Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft
File:                     vbWSaolrtlGg51QKOYzV7wcUFx8.mft (raw, json)
Hash identifier:          YGQfmvUQ2CqE9h/GUMIb7TwzNF7T8Z7PH+6CIXSTBds=
Subject key identifier:   E6:F1:B5:8B:D3:80:8F:BF:DC:0F:3C:D2:86:07:8C:EB:16:66:97:8C
Authority key identifier: BD:B5:92:6A:89:6B:B6:51:A0:E7:54:0A:39:8C:D5:EF:07:14:17:1F
Certificate issuer:       /CN=A916A5CD/serialNumber=BDB5926A896BB651A0E7540A398CD5EF0714171F
Certificate serial:       052A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft
Manifest number:          0517
Signing time:             Tue 22 Sep 2026 23:16:34 +0000
Manifest this update:     Tue 22 Sep 2026 23:16:33 +0000
Manifest next update:     Tue 29 Sep 2026 23:16:33 +0000
Files and hashes:         1: vbWSaolrtlGg51QKOYzV7wcUFx8.crl (hash: cYl3s/t1EeGtnC4yrtDVpebvQ+GCpqVe/2xpHqTuIBg=)
                          2: 66864FCE688011ECAA829E31C4F9AE02.roa (hash: oTwsosYR7qPA588mHLZ56TR8yUV0D8Vyzewy1czbsfc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.crl
                          rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 23:16:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1322 (0x52a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A5CD, serialNumber=BDB5926A896BB651A0E7540A398CD5EF0714171F
        Validity
            Not Before: Sep 22 23:16:33 2026 GMT
            Not After : Sep 29 23:16:33 2026 GMT
        Subject: CN=6ab30c51-4da6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f0:f9:a6:96:de:44:83:cb:ff:4d:89:d1:9f:
                    1d:5b:da:a2:76:ac:8b:e3:4d:a0:1a:d4:c7:d7:fd:
                    05:10:84:e6:21:89:72:48:53:e0:bf:d8:8a:9a:ab:
                    86:26:a3:5e:d8:69:7f:bb:29:fd:5b:7e:7c:55:3d:
                    b0:92:82:b3:5e:23:2b:6c:07:d2:66:68:c5:0d:5f:
                    c3:a7:5b:45:85:a9:94:20:36:b4:4d:84:27:1f:e6:
                    69:2a:b5:06:3a:1b:16:c3:1f:58:6b:29:db:3d:36:
                    6c:43:92:05:3c:71:0f:5a:aa:85:d3:7f:4c:45:12:
                    5e:2a:3a:55:13:b3:8e:52:df:c8:5c:98:ce:d0:13:
                    62:58:40:88:53:79:d7:36:a2:41:bd:db:24:73:f6:
                    15:06:b2:06:d3:c1:db:6a:04:6e:bb:52:56:be:d1:
                    dd:ca:47:c6:d6:36:1b:5b:38:73:fa:fc:ec:48:92:
                    8b:c6:e0:ce:49:c7:89:06:df:13:d6:ac:f2:4d:17:
                    e2:ad:98:33:18:85:cd:ea:88:27:59:6c:e1:53:30:
                    55:95:a6:cb:dd:1b:cc:ae:d9:6d:e5:63:31:fc:5a:
                    c6:cf:8f:6c:21:34:a9:10:a7:88:5e:1f:42:d8:f1:
                    e3:8c:c4:0b:ba:65:65:39:c4:fc:65:c5:d4:86:08:
                    86:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:F1:B5:8B:D3:80:8F:BF:DC:0F:3C:D2:86:07:8C:EB:16:66:97:8C
            X509v3 Authority Key Identifier:
                keyid:BD:B5:92:6A:89:6B:B6:51:A0:E7:54:0A:39:8C:D5:EF:07:14:17:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:03:a7:59:58:37:38:bc:8e:0c:83:bb:b2:66:f7:dd:3f:4f:
         5a:7e:98:86:7f:34:8c:1b:40:7a:9c:bf:10:85:80:a4:1c:28:
         2b:08:02:01:a1:fd:76:fd:94:67:8f:9d:59:7d:d0:f4:35:3f:
         49:5c:de:e0:40:4b:da:8b:76:57:63:19:87:8a:f6:20:0f:29:
         2b:c6:67:8a:64:0c:36:1f:71:85:b9:de:a6:97:46:04:c1:ce:
         2d:51:98:37:62:95:6d:0e:49:73:12:07:d6:7d:4a:37:20:86:
         74:c6:d7:b1:02:4a:a4:c3:22:b8:24:9d:73:a2:f9:63:0e:ed:
         6a:29:24:75:ec:15:28:d2:d9:51:d0:4b:e0:d4:b2:97:2e:db:
         6f:2b:95:7e:06:4d:df:62:1a:f5:1b:33:41:56:85:f7:59:07:
         f1:82:3f:10:5f:6d:92:a3:74:b1:c4:f7:3c:98:82:09:15:27:
         e7:07:45:dc:94:88:6f:e7:46:d7:a4:42:c9:13:ec:a3:c9:f4:
         ab:d6:c1:89:3a:ee:c1:e0:59:b7:90:e2:5c:d6:94:02:67:52:
         9b:ee:a7:31:3f:ab:74:5d:66:15:db:19:33:c3:2d:e9:26:d6:
         75:fa:11:c6:87:a1:75:84:21:78:48:6e:cf:e4:ed:71:7d:f2:
         35:82:15:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:34:52 2026 by rpki-client