Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917FFCC/11C7637816D311F1BAA410C8303D8C67/vodPnmx2-8t4sU-3D0Eqh5cfzkg.mft
File:                     vodPnmx2-8t4sU-3D0Eqh5cfzkg.mft (raw, json)
Hash identifier:          EH9doB57/PaLAQV2IeEzWSeb6zz1k9g5+m0pAQ9Lo58=
Subject key identifier:   A6:4F:D8:80:C8:06:A4:54:21:2A:34:30:A1:7D:03:83:38:58:41:EB
Authority key identifier: BE:87:4F:9E:6C:76:FB:CB:78:B1:4F:B7:0F:41:2A:87:97:1F:CE:48
Certificate issuer:       /CN=A917FFCC/serialNumber=BE874F9E6C76FBCB78B14FB70F412A87971FCE48
Certificate serial:       26
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vodPnmx2-8t4sU-3D0Eqh5cfzkg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917FFCC/11C7637816D311F1BAA410C8303D8C67/vodPnmx2-8t4sU-3D0Eqh5cfzkg.mft
Manifest number:          26
Signing time:             Wed 13 May 2026 08:55:29 +0000
Manifest this update:     Wed 13 May 2026 08:55:29 +0000
Manifest next update:     Wed 20 May 2026 08:55:29 +0000
Files and hashes:         1: vodPnmx2-8t4sU-3D0Eqh5cfzkg.crl (hash: fzO0ZxgU5xO7KAUQiK0m6OMBuM7fwUZfrR+AMKc3/vc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917FFCC/11C7637816D311F1BAA410C8303D8C67/vodPnmx2-8t4sU-3D0Eqh5cfzkg.crl
                          rsync://rpki.apnic.net/member_repository/A917FFCC/11C7637816D311F1BAA410C8303D8C67/vodPnmx2-8t4sU-3D0Eqh5cfzkg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vodPnmx2-8t4sU-3D0Eqh5cfzkg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 08:55:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917FFCC, serialNumber=BE874F9E6C76FBCB78B14FB70F412A87971FCE48
        Validity
            Not Before: May 13 08:55:29 2026 GMT
            Not After : May 20 08:55:29 2026 GMT
        Subject: CN=6a043c81-93ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0b:bd:ba:6d:83:0c:6c:a1:f0:04:38:66:48:
                    8e:91:3b:02:94:98:1f:b8:8b:db:4e:5a:85:98:73:
                    08:ff:ae:b5:23:1a:83:0d:68:dc:63:fe:b3:67:44:
                    54:1d:79:02:aa:1a:d3:c4:ee:e7:52:5a:99:5c:fe:
                    80:29:4e:55:9f:19:44:df:85:f7:c4:b8:0a:c6:60:
                    df:75:ed:0a:61:80:42:52:c2:ac:bf:41:4c:77:3d:
                    32:1f:22:21:85:bc:6d:ab:2c:cb:1c:22:c9:da:4f:
                    f9:b7:d2:78:8b:5d:92:32:85:60:8d:69:47:a6:1c:
                    52:43:56:8f:f4:0a:b9:63:54:fe:7c:b6:d0:f6:4d:
                    69:4d:ca:0b:b4:7f:27:8c:a3:e7:0f:b7:d6:26:b0:
                    88:7a:7d:a3:6c:bd:6b:73:7b:be:a2:b9:9d:08:96:
                    28:f3:b2:77:77:8e:91:c4:50:cf:1b:43:87:49:ec:
                    4b:dd:ac:ee:e2:ee:a9:56:8f:ad:d2:f0:e4:df:72:
                    d7:d7:47:26:5b:1a:20:63:31:82:5e:e1:fb:c1:61:
                    2b:84:80:43:41:04:57:6d:47:91:3e:3b:60:72:5e:
                    e4:11:1b:6d:20:72:c0:b5:1c:01:40:b6:d4:1b:2b:
                    20:90:c8:c5:f3:5a:ed:9e:fd:be:68:da:c6:57:a4:
                    1e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:4F:D8:80:C8:06:A4:54:21:2A:34:30:A1:7D:03:83:38:58:41:EB
