Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165746/7C4024565F3511F1A3AE2F757E47A888/VVw2dp0ODDACycjXBRYwXZYTazg.mft
File:                     VVw2dp0ODDACycjXBRYwXZYTazg.mft (raw, json)
Hash identifier:          xHNBU5XuoqOFHF1Yvb38CquUB79e9L3Q2ysz3QPh1gE=
Subject key identifier:   13:F8:61:48:CB:2C:36:D5:13:E2:E3:80:4E:C4:28:CA:77:7B:B8:6B
Authority key identifier: 55:5C:36:76:9D:0E:0C:30:02:C9:C8:D7:05:16:30:5D:96:13:6B:38
Certificate issuer:       /CN=A9165746/serialNumber=555C36769D0E0C3002C9C8D70516305D96136B38
Certificate serial:       1B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVw2dp0ODDACycjXBRYwXZYTazg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165746/7C4024565F3511F1A3AE2F757E47A888/VVw2dp0ODDACycjXBRYwXZYTazg.mft
Manifest number:          1A
Signing time:             Thu 23 Jul 2026 11:01:49 +0000
Manifest this update:     Thu 23 Jul 2026 11:01:49 +0000
Manifest next update:     Thu 30 Jul 2026 11:01:49 +0000
Files and hashes:         1: VVw2dp0ODDACycjXBRYwXZYTazg.crl (hash: wpPAHzn7jcJjm2WxW2FlcWrq/qetR+s2YmYtrmw+OxI=)
                          2: 26B060C25F3611F1918BCC0A8047A888.roa (hash: 75R6dGO5HakR3AKLxJh4RDBgHy3ftrxyVx3QxqSSZSw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165746/7C4024565F3511F1A3AE2F757E47A888/VVw2dp0ODDACycjXBRYwXZYTazg.crl
                          rsync://rpki.apnic.net/member_repository/A9165746/7C4024565F3511F1A3AE2F757E47A888/VVw2dp0ODDACycjXBRYwXZYTazg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVw2dp0ODDACycjXBRYwXZYTazg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 11:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165746, serialNumber=555C36769D0E0C3002C9C8D70516305D96136B38
        Validity
            Not Before: Jul 23 11:01:49 2026 GMT
            Not After : Jul 30 11:01:49 2026 GMT
        Subject: CN=6a61f49d-8a3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:bf:9e:b0:d6:c7:f6:ba:0a:40:07:2e:51:ca:
                    02:6c:76:fc:e0:88:a4:e5:5c:1a:6a:8a:8b:74:62:
                    c9:7e:c9:d9:a7:43:f7:70:fb:f9:04:97:51:0e:7a:
                    b4:aa:7a:4b:b0:96:8b:0a:4a:d3:05:af:c4:e3:55:
                    b7:78:5d:ff:a5:49:7e:e1:f9:6f:09:e6:72:32:6f:
                    8d:03:5f:c6:88:58:d1:5a:0c:ca:99:f3:35:9a:c3:
                    8b:e8:18:fc:32:5c:3f:43:d8:c3:26:f0:91:d9:c5:
                    94:51:2e:1d:d7:a7:51:01:d1:31:02:8c:41:7c:2c:
                    f8:80:fd:80:23:b4:ca:8f:43:a4:48:15:13:4e:5b:
                    51:98:8b:f4:f9:62:6a:3c:80:7f:f0:18:72:a7:c4:
                    50:73:f2:f3:94:1a:65:fe:bf:ec:97:a1:6f:56:f1:
                    ce:97:fd:b7:83:ab:54:44:a3:4e:c3:5c:26:b9:43:
                    81:8a:51:3c:0a:75:60:75:80:70:86:27:46:ad:ee:
                    08:55:3e:2e:3d:f6:2c:57:aa:16:36:cf:e5:c0:5d:
                    42:09:2a:78:0f:fd:59:25:18:94:00:4a:07:16:b3:
                    58:7e:42:3d:96:3b:67:0b:a2:a2:e8:00:d7:ea:43:
                    81:aa:12:7b:e1:9c:42:1f:2c:da:2d:14:d0:42:90:
                    e5:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F8:61:48:CB:2C:36:D5:13:E2:E3:80:4E:C4:28:CA:77:7B:B8:6B
            X509v3 Authority Key Identifier:
                keyid:55:5C:36:76:9D:0E:0C:30:02:C9:C8:D7:05:16:30:5D:96:13:6B:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165746/7C4024565F3511F1A3AE2F757E47A888/VVw2dp0ODDACycjXBRYwXZYTazg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVw2dp0ODDACycjXBRYwXZYTazg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165746/7C4024565F3511F1A3AE2F757E47A888/VVw2dp0ODDACycjXBRYwXZYTazg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:8a:71:bf:b9:c2:15:64:59:9c:e7:fc:e0:23:11:43:61:a4:
         4a:bd:07:2e:7a:21:67:a3:42:88:4d:53:ab:b8:62:6a:56:7e:
         b2:a3:8b:0c:74:29:17:f7:c0:b3:a6:a9:8b:50:ce:c2:b7:cf:
         a9:b5:65:4a:fb:8f:76:03:81:80:c6:97:1a:d0:ff:6d:73:56:
         3f:e2:7b:d7:7b:24:9e:8c:10:91:15:ac:3a:8d:ad:94:4d:09:
         ac:c2:f0:f2:dc:86:ee:70:1f:96:1f:bf:2d:11:43:d0:6e:8b:
         74:a9:91:ca:0d:3c:88:a1:d9:b2:6a:2d:0a:49:ed:25:be:cb:
         84:f8:f1:29:26:a0:d9:e9:53:c4:81:f8:09:2a:78:33:40:ff:
         e0:89:bd:69:4c:75:6b:7d:44:2c:70:f5:86:74:33:3f:cf:da:
         3f:5b:8b:19:d3:9f:6e:c2:c0:9a:bb:1a:7f:c2:20:77:4c:0d:
         67:7a:b8:12:de:6b:a9:1c:bd:fe:d6:3c:56:ec:aa:9c:93:ac:
         2b:c1:bf:e6:5d:dc:24:0e:40:11:d4:13:ad:1a:5d:f8:44:b0:
         05:d3:a6:e7:d0:32:12:c3:0b:93:35:bf:d7:d7:f6:ed:95:ed:
         42:df:26:6c:01:d4:5e:a9:d2:2e:03:75:73:08:da:8e:77:1b:
         9f:1e:65:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:20:29 2026 by rpki-client