Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.mft
File:                     VfLp2yg8tFniZmj5Ik8ms6KkRk4.mft (raw, json)
Hash identifier:          4KyEPcGWzitQJYjVlf7E28ewVRdlsjd9Ipp6YDTEm3k=
Subject key identifier:   D3:F8:E3:08:26:C0:C2:AB:74:78:C3:1C:32:19:1C:B3:82:7C:C9:66
Authority key identifier: 55:F2:E9:DB:28:3C:B4:59:E2:66:68:F9:22:4F:26:B3:A2:A4:46:4E
Certificate issuer:       /CN=A915B878/serialNumber=55F2E9DB283CB459E26668F9224F26B3A2A4464E
Certificate serial:       0677
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLp2yg8tFniZmj5Ik8ms6KkRk4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.mft
Manifest number:          0675
Signing time:             Wed 22 Jul 2026 23:15:36 +0000
Manifest this update:     Wed 22 Jul 2026 23:15:36 +0000
Manifest next update:     Wed 29 Jul 2026 23:15:36 +0000
Files and hashes:         1: VfLp2yg8tFniZmj5Ik8ms6KkRk4.crl (hash: HqXVdR9/LlicPic+B2EocvNl3unvrXOmg0q/Hu3CN7w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.crl
                          rsync://rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLp2yg8tFniZmj5Ik8ms6KkRk4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:15:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1655 (0x677)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B878, serialNumber=55F2E9DB283CB459E26668F9224F26B3A2A4464E
        Validity
            Not Before: Jul 22 23:15:36 2026 GMT
            Not After : Jul 29 23:15:36 2026 GMT
        Subject: CN=6a614f18-7568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:05:6d:06:f6:37:b0:8e:9a:f3:6c:de:32:bc:
                    7e:5f:1e:eb:23:d4:23:02:db:7c:32:8a:02:b3:1d:
                    fc:d7:ca:c3:46:2b:d9:a8:cf:28:68:35:56:17:9c:
                    f8:b5:e2:51:d1:17:49:dd:86:ef:91:53:eb:4a:15:
                    01:6d:8f:75:1b:86:b6:0b:4e:e2:fd:b4:e1:a4:c8:
                    82:ca:52:f4:c6:67:41:9a:77:c6:2e:da:5b:51:ab:
                    96:58:c4:c8:60:d8:45:5d:db:fc:af:41:d4:55:1c:
                    6c:50:49:ea:52:5a:92:d1:94:50:4e:84:7d:f8:f0:
                    af:97:2a:64:0a:4e:58:cc:d9:8b:a2:b3:78:78:8e:
                    62:7f:26:dc:00:3c:66:b6:86:55:4f:19:46:77:a5:
                    7b:3c:d8:6d:65:a3:91:7d:07:6c:64:67:1c:49:8a:
                    10:28:1d:6f:c6:d0:2b:39:e6:f4:28:b6:e5:da:7c:
                    c7:c3:f8:1e:da:a2:1a:a5:d8:33:d5:d4:43:03:9a:
                    99:96:c2:3b:6c:f3:d3:9b:7a:04:de:b0:8b:6b:b9:
                    f0:94:d8:f1:22:39:e3:2e:8c:0a:88:a9:71:96:79:
                    e1:6c:a8:76:78:a4:bf:00:f3:fe:9a:89:cb:d2:0a:
                    9e:ce:b2:2c:af:a9:75:ea:a8:66:b6:79:ad:1b:d6:
                    66:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:F8:E3:08:26:C0:C2:AB:74:78:C3:1C:32:19:1C:B3:82:7C:C9:66
