Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916537A/9F817BB6276A11F1A891B17FC2833773/VqcyG_yMPsLpkWD6MztPVMGClGo.mft
File:                     VqcyG_yMPsLpkWD6MztPVMGClGo.mft (raw, json)
Hash identifier:          F+g0x1eB+CbhmmGWCN4jGuJE1XOU3/9hz++MU36Q+ik=
Subject key identifier:   4E:31:8C:85:01:66:E5:52:DB:6A:4A:FA:79:E5:71:10:9E:A5:B3:BD
Authority key identifier: 56:A7:32:1B:FC:8C:3E:C2:E9:91:60:FA:33:3B:4F:54:C1:82:94:6A
Certificate issuer:       /CN=A916537A/serialNumber=56A7321BFC8C3EC2E99160FA333B4F54C182946A
Certificate serial:       1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqcyG_yMPsLpkWD6MztPVMGClGo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916537A/9F817BB6276A11F1A891B17FC2833773/VqcyG_yMPsLpkWD6MztPVMGClGo.mft
Manifest number:          1C
Signing time:             Mon 11 May 2026 09:09:37 +0000
Manifest this update:     Mon 11 May 2026 09:09:37 +0000
Manifest next update:     Mon 18 May 2026 09:09:37 +0000
Files and hashes:         1: VqcyG_yMPsLpkWD6MztPVMGClGo.crl (hash: zN1R5bTaaMXtw7Gti1qfMa3FIxIfcNnpDBYR3Yi4KFc=)
                          2: 955C204027D911F183CCD80FA7833773.roa (hash: tYXGyBLXGMJ9TEdThJmPAhWV7Kw3QjVCE7lJviid3as=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916537A/9F817BB6276A11F1A891B17FC2833773/VqcyG_yMPsLpkWD6MztPVMGClGo.crl
                          rsync://rpki.apnic.net/member_repository/A916537A/9F817BB6276A11F1A891B17FC2833773/VqcyG_yMPsLpkWD6MztPVMGClGo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqcyG_yMPsLpkWD6MztPVMGClGo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 09:09:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916537A, serialNumber=56A7321BFC8C3EC2E99160FA333B4F54C182946A
        Validity
            Not Before: May 11 09:09:37 2026 GMT
            Not After : May 18 09:09:37 2026 GMT
        Subject: CN=6a019cd1-2cce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5d:bb:7d:ce:af:bb:d6:18:73:e7:5a:21:0c:
                    ce:01:5e:6a:35:e5:53:a4:e8:28:2b:9a:88:68:a9:
                    94:57:18:b2:30:c5:43:c0:ad:bb:dd:c0:e4:22:a1:
                    9c:8e:ce:2e:40:31:a9:90:59:89:32:c8:16:f8:1f:
                    7e:9a:70:8d:89:68:15:1b:c2:ef:e0:29:91:e2:be:
                    b6:1e:ee:e2:91:e0:0d:89:e3:09:f0:82:37:88:3e:
                    7a:e8:a4:d7:99:43:07:2f:00:08:e6:32:bb:02:2c:
                    8c:42:4f:ea:e1:41:65:51:d2:96:c9:30:9a:17:23:
                    5a:dc:26:c1:fc:c4:21:e1:b4:41:85:24:77:12:fe:
                    6e:52:23:e4:e2:de:53:4b:4b:73:03:7b:98:be:bd:
                    7e:6e:07:ff:0a:33:70:95:fb:99:58:4a:c7:18:65:
                    98:bf:3e:88:ad:82:ac:78:70:9b:90:9d:79:78:63:
                    dc:fd:78:fd:57:b9:58:a0:29:39:ef:e5:5c:b6:28:
                    1a:8a:ca:47:3d:03:2d:67:62:be:10:5f:56:90:04:
                    57:51:c2:ab:4a:22:c9:7e:62:e5:99:86:79:3c:d0:
                    df:1d:48:f2:64:c9:dc:dd:3b:4d:0e:98:c4:6c:62:
                    d4:8d:fe:24:cb:55:c5:4c:31:db:95:18:bc:9a:65:
                    6a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:31:8C:85:01:66:E5:52:DB:6A:4A:FA:79:E5:71:10:9E:A5:B3:BD
            X509v3 Authority Key Identifier:
                keyid:56:A7:32:1B:FC:8C:3E:C2:E9:91:60:FA:33:3B:4F:54:C1:82:94:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916537A/9F817BB6276A11F1A891B17FC2833773/VqcyG_yMPsLpkWD6MztPVMGClGo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqcyG_yMPsLpkWD6MztPVMGClGo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916537A/9F817BB6276A11F1A891B17FC2833773/VqcyG_yMPsLpkWD6MztPVMGClGo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:a9:46:78:d7:fe:2a:bf:9b:2f:a2:58:6e:81:4a:6b:55:37:
         74:fb:42:88:2a:7d:c6:2c:42:fd:69:57:37:ed:e2:4a:fb:eb:
         ed:ed:fc:1e:01:f7:3b:c8:85:15:80:c7:52:24:a0:c9:20:f7:
         98:98:96:19:0e:c8:fc:b4:29:86:b2:17:e9:61:a2:72:9f:be:
         a4:2b:e0:88:32:d5:c7:6b:dc:98:ed:ae:a0:90:70:fa:bc:cb:
         1e:06:ab:dd:af:0d:da:6d:af:0e:08:e1:57:dc:71:fc:36:27:
         e8:73:41:70:0e:03:d6:5a:6d:48:56:bf:99:3d:6d:4c:20:b3:
         29:29:e1:90:3c:b7:a9:cf:fa:26:21:cd:a4:2e:ba:85:46:37:
         33:79:59:40:7e:95:3b:e2:39:ff:5d:60:11:56:75:bf:11:9f:
         8c:74:f7:f1:1d:f4:e1:88:72:f7:f6:10:63:10:dd:57:ec:79:
         d0:89:8d:46:ef:4c:9b:46:7a:dd:e5:b8:15:63:7d:b3:1c:eb:
         94:b1:37:30:e5:01:40:3e:73:ae:51:ff:fd:e5:fe:2f:02:b1:
         ed:5b:80:d1:73:8b:2c:9a:fb:bb:96:3d:01:70:13:a2:12:ac:
         55:72:6e:06:27:56:73:fc:81:47:a3:ea:18:04:24:a6:4a:20:
         b7:de:f1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:05:48 2026 by rpki-client