED:5C:D5:A7:8A:58:50:30:6B:9E:7A:7E:99:FC:26:0B
Certificate issuer:       /CN=A913CB06/serialNumber=542DDE02ED5CD5A78A5850306B9E7A7E99FC260B
Certificate serial:       36
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/VC3eAu1c1aeKWFAwa556fpn8Jgs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913CB06/8A4D76BE07E411F1A34718A5213D8C67/VC3eAu1c1aeKWFAwa556fpn8Jgs.mft
Manifest number:          34
Signing time:             Wed 13 May 2026 08:49:12 +0000
Manifest this update:     Wed 13 May 2026 08:49:12 +0000
Manifest next update:     Wed 20 May 2026 08:49:12 +0000
Files and hashes:         1: VC3eAu1c1aeKWFAwa556fpn8Jgs.crl (hash: V8Lbm7nwwQDwwX/MdWy7tqfgGvvwgJNE5nDTgP64ZiQ=)
                          2: D111CFB407E411F1ADC4A5A5213D8C67.roa (hash: lUmpfgR/p5W8luIbaZ+1ADUqFYn/T6101vy4MSXsnuo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913CB06/8A4D76BE07E411F1A34718A5213D8C67/VC3eAu1c1aeKWFAwa556fpn8Jgs.crl
                          rsync://rpki.apnic.net/member_repository/A913CB06/8A4D76BE07E411F1A34718A5213D8C67/VC3eAu1c1aeKWFAwa556fpn8Jgs.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/VC3eAu1c1aeKWFAwa556fpn8Jgs.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 08:49:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913CB06, serialNumber=542DDE02ED5CD5A78A5850306B9E7A7E99FC260B
        Validity
            Not Before: May 13 08:49:12 2026 GMT
            Not After : May 20 08:49:12 2026 GMT
        Subject: CN=6a043b08-14c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b5:3f:3f:99:4d:d7:23:b7:b0:1c:99:dc:3f:
                    5b:28:db:7b:aa:92:a4:95:96:42:6d:e6:ca:e6:60:
                    73:33:22:be:46:76:0f:64:79:32:a4:31:fe:fd:b8:
                    fb:c0:37:a8:71:26:88:3b:ae:b3:03:2f:c6:59:c0:
                    17:75:c0:62:1d:6e:d2:00:1e:60:84:2c:f0:e2:a4:
                    0e:e5:94:f6:10:4a:76:ea:24:d6:64:2a:06:b2:56:
                    fd:04:95:57:0b:0c:c3:68:6e:81:f9:7d:b8:3e:ed:
                    ab:15:a4:a2:10:60:8f:6c:f2:c5:5b:89:25:86:35:
                    b9:f4:5d:42:e7:db:8d:36:fc:96:73:a2:6a:40:0b:
                    9d:da:e1:aa:49:f0:8d:90:3a:fd:11:23:42:25:84:
                    a5:14:a4:47:a0:2d:93:09:ed:e9:4c:f4:81:36:24:
                    94:71:6a:1e:1a:f1:6a:28:7d:66:65:98:35:74:7b:
                    2b:35:8a:9e:76:fc:7d:42:c5:d6:84:99:b1:e7:a0:
                    91:5c:13:b6:54:5d:2d:e8:72:69:18:85:c2:9d:62:
                    63:09:1b:40:c4:2f:8e:aa:84:93:23:98:a9:5c:63:
                    b7:bc:56:ce:4e:08:7b:d2:f8:f6:23:3a:85:ea:4a:
                    6c:5d:7a:bc:93:bf:7e:8f:a9:c5:87:eb:7c:ad:d2:
                    cd:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:BC:E1:78:38:CB:62:B9:3E:41:DF:F4:65:E7:21:69:79:EE:96:C3
            X509v3 Authority Key Identifier:
