Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.mft
File:                     VIe2P0TWkdQ1aIr-PIrCe_2REq0.mft (raw, json)
Hash identifier:          NaDiBb6FJ48UqhicpCNAxBxzxKvgx514nvqp+Yk/NZc=
Subject key identifier:   16:55:B7:D8:2F:66:ED:8E:A5:7C:CF:88:AD:17:81:A9:55:E3:50:E7
Authority key identifier: 54:87:B6:3F:44:D6:91:D4:35:68:8A:FE:3C:8A:C2:7B:FD:91:12:AD
Certificate issuer:       /CN=A91790C3/serialNumber=5487B63F44D691D435688AFE3C8AC27BFD9112AD
Certificate serial:       073B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIe2P0TWkdQ1aIr-PIrCe_2REq0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.mft
Manifest number:          071C
Signing time:             Tue 12 May 2026 22:01:58 +0000
Manifest this update:     Tue 12 May 2026 22:01:58 +0000
Manifest next update:     Tue 19 May 2026 22:01:58 +0000
Files and hashes:         1: VIe2P0TWkdQ1aIr-PIrCe_2REq0.crl (hash: eY2mEZL7KCqcjuhCJteASOIXHAS0on32vQy+a1z4DoI=)
                          2: 9EA2D73236D311EF89295180C4F9AE02.roa (hash: vNb59XfrJrniQoC4B5nywtbnafzXLeklwV+6oTZ56io=)
                          3: C437B01282C211EBBB08B280C4F9AE02.roa (hash: DWJe+VPwf7/gcPVYIrTEmrOK6uHE1DkYNcfQ9m4uwpo=)
                          4: C310545082C211EBBB08B280C4F9AE02.roa (hash: ldkDMsgWV4Tqp6oKCpZ1ENe7g0XnfqtUgchqeKj56Tw=)
                          5: C3AD861C82C211EBBB08B280C4F9AE02.roa (hash: vazK+z30CpSr830kRcPsvjFKdfSriewkWyt+Vy/hHRc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.crl
                          rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIe2P0TWkdQ1aIr-PIrCe_2REq0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 22:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1851 (0x73b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91790C3, serialNumber=5487B63F44D691D435688AFE3C8AC27BFD9112AD
        Validity
            Not Before: May 12 22:01:58 2026 GMT
            Not After : May 19 22:01:58 2026 GMT
        Subject: CN=6a03a356-6494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:3f:69:db:b0:69:0d:55:94:38:7c:28:6e:14:
                    df:58:9a:52:75:e7:f3:98:52:97:2a:b9:d9:2a:d3:
                    15:3e:02:68:9e:33:fb:f7:2b:89:34:26:02:45:e9:
                    75:f8:85:c8:a7:2c:54:5c:e3:ab:47:60:72:29:eb:
                    6c:83:b5:49:c7:cf:6f:d6:16:65:2d:31:17:8c:d8:
                    98:9e:f5:e1:18:91:59:e3:fa:a0:e1:ee:27:ad:8e:
                    6c:ee:6b:4b:7b:1c:5b:65:97:a3:26:2e:ca:42:76:
                    b3:58:6d:cb:0e:6e:76:14:f6:37:bd:f3:72:d7:1a:
                    3c:d0:ed:6c:88:9e:a1:2a:bc:0d:70:fb:27:f0:e6:
                    6a:d0:fe:4a:b3:71:2c:4d:85:1d:ba:19:de:cc:58:
                    ad:eb:08:14:dd:79:d7:b7:09:35:69:58:4c:c7:c7:
                    6d:9a:fd:78:5a:8a:32:5c:68:cb:f1:09:fd:e3:18:
                    8e:44:75:6f:94:26:5b:38:29:a7:93:33:86:85:81:
                    44:82:60:6b:47:a9:2d:28:50:32:c3:15:a0:2b:aa:
                    98:c4:72:0a:f6:80:37:1b:dd:fa:8a:a3:b1:19:42:
                    a8:17:89:ff:04:8e:32:0c:99:2b:29:6b:3f:25:09:
                    b7:e1:1f:f6:36:28:3c:ac:c2:ab:b9:fc:d9:bf:50:
                    84:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:55:B7:D8:2F:66:ED:8E:A5:7C:CF:88:AD:17:81:A9:55:E3:50:E7
            X509v3 Authority Key Identifier:
                keyid:54:87:B6:3F:44:D6:91:D4:35:68:8A:FE:3C:8A:C2:7B:FD:91:12:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIe2P0TWkdQ1aIr-PIrCe_2REq0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:9d:dc:28:91:cf:1e:46:8f:91:1c:9e:14:c8:69:16:4a:09:
         ea:43:64:fe:7f:bf:95:22:89:9d:07:40:80:b8:29:57:76:f8:
         3e:43:10:39:34:71:37:88:16:12:ae:32:0e:b3:15:4c:dc:4c:
         0b:4b:fe:d9:19:d9:7f:f9:66:40:33:93:34:74:03:c4:8b:7d:
         17:ca:29:bc:52:b6:43:7b:42:1b:3d:c8:11:00:06:c1:8b:66:
         bf:8f:8f:d3:8e:dd:61:e7:90:47:cd:57:86:70:02:12:54:db:
         1e:3c:99:2d:ad:6b:54:d5:d4:38:73:57:a7:53:74:5d:1f:a1:
         22:80:80:c9:04:a0:f7:0e:a7:cf:78:82:d9:74:5c:b8:86:71:
         f3:52:94:9e:5f:bb:71:51:3f:cc:95:17:86:ff:8d:9d:b6:7d:
         00:fe:67:66:8a:ae:07:9a:0b:58:61:c5:4c:b6:fe:02:62:5a:
         47:26:38:a2:81:db:bc:29:aa:05:58:31:3e:4c:7e:24:4c:51:
         1c:b4:be:22:b2:92:3b:c6:32:47:84:ce:a7:39:93:f9:e5:17:
         9c:56:49:2e:65:00:8c:ad:77:8e:bc:fa:d6:fe:ea:19:51:07:
         25:f3:b8:5b:d7:36:44:52:a6:0a:2f:10:28:b3:5a:d3:eb:7c:
         2a:68:bf:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:57:24 2026 by rpki-client