Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165556/B145D02E017C11EFB864325AC4F9AE02/VKpPIROg0aG37lUSvq5TcextpCE.mft
File:                     VKpPIROg0aG37lUSvq5TcextpCE.mft (raw, json)
Hash identifier:          9NCI6M8DVxNFnf0Ql/xNGs6e2WkP8M0iMkd7CleEoRM=
Subject key identifier:   E3:EC:34:23:B7:DB:95:C5:DD:1B:8C:8C:FB:AF:42:2B:D9:DC:57:F4
Authority key identifier: 54:AA:4F:21:13:A0:D1:A1:B7:EE:55:12:BE:AE:53:71:EC:6D:A4:21
Certificate issuer:       /CN=A9165556/serialNumber=54AA4F2113A0D1A1B7EE5512BEAE5371EC6DA421
Certificate serial:       018D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VKpPIROg0aG37lUSvq5TcextpCE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165556/B145D02E017C11EFB864325AC4F9AE02/VKpPIROg0aG37lUSvq5TcextpCE.mft
Manifest number:          0187
Signing time:             Wed 13 May 2026 04:36:33 +0000
Manifest this update:     Wed 13 May 2026 04:36:33 +0000
Manifest next update:     Wed 20 May 2026 04:36:33 +0000
Files and hashes:         1: VKpPIROg0aG37lUSvq5TcextpCE.crl (hash: N6NL+NzfO/Lsaw1bINP/QvKdFMWlXgDyrMXcEI3dutQ=)
                          2: E135D94C04A511EF84B5D783C4F9AE02.roa (hash: R/+mpIF7D2Ei1AS7/k2esMe46P023CSHvwSxqyATt3o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165556/B145D02E017C11EFB864325AC4F9AE02/VKpPIROg0aG37lUSvq5TcextpCE.crl
                          rsync://rpki.apnic.net/member_repository/A9165556/B145D02E017C11EFB864325AC4F9AE02/VKpPIROg0aG37lUSvq5TcextpCE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VKpPIROg0aG37lUSvq5TcextpCE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 04:36:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 397 (0x18d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165556, serialNumber=54AA4F2113A0D1A1B7EE5512BEAE5371EC6DA421
        Validity
            Not Before: May 13 04:36:33 2026 GMT
            Not After : May 20 04:36:33 2026 GMT
        Subject: CN=6a03ffd1-7b4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cd:fb:8c:63:f3:4e:84:20:b5:03:80:ed:bb:
                    cc:b3:6c:ad:93:07:02:c2:4c:07:28:2e:66:1d:e2:
                    e6:e9:c5:7e:d0:d5:dd:fa:2b:76:c4:a2:0d:6d:5c:
                    24:d5:9c:e0:b5:70:2d:ab:5d:f0:c8:6b:69:e9:1a:
                    c7:18:9a:1c:22:07:f2:0e:22:4b:56:d2:7d:d2:f4:
                    5b:61:be:8e:84:c1:b7:c5:5e:8c:44:8f:34:77:79:
                    81:42:f3:e8:56:62:33:19:dd:d6:14:a4:7e:ac:56:
                    bd:b1:9f:72:2e:48:47:f3:78:d3:91:00:c9:8d:eb:
                    83:c5:24:1f:18:24:4d:33:d5:7c:de:25:95:9b:b9:
                    1c:61:39:c2:62:b3:cf:e8:01:59:0b:f8:f5:39:8b:
                    4f:93:d6:9e:15:6d:69:54:61:84:01:ec:b8:c9:db:
                    74:5c:df:8c:85:ee:02:28:39:e6:38:7b:ab:37:fb:
                    7c:c9:68:d8:bb:2a:70:43:0f:15:6f:2c:22:ed:c1:
                    a6:c8:cf:63:3c:16:29:7b:86:36:b7:0a:60:16:bd:
                    a0:58:c1:70:0c:ed:d8:aa:d5:c7:b0:67:8b:1f:40:
                    58:d0:65:cf:17:bf:da:14:dd:8b:14:86:85:cd:3b:
                    da:6f:9a:5c:a6:be:1e:87:1d:93:e5:2a:03:0d:17:
                    a7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:EC:34:23:B7:DB:95:C5:DD:1B:8C:8C:FB:AF:42:2B:D9:DC:57:F4
            X509v3 Authority Key Identifier:
                keyid:54:AA:4F:21:13:A0:D1:A1:B7:EE:55:12:BE:AE:53:71:EC:6D:A4:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165556/B145D02E017C11EFB864325AC4F9AE02/VKpPIROg0aG37lUSvq5TcextpCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VKpPIROg0aG37lUSvq5TcextpCE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165556/B145D02E017C11EFB864325AC4F9AE02/VKpPIROg0aG37lUSvq5TcextpCE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:5a:45:71:f0:18:0e:8c:7a:14:d1:ac:e9:e8:d2:e6:18:5e:
         f5:33:cf:36:79:e2:d9:f6:72:39:b5:c8:0e:5e:f6:39:91:48:
         14:ca:01:88:d4:53:cd:a2:d6:0d:31:81:8d:c1:db:1d:5e:c7:
         5e:cb:58:c3:37:44:f7:2e:ed:40:0a:4d:8f:0c:78:00:68:ac:
         da:0b:89:b0:dd:13:67:03:53:7d:cf:e9:a1:fd:4b:6d:64:24:
         a0:a3:27:76:eb:14:ac:14:17:94:dc:79:96:05:f7:48:17:6b:
         97:b0:ca:97:cd:fb:65:33:d8:76:c1:0f:74:6c:fa:db:39:51:
         9d:14:7d:1c:f0:62:78:91:38:a0:a0:61:c6:08:2b:5a:51:bb:
         2a:67:63:a5:aa:69:68:50:41:29:b6:5b:11:7c:2f:e6:b2:5a:
         3b:3f:d5:70:cf:89:c3:9c:ef:91:eb:0c:01:35:ce:7b:4a:b0:
         36:f0:44:9b:f5:d2:50:cd:02:b1:40:9e:f5:07:91:d1:5d:7b:
         51:50:91:0f:80:06:e5:a9:ad:0b:63:6a:37:7f:d5:fc:33:24:
         2d:87:a5:44:a7:eb:08:fb:a4:0a:cc:bb:b9:13:07:00:44:38:
         1f:f3:39:ca:ed:1d:bf:d2:72:9e:92:7a:0b:ed:3e:5e:13:4d:
         b4:4b:52:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:18:06 2026 by rpki-client