Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft
File:                     VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft (raw, json)
Hash identifier:          pr+2vRLwGjbeAvzDrsgbFEW0337TCt7/UASXU3fhv/k=
Subject key identifier:   B1:F4:3A:7F:8C:60:A5:D2:91:37:17:54:12:D9:77:F0:FB:5D:15:15
Authority key identifier: 54:58:3C:29:BB:FB:50:09:DB:9C:C0:56:14:F6:3D:62:BC:B7:7C:39
Certificate issuer:       /CN=A9195AA2/serialNumber=54583C29BBFB5009DB9CC05614F63D62BCB77C39
Certificate serial:       0CED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft
Manifest number:          1576
Signing time:             Tue 12 May 2026 18:19:22 +0000
Manifest this update:     Tue 12 May 2026 18:19:21 +0000
Manifest next update:     Tue 19 May 2026 18:19:21 +0000
Files and hashes:         1: VFg8Kbv7UAnbnMBWFPY9Yry3fDk.crl (hash: PzbsQfITfuygIgctHFCFxsQHMmMg6Kiu6nCKfMj5noI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.crl
                          rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 18:19:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3309 (0xced)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9195AA2, serialNumber=54583C29BBFB5009DB9CC05614F63D62BCB77C39
        Validity
            Not Before: May 12 18:19:21 2026 GMT
            Not After : May 19 18:19:21 2026 GMT
        Subject: CN=6a036f2a-abef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:de:d8:2a:5e:17:9f:47:94:d6:6c:f3:6e:5b:
                    f4:aa:29:8b:68:10:8d:10:19:4a:36:bd:0d:45:71:
                    43:94:9f:89:da:ed:32:b2:0d:4b:96:d4:c4:ad:de:
                    5d:2b:ac:bc:a2:8a:10:6d:5a:4f:ff:fb:14:d8:7a:
                    3a:af:c6:c8:b0:63:25:31:b7:d7:66:a3:9d:f1:9f:
                    d8:20:bc:66:6b:8a:e8:44:96:89:b4:f8:00:8d:a0:
                    9c:7e:63:74:fb:dd:68:22:8f:89:10:b5:40:c6:64:
                    c8:ab:e1:22:01:bf:de:a7:42:ac:d9:18:19:5a:04:
                    03:c7:e3:b9:93:33:42:af:62:59:3a:f7:38:00:c9:
                    82:26:c4:d6:02:f4:36:4a:8e:b6:15:ea:7d:80:b4:
                    62:dd:82:81:4d:ca:b1:19:3c:36:93:9c:e9:2d:68:
                    aa:bf:bd:f8:f5:e1:64:f7:b3:ec:db:6c:7a:04:bf:
                    27:87:f4:d4:b8:17:32:4d:04:b8:47:e5:d6:49:57:
                    93:2a:df:6f:91:57:16:48:01:1f:a5:4a:b8:6e:98:
                    02:b4:df:07:a2:53:d9:18:a3:70:bf:e0:f1:aa:d6:
                    67:c2:d3:d6:d9:0d:f4:20:16:3b:f2:66:69:66:1f:
                    2f:c0:68:2f:de:44:fc:49:df:77:59:75:56:0b:ba:
                    13:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F4:3A:7F:8C:60:A5:D2:91:37:17:54:12:D9:77:F0:FB:5D:15:15