                keyid:54:2D:DE:02:ED:5C:D5:A7:8A:58:50:30:6B:9E:7A:7E:99:FC:26:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913CB06/8A4D76BE07E411F1A34718A5213D8C67/VC3eAu1c1aeKWFAwa556fpn8Jgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/VC3eAu1c1aeKWFAwa556fpn8Jgs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CB06/8A4D76BE07E411F1A34718A5213D8C67/VC3eAu1c1aeKWFAwa556fpn8Jgs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:3a:d6:b6:cb:50:af:ad:54:6e:40:7e:cf:7d:78:6d:7e:51:
         82:27:6e:0a:4a:e6:89:96:49:8c:1c:ab:91:9a:f8:17:f1:cc:
         78:20:16:7b:3d:bf:bc:6a:d8:83:df:b6:d1:89:19:3b:26:4c:
         69:ea:6e:f5:17:46:ed:ce:ae:56:26:ec:83:4d:2d:93:74:fa:
         ad:9d:43:f5:8e:d6:51:63:d9:07:0b:46:52:47:cb:b4:ba:21:
         b2:1e:08:15:5e:75:76:a3:7f:2f:d5:2b:03:11:dd:df:9d:f4:
         b5:f0:a9:f2:a4:f9:91:6a:d6:e7:1d:48:99:da:56:21:95:37:
         a8:85:8f:65:8d:6c:f3:65:71:6b:3b:cd:af:a1:21:55:6a:f3:
         77:c2:44:b2:05:91:32:1a:32:3a:02:c1:99:88:58:28:db:c4:
         5b:8b:e2:83:b5:19:e2:9d:79:46:89:47:3d:54:c3:80:06:30:
         63:40:97:7c:ea:9b:5a:ce:03:57:80:32:0b:11:86:65:f1:05:
         85:b9:f8:9d:23:05:4a:fd:4f:0d:8a:0e:c5:88:de:ff:a5:8d:
         a5:3c:b3:43:07:a1:03:66:df:d5:0f:08:d8:57:b0:8f:42:96:
         7b:30:2f:83:a3:4a:87:60:28:fb:5c:ba:51:37:61:50:7b:97:
         ed:37:a0:16
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
Q0IwNjExMC8GA1UEBRMoNTQyRERFMDJFRDVDRDVBNzhBNTg1MDMwNkI5RTdBN0U5
OUZDMjYwQjAeFw0yNjA1MTMwODQ5MTJaFw0yNjA1MjAwODQ5MTJaMBgxFjAUBgNV
BAMTDTZhMDQzYjA4LTE0YzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC8tT8/mU3XI7ewHJncP1so23uqkqSVlkJt5srmYHMzIr5Gdg9keTKkMf79uPvA
N6hxJog7rrMDL8ZZwBd1wGIdbtIAHmCELPDipA7llPYQSnbqJNZkKgayVv0ElVcL
DMNoboH5fbg+7asVpKIQYI9s8sVbiSWGNbn0XULn2402/JZzompAC53a4apJ8I2Q
Ov0RI0IlhKUUpEegLZMJ7elM9IE2JJRxah4a8WoofWZlmDV0eys1ip52/H1CxdaE
mbHnoJFcE7ZUXS3ocmkYhcKdYmMJG0DEL46qhJMjmKlcY7e8Vs5OCHvS+PYjOoXq
SmxderyTv36PqcWH63yt0s0NAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUjrzheDjL
Yrk+Qd/0ZechaXnulsMwHwYDVR0jBBgwFoAUVC3eAu1c1aeKWFAwa556fpn8Jgsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNDQjA2LzhBNEQ3NkJFMDdF
NDExRjFBMzQ3MThBNTIxM0Q4QzY3L1ZDM2VBdTFjMWFlS1dGQXdhNTU2ZnBuOEpn
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvVkMzZUF1MWMxYWVLV0ZBd2E1NTZmcG44SmdzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTND
QjA2LzhBNEQ3NkJFMDdFNDExRjFBMzQ3MThBNTIxM0Q4QzY3L1ZDM2VBdTFjMWFl
S1dGQXdhNTU2ZnBuOEpncy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBLOta2y1CvrVRuQH7PfXhtflGCJ24KSuaJlkmMHKuRmvgX8cx4IBZ7Pb+8atiD
37bRiRk7Jkxp6m71F0btzq5WJuyDTS2TdPqtnUP1jtZRY9kHC0ZSR8u0uiGyHggV
XnV2o38v1SsDEd3fnfS18KnypPmRatbnHUiZ2lYhlTeohY9ljWzzZXFrO82voSFV
avN3wkSyBZEyGjI6AsGZiFgo28Rbi+KDtRninXlGiUc9VMOABjBjQJd86ptazgNX
gDILEYZl8QWFufidIwVK/U8Nig7FiN7/pY2lPLNDB6EDZt/VDwjYV7CPQpZ7MC+D
o0qHYCj7XLpRN2FQe5ftN6AW
-----END CERTIFICATE-----
Generated at Wed May 13 19:07:16 2026 by rpki-client