Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A514/3FF25AFA1F4911F096F7AE7AC4F9AE02/VU0O_yINZrbppAkPDcy6milc3bU.mft
File:                     VU0O_yINZrbppAkPDcy6milc3bU.mft (raw, json)
Hash identifier:          or5lLfajxWXtIrHDNaLH6iImxzwvnYag94qnBCqJsGw=
Subject key identifier:   12:92:A2:62:D2:57:D0:2C:9B:B1:A1:A9:51:62:23:51:33:34:41:B7
Authority key identifier: 55:4D:0E:FF:22:0D:66:B6:E9:A4:09:0F:0D:CC:BA:9A:29:5C:DD:B5
Certificate issuer:       /CN=A914A514/serialNumber=554D0EFF220D66B6E9A4090F0DCCBA9A295CDDB5
Certificate serial:       D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VU0O_yINZrbppAkPDcy6milc3bU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A514/3FF25AFA1F4911F096F7AE7AC4F9AE02/VU0O_yINZrbppAkPDcy6milc3bU.mft
Manifest number:          CC
Signing time:             Mon 11 May 2026 07:00:00 +0000
Manifest this update:     Mon 11 May 2026 06:59:59 +0000
Manifest next update:     Mon 18 May 2026 06:59:59 +0000
Files and hashes:         1: VU0O_yINZrbppAkPDcy6milc3bU.crl (hash: TBEFHOU7G+s/jwiUQ7B3p0Vbn1ITlZ2keQTp/L4gYzA=)
                          2: 4499D9921F4A11F0AF06577CC4F9AE02.roa (hash: Nrn9HJKbbAN6/WO7m56GfRo1g91ZrJZGME+tEexROGo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A514/3FF25AFA1F4911F096F7AE7AC4F9AE02/VU0O_yINZrbppAkPDcy6milc3bU.crl
                          rsync://rpki.apnic.net/member_repository/A914A514/3FF25AFA1F4911F096F7AE7AC4F9AE02/VU0O_yINZrbppAkPDcy6milc3bU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VU0O_yINZrbppAkPDcy6milc3bU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:59:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 210 (0xd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A514, serialNumber=554D0EFF220D66B6E9A4090F0DCCBA9A295CDDB5
        Validity
            Not Before: May 11 06:59:59 2026 GMT
            Not After : May 18 06:59:59 2026 GMT
        Subject: CN=6a017e70-57ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0d:c3:77:a1:dd:41:f0:7a:dd:db:05:9a:5a:
                    6a:b1:4a:fa:de:98:be:96:d0:81:d0:61:60:15:33:
                    27:88:84:7e:d2:74:c7:01:79:fe:e2:1b:4f:45:7d:
                    02:b3:d7:c3:ba:5b:98:d5:74:7a:e9:95:c3:15:78:
                    53:65:fa:b2:cd:22:d6:35:4f:01:cd:44:89:24:45:
                    03:41:b6:53:8b:e7:6d:12:bc:fd:f6:38:7b:38:34:
                    4c:4d:3d:2f:e9:df:12:ed:71:c6:91:5c:63:3e:28:
                    78:eb:97:e7:c4:92:a9:d6:1b:c7:4d:da:f7:ba:76:
                    54:af:75:cb:54:59:9b:9f:b4:93:99:31:d2:33:67:
                    03:e3:14:37:46:47:59:5f:1a:cb:9a:64:6c:e9:67:
                    ce:50:04:90:48:15:bf:70:10:15:4d:58:a2:2f:e3:
                    4a:f8:22:37:01:4c:4d:49:b6:f1:8d:05:26:4f:da:
                    cf:44:95:b5:a8:60:a9:f9:84:0f:d3:4e:f7:5a:11:
                    32:e4:71:51:6d:8a:dc:a0:0d:48:08:58:ef:4f:44:
                    41:a6:fa:bb:f2:35:02:f4:46:7e:9f:1c:2f:6a:84:
                    6d:f9:3f:88:f3:a8:1d:21:32:92:5e:d6:48:99:7d:
                    db:8d:62:03:35:0f:7e:61:53:f0:d2:eb:73:d3:93:
                    7d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:92:A2:62:D2:57:D0:2C:9B:B1:A1:A9:51:62:23:51:33:34:41:B7
            X509v3 Authority Key Identifier:
                keyid:55:4D:0E:FF:22:0D:66:B6:E9:A4:09:0F:0D:CC:BA:9A:29:5C:DD:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A514/3FF25AFA1F4911F096F7AE7AC4F9AE02/VU0O_yINZrbppAkPDcy6milc3bU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VU0O_yINZrbppAkPDcy6milc3bU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A514/3FF25AFA1F4911F096F7AE7AC4F9AE02/VU0O_yINZrbppAkPDcy6milc3bU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:cf:f8:7a:e9:2e:61:2b:16:59:28:ca:d6:07:a0:e2:87:ce:
         92:42:54:9c:74:59:19:e1:5c:96:29:17:a3:5e:33:04:4a:4e:
         78:f5:a8:e9:8b:fc:0c:f9:ed:36:48:02:71:ac:fc:69:f3:29:
         fc:20:4a:30:1a:18:d9:7f:d6:4d:da:45:00:fa:84:69:7d:74:
         07:dc:47:b5:a5:ed:bb:f3:7a:1d:4e:e0:35:b4:50:ef:b7:3a:
         69:db:db:ec:0e:6d:05:bb:3b:33:32:2d:8b:fe:23:22:f3:a4:
         c3:ac:d8:f5:69:31:75:6d:43:4a:79:b7:81:2c:fa:05:28:9e:
         9a:c6:b9:64:f3:24:50:d4:78:0a:92:41:4b:f9:73:e6:73:91:
         3b:2c:f8:b2:3d:13:30:e1:09:25:bf:7c:1f:82:2f:c1:b9:fe:
         f5:44:da:21:3e:9e:d5:83:5e:55:81:cb:35:52:8e:4a:75:04:
         f8:80:26:95:fd:97:cc:97:52:33:18:cc:a7:2c:a5:88:23:dd:
         32:eb:5d:2a:6d:ac:75:60:ae:43:4f:57:b6:96:39:24:69:04:
         88:34:8d:78:b1:fe:5c:8e:8c:1a:9f:03:1d:b6:91:39:d8:06:
         6e:66:e0:b2:c5:35:93:11:8a:55:04:4c:c6:9c:fd:a2:e8:e9:
         0a:9e:df:c0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEE1MTQxMTAvBgNVBAUTKDU1NEQwRUZGMjIwRDY2QjZFOUE0MDkwRjBEQ0NCQTlB
Mjk1Q0REQjUwHhcNMjYwNTExMDY1OTU5WhcNMjYwNTE4MDY1OTU5WjAYMRYwFAYD
VQQDEw02YTAxN2U3MC01N2JhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxQ3Dd6HdQfB63dsFmlpqsUr63pi+ltCB0GFgFTMniIR+0nTHAXn+4htPRX0C
s9fDuluY1XR66ZXDFXhTZfqyzSLWNU8BzUSJJEUDQbZTi+dtErz99jh7ODRMTT0v
6d8S7XHGkVxjPih465fnxJKp1hvHTdr3unZUr3XLVFmbn7STmTHSM2cD4xQ3RkdZ
XxrLmmRs6WfOUASQSBW/cBAVTViiL+NK+CI3AUxNSbbxjQUmT9rPRJW1qGCp+YQP
0073WhEy5HFRbYrcoA1ICFjvT0RBpvq78jUC9EZ+nxwvaoRt+T+I86gdITKSXtZI
mX3bjWIDNQ9+YVPw0utz05N9rwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBKSomLS
V9Asm7GhqVFiI1EzNEG3MB8GA1UdIwQYMBaAFFVNDv8iDWa26aQJDw3MupopXN21
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTUxNC8zRkYyNUFGQTFG
NDkxMUYwOTZGN0FFN0FDNEY5QUUwMi9WVTBPX3lJTlpyYnBwQWtQRGN5Nm1pbGMz
YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZVME9feUlOWnJicHBBa1BEY3k2bWlsYzNiVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QTUxNC8zRkYyNUFGQTFGNDkxMUYwOTZGN0FFN0FDNEY5QUUwMi9WVTBPX3lJTlpy
YnBwQWtQRGN5Nm1pbGMzYlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAes/4eukuYSsWWSjK1geg4ofOkkJUnHRZGeFclikXo14zBEpOePWo6Yv8DPnt
NkgCcaz8afMp/CBKMBoY2X/WTdpFAPqEaX10B9xHtaXtu/N6HU7gNbRQ77c6advb
7A5tBbs7MzIti/4jIvOkw6zY9WkxdW1DSnm3gSz6BSiemsa5ZPMkUNR4CpJBS/lz
5nOROyz4sj0TMOEJJb98H4Ivwbn+9UTaIT6e1YNeVYHLNVKOSnUE+IAmlf2XzJdS
MxjMpyyliCPdMutdKm2sdWCuQ09XtpY5JGkEiDSNeLH+XI6MGp8DHbaROdgGbmbg
ssU1kxGKVQRMxpz9oujpCp7fwA==
-----END CERTIFICATE-----
Generated at Wed May 13 01:44:15 2026 by rpki-client