            X509v3 Authority Key Identifier:
                keyid:BE:87:4F:9E:6C:76:FB:CB:78:B1:4F:B7:0F:41:2A:87:97:1F:CE:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917FFCC/11C7637816D311F1BAA410C8303D8C67/vodPnmx2-8t4sU-3D0Eqh5cfzkg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vodPnmx2-8t4sU-3D0Eqh5cfzkg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FFCC/11C7637816D311F1BAA410C8303D8C67/vodPnmx2-8t4sU-3D0Eqh5cfzkg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:d2:47:3c:8b:07:25:82:73:16:03:66:8a:6b:7d:2c:4f:16:
         17:66:a0:ad:64:78:59:04:77:3d:49:eb:d5:a7:51:78:39:d2:
         0b:85:5f:24:c0:f6:ea:b2:84:c4:7a:84:22:d1:a0:b0:83:5c:
         c5:ff:b7:14:75:b8:5b:4d:2c:17:18:62:dd:15:e9:c3:89:1e:
         8a:cb:eb:94:48:5f:59:de:13:85:ba:3f:3f:64:e2:6b:4c:4d:
         91:05:69:b0:b6:5a:1c:05:ab:82:98:3a:8d:83:f2:32:2e:f2:
         e3:6f:60:e4:bd:be:1f:47:ab:aa:53:71:8e:b1:4c:41:b1:54:
         29:27:7f:4f:a2:bd:f2:2b:de:fc:8f:c3:0e:9c:7d:ea:0a:f2:
         9e:7f:0c:e6:4e:19:1c:ae:6a:d5:42:b9:6e:fe:22:1c:99:55:
         56:8e:2e:ff:bd:28:02:83:88:b1:c2:e1:01:99:00:6d:69:db:
         9e:90:00:b0:70:55:35:7d:26:7d:c0:95:98:bc:2a:ff:0b:82:
         38:5a:42:9f:1e:79:46:c7:1c:f7:8d:d8:84:6b:f6:c4:75:3d:
         0d:98:a6:2a:08:95:ed:2c:77:35:ec:06:34:21:d4:fa:a5:e6:
         83:79:2f:68:e2:cb:64:31:cf:ab:81:bb:60:79:88:fb:4c:09:
         ec:7b:b5:82
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
RkZDQzExMC8GA1UEBRMoQkU4NzRGOUU2Qzc2RkJDQjc4QjE0RkI3MEY0MTJBODc5
NzFGQ0U0ODAeFw0yNjA1MTMwODU1MjlaFw0yNjA1MjAwODU1MjlaMBgxFjAUBgNV
BAMTDTZhMDQzYzgxLTkzZWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCnC726bYMMbKHwBDhmSI6ROwKUmB+4i9tOWoWYcwj/rrUjGoMNaNxj/rNnRFQd
eQKqGtPE7udSWplc/oApTlWfGUTfhffEuArGYN917QphgEJSwqy/QUx3PTIfIiGF
vG2rLMscIsnaT/m30niLXZIyhWCNaUemHFJDVo/0CrljVP58ttD2TWlNygu0fyeM
o+cPt9YmsIh6faNsvWtze76iuZ0Ilijzsnd3jpHEUM8bQ4dJ7EvdrO7i7qlWj63S
8OTfctfXRyZbGiBjMYJe4fvBYSuEgENBBFdtR5E+O2ByXuQRG20gcsC1HAFAttQb
KyCQyMXzWu2e/b5o2sZXpB6jAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUpk/YgMgG
pFQhKjQwoX0DgzhYQeswHwYDVR0jBBgwFoAUvodPnmx2+8t4sU+3D0Eqh5cfzkgw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdGRkNDLzExQzc2Mzc4MTZE
MzExRjFCQUE0MTBDODMwM0Q4QzY3L3ZvZFBubXgyLTh0NHNVLTNEMEVxaDVjZnpr
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvdm9kUG5teDItOHQ0c1UtM0QwRXFoNWNmemtnLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdG
RkNDLzExQzc2Mzc4MTZEMzExRjFCQUE0MTBDODMwM0Q4QzY3L3ZvZFBubXgyLTh0
NHNVLTNEMEVxaDVjZnprZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCw0kc8iwclgnMWA2aKa30sTxYXZqCtZHhZBHc9SevVp1F4OdILhV8kwPbqsoTE
eoQi0aCwg1zF/7cUdbhbTSwXGGLdFenDiR6Ky+uUSF9Z3hOFuj8/ZOJrTE2RBWmw
tlocBauCmDqNg/IyLvLjb2Dkvb4fR6uqU3GOsUxBsVQpJ39Por3yK978j8MOnH3q
CvKefwzmThkcrmrVQrlu/iIcmVVWji7/vSgCg4ixwuEBmQBtaduekACwcFU1fSZ9
wJWYvCr/C4I4WkKfHnlGxxz3jdiEa/bEdT0NmKYqCJXtLHc17AY0IdT6peaDeS9o
4stkMc+rgbtgeYj7TAnse7WC
-----END CERTIFICATE-----
Generated at Wed May 13 15:48:44 2026 by rpki-client