            X509v3 Authority Key Identifier:
                keyid:54:58:3C:29:BB:FB:50:09:DB:9C:C0:56:14:F6:3D:62:BC:B7:7C:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:67:a5:73:3f:fb:a0:39:75:59:39:19:60:5d:05:54:89:98:
         72:a9:bb:11:f7:83:d5:f7:27:66:be:db:d8:fc:be:fb:d8:81:
         8b:5b:cc:fe:b2:79:2c:02:a2:4b:a8:7e:a8:e5:bd:02:2c:1d:
         a5:83:3e:85:fe:0e:8e:68:e8:c5:8a:ae:36:ab:27:e9:bc:67:
         4b:91:55:df:65:f6:f1:f9:82:80:34:2e:fe:6d:0c:33:53:31:
         6a:02:56:92:83:64:bf:3e:c1:98:59:19:f9:f6:33:75:8d:fc:
         5d:6c:91:99:2d:4d:8b:4e:c7:9a:a3:f9:0a:5d:20:0a:48:03:
         94:a9:92:c6:dd:4a:c6:c8:a7:71:97:ef:07:50:bc:e7:1d:51:
         3b:4f:42:0f:d8:5e:f2:d7:86:ff:b6:44:86:b8:25:21:02:ab:
         7c:1b:49:e9:d8:55:3d:da:1a:19:54:44:0a:bf:b1:d8:bb:b7:
         3c:c7:45:a7:5e:2b:65:ba:06:70:1e:52:ba:cf:1b:87:20:2d:
         95:54:4e:a3:ae:cd:c8:61:f6:59:07:97:cc:ff:fb:98:5f:53:
         f9:41:5b:3f:70:81:c9:7e:e9:c5:c9:1b:f8:65:55:ba:b8:20:
         a9:d6:4e:21:ea:ab:83:09:65:d2:6e:d5:fe:f6:be:2a:5a:e5:
         22:fd:19:ab
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTVBQTIxMTAvBgNVBAUTKDU0NTgzQzI5QkJGQjUwMDlEQjlDQzA1NjE0RjYzRDYy
QkNCNzdDMzkwHhcNMjYwNTEyMTgxOTIxWhcNMjYwNTE5MTgxOTIxWjAYMRYwFAYD
VQQDEw02YTAzNmYyYS1hYmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA197YKl4Xn0eU1mzzblv0qimLaBCNEBlKNr0NRXFDlJ+J2u0ysg1LltTErd5d
K6y8oooQbVpP//sU2Ho6r8bIsGMlMbfXZqOd8Z/YILxma4roRJaJtPgAjaCcfmN0
+91oIo+JELVAxmTIq+EiAb/ep0Ks2RgZWgQDx+O5kzNCr2JZOvc4AMmCJsTWAvQ2
So62Fep9gLRi3YKBTcqxGTw2k5zpLWiqv7349eFk97Ps22x6BL8nh/TUuBcyTQS4
R+XWSVeTKt9vkVcWSAEfpUq4bpgCtN8HolPZGKNwv+DxqtZnwtPW2Q30IBY78mZp
Zh8vwGgv3kT8Sd93WXVWC7oTMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLH0On+M
YKXSkTcXVBLZd/D7XRUVMB8GA1UdIwQYMBaAFFRYPCm7+1AJ25zAVhT2PWK8t3w5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUFBMi8xRkUzNTdENDA2
QzUxMUVBODg4RUQ5MTlDNEY5QUUwMi9WRmc4S2J2N1VBbmJuTUJXRlBZOVlyeTNm
RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZGZzhLYnY3VUFuYm5NQldGUFk5WXJ5M2ZEay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NUFBMi8xRkUzNTdENDA2QzUxMUVBODg4RUQ5MTlDNEY5QUUwMi9WRmc4S2J2N1VB
bmJuTUJXRlBZOVlyeTNmRGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApmelcz/7oDl1WTkZYF0FVImYcqm7EfeD1fcnZr7b2Py++9iBi1vM/rJ5LAKi
S6h+qOW9AiwdpYM+hf4OjmjoxYquNqsn6bxnS5FV32X28fmCgDQu/m0MM1MxagJW
koNkvz7BmFkZ+fYzdY38XWyRmS1Ni07HmqP5Cl0gCkgDlKmSxt1KxsincZfvB1C8
5x1RO09CD9he8teG/7ZEhrglIQKrfBtJ6dhVPdoaGVRECr+x2Lu3PMdFp14rZboG
cB5Sus8bhyAtlVROo67NyGH2WQeXzP/7mF9T+UFbP3CByX7pxckb+GVVurggqdZO
Ieqrgwll0m7V/va+KlrlIv0Zqw==
-----END CERTIFICATE-----
Generated at Wed May 13 01:03:20 2026 by rpki-client