Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft
File:                     vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft (raw, json)
Hash identifier:          Citi0J+mFgee2pMy7EkbJtlV5bjZRhoZOViWLvyQ+bk=
Subject key identifier:   C5:DB:E3:65:2C:79:83:C7:C2:C3:FC:3C:49:5D:87:61:6D:BE:85:2F
Authority key identifier: BE:63:41:A7:CC:0C:A0:F6:C1:A1:5E:04:66:EC:71:55:B8:28:3C:9D
Certificate issuer:       /CN=A91862F9/serialNumber=BE6341A7CC0CA0F6C1A15E0466EC7155B8283C9D
Certificate serial:       0241
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft
Manifest number:          0230
Signing time:             Thu 23 Jul 2026 03:57:33 +0000
Manifest this update:     Thu 23 Jul 2026 03:57:32 +0000
Manifest next update:     Thu 30 Jul 2026 03:57:32 +0000
Files and hashes:         1: vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl (hash: LOSeRhJ5F1bGqZQMQGt0KbihRcINxphxqWHQJw7PsxU=)
                          2: EF15AC2A9EB611F09A08B07EC4F9AE02.roa (hash: 85UD2/db2JNfOGlb39R7ySUL/Ipyzf/y8vjlGn3oMtE=)
                          3: 46E49D1CE79811EEA89C5E56C4F9AE02.roa (hash: ZP+Fsk2FtcDycpwS+m0D9syGyr7ezG1ogPe4OjBVvG4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl
                          rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 03:57:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 577 (0x241)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862F9, serialNumber=BE6341A7CC0CA0F6C1A15E0466EC7155B8283C9D
        Validity
            Not Before: Jul 23 03:57:32 2026 GMT
            Not After : Jul 30 03:57:32 2026 GMT
        Subject: CN=6a61912d-4af5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:72:ab:0d:bd:c6:68:63:55:44:fd:83:4a:4f:
                    e9:4c:66:af:41:1f:f9:51:7e:53:ca:40:9f:68:af:
                    bf:b4:a0:bc:da:38:69:c1:8a:7d:0c:8b:08:ef:6b:
                    3b:2b:fa:b1:8c:28:4b:1f:23:4a:9e:c9:ef:04:80:
                    77:f0:47:91:3a:05:ac:53:9b:2d:5c:df:4d:bf:ab:
                    1b:dc:93:90:01:1b:f5:a5:24:78:6c:7f:ae:55:39:
                    99:1f:15:51:6c:c5:ce:49:6e:f9:f4:1a:44:5a:0d:
                    e7:e5:c6:51:c9:88:14:70:e4:a4:39:fd:59:4e:7c:
                    17:b5:3a:ad:83:c8:a8:4b:20:ee:63:ae:1e:16:cc:
                    43:6b:24:97:a7:f4:8a:3d:78:1b:02:89:d7:b8:fd:
                    6c:a8:11:4b:74:96:f1:ca:80:f1:8f:21:42:64:8b:
                    d2:99:9a:0a:b9:f3:de:49:f2:b9:e3:6e:04:e9:7d:
                    b6:52:54:c0:72:05:6b:36:15:24:23:99:81:d4:a3:
                    b8:87:54:eb:d8:53:cf:6f:dd:e4:2a:ae:70:28:a6:
                    5b:39:63:9f:67:40:a7:77:2a:01:4b:c6:e3:74:de:
                    53:be:e0:16:89:e2:c9:97:e0:5c:9c:dd:67:49:7b:
                    7c:3e:4c:e5:fc:49:90:5b:21:3c:58:c3:76:6e:2f:
                    0e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:DB:E3:65:2C:79:83:C7:C2:C3:FC:3C:49:5D:87:61:6D:BE:85:2F
            X509v3 Authority Key Identifier:
                keyid:BE:63:41:A7:CC:0C:A0:F6:C1:A1:5E:04:66:EC:71:55:B8:28:3C:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:bb:37:4f:f2:7a:0a:cd:5e:4e:52:6c:51:b6:d9:bc:6a:8a:
         dd:0a:3f:1b:fd:76:d5:73:59:98:79:e1:8d:76:11:e8:0d:ed:
         14:b5:cc:8b:ea:eb:db:3e:ca:8b:c3:77:14:b1:2d:2d:2e:9f:
         98:a0:fd:57:b6:3c:29:11:62:eb:65:5e:4c:96:5f:a9:f0:b1:
         42:2a:11:87:6f:15:69:fc:f5:98:ce:8c:01:8a:94:5f:1b:e1:
         26:f4:b5:2a:3a:e6:27:4a:97:d7:81:78:e5:d0:7b:c5:63:a0:
         ae:cd:36:af:97:9f:a5:81:5a:ba:90:16:24:74:08:7e:6a:15:
         4e:71:a7:cd:2a:4d:33:8c:6b:67:36:89:b1:e8:58:ca:ac:8f:
         05:71:31:76:df:cb:24:9a:9d:05:7f:28:f8:a7:6a:30:89:89:
         8d:1c:7f:76:d7:b9:d9:d8:05:e7:19:71:05:82:db:e7:ca:e7:
         d0:5f:d5:d6:ea:ec:dd:12:89:44:df:51:9d:f3:8d:33:51:bd:
         3d:90:7d:d7:75:a6:21:44:95:b6:64:3d:dd:1f:b0:4e:19:23:
         4c:20:5a:5a:8c:86:35:25:33:f2:65:50:89:df:6a:40:8b:85:
         c2:03:fb:db:98:0b:f3:df:83:b5:9a:8f:19:29:84:2c:ff:84:
         c7:fa:f1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:03:17 2026 by rpki-client