            X509v3 Authority Key Identifier:
                keyid:55:F2:E9:DB:28:3C:B4:59:E2:66:68:F9:22:4F:26:B3:A2:A4:46:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLp2yg8tFniZmj5Ik8ms6KkRk4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:de:8e:49:4b:3a:6f:04:be:bc:bb:59:fb:c9:f0:08:d8:6c:
         3b:fc:da:4a:d3:d7:03:e1:78:cf:bb:27:a8:8a:17:eb:83:0e:
         51:3d:12:09:11:57:56:a2:af:c3:0e:b8:ac:58:75:3c:d1:56:
         8a:e0:31:0f:98:0d:40:77:74:b0:c3:ca:48:ac:39:6e:98:2e:
         f5:19:4f:53:7a:21:89:26:a2:aa:31:94:d8:f6:4e:5b:14:d5:
         9c:96:23:cf:e6:13:1c:40:61:46:f6:9e:f1:d6:71:2a:c2:d9:
         d5:de:ad:15:d1:81:01:9b:02:12:6e:88:1f:43:3a:17:18:ba:
         57:ac:83:5b:31:e1:63:57:99:d0:e2:45:f3:78:8f:8e:16:e2:
         02:b2:7b:a2:01:a9:45:46:ca:2c:10:2b:ec:e4:89:a8:a3:5e:
         a7:63:2b:82:e4:be:72:d6:0d:74:90:22:48:05:e8:5e:ed:66:
         12:54:0c:e1:bf:e9:58:dc:a5:d0:65:12:a2:e1:67:1e:43:08:
         f4:da:39:70:9b:ed:a9:65:bd:bb:f6:d2:bf:02:74:fe:52:a2:
         ad:a9:f1:3d:80:d0:9d:93:91:35:88:b2:50:3b:44:86:d6:3e:
         93:0e:a7:94:3f:80:59:a9:ae:40:8d:1f:d2:9a:30:16:f0:3c:
         cb:b8:b0:23
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBncwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUI4NzgxMTAvBgNVBAUTKDU1RjJFOURCMjgzQ0I0NTlFMjY2NjhGOTIyNEYyNkIz
QTJBNDQ2NEUwHhcNMjYwNzIyMjMxNTM2WhcNMjYwNzI5MjMxNTM2WjAYMRYwFAYD
VQQDEw02YTYxNGYxOC03NTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArgVtBvY3sI6a82zeMrx+Xx7rI9QjAtt8MooCsx3818rDRivZqM8oaDVWF5z4
teJR0RdJ3YbvkVPrShUBbY91G4a2C07i/bThpMiCylL0xmdBmnfGLtpbUauWWMTI
YNhFXdv8r0HUVRxsUEnqUlqS0ZRQToR9+PCvlypkCk5YzNmLorN4eI5ifybcADxm
toZVTxlGd6V7PNhtZaORfQdsZGccSYoQKB1vxtArOeb0KLbl2nzHw/ge2qIapdgz
1dRDA5qZlsI7bPPTm3oE3rCLa7nwlNjxIjnjLowKiKlxlnnhbKh2eKS/APP+monL
0gqezrIsr6l16qhmtnmtG9Zm/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNP44wgm
wMKrdHjDHDIZHLOCfMlmMB8GA1UdIwQYMBaAFFXy6dsoPLRZ4mZo+SJPJrOipEZO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Qjg3OC9CRUQ4MzY2NkNE
MTExMUVCQkM5MzVGMTZDNEY5QUUwMi9WZkxwMnlnOHRGbmlabWo1SWs4bXM2S2tS
azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZmTHAyeWc4dEZuaVptajVJazhtczZLa1JrNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
Qjg3OC9CRUQ4MzY2NkNEMTExMUVCQkM5MzVGMTZDNEY5QUUwMi9WZkxwMnlnOHRG
bmlabWo1SWs4bXM2S2tSazQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApN6OSUs6bwS+vLtZ+8nwCNhsO/zaStPXA+F4z7snqIoX64MOUT0SCRFXVqKv
ww64rFh1PNFWiuAxD5gNQHd0sMPKSKw5bpgu9RlPU3ohiSaiqjGU2PZOWxTVnJYj
z+YTHEBhRvae8dZxKsLZ1d6tFdGBAZsCEm6IH0M6Fxi6V6yDWzHhY1eZ0OJF83iP
jhbiArJ7ogGpRUbKLBAr7OSJqKNep2MrguS+ctYNdJAiSAXoXu1mElQM4b/pWNyl
0GUSouFnHkMI9No5cJvtqWW9u/bSvwJ0/lKiranxPYDQnZORNYiyUDtEhtY+kw6n
lD+AWamuQI0f0powFvA8y7iwIw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:49:22 2026 by rpki-client