Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft
File:                     vxobyMAsIDYtD9n5K8AGoolejIA.mft (raw, json)
Hash identifier:          e7iovAtuK3qj+61PX4Z2rXld2P5OqAYqIxnxmptLjMY=
Subject key identifier:   3F:6F:61:07:BA:8F:EA:9A:28:81:FE:CA:1D:51:B6:63:CA:B3:8D:94
Authority key identifier: BF:1A:1B:C8:C0:2C:20:36:2D:0F:D9:F9:2B:C0:06:A2:89:5E:8C:80
Certificate issuer:       /CN=A91A423B/serialNumber=BF1A1BC8C02C20362D0FD9F92BC006A2895E8C80
Certificate serial:       0879
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft
Manifest number:          0871
Signing time:             Wed 22 Jul 2026 21:17:09 +0000
Manifest this update:     Wed 22 Jul 2026 21:17:08 +0000
Manifest next update:     Wed 29 Jul 2026 21:17:08 +0000
Files and hashes:         1: vxobyMAsIDYtD9n5K8AGoolejIA.crl (hash: bgrjS2hPBn91l5IDlZYL7ebdEvVgKtg9kEKishOKm60=)
                          2: ABD5003E079C11EBA7C04832C4F9AE02.roa (hash: 778EGlGgVJG4KhFCrh96xdUIIB8BVjBB6yGmPip2Cyc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.crl
                          rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:17:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2169 (0x879)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A423B, serialNumber=BF1A1BC8C02C20362D0FD9F92BC006A2895E8C80
        Validity
            Not Before: Jul 22 21:17:08 2026 GMT
            Not After : Jul 29 21:17:08 2026 GMT
        Subject: CN=6a613354-b7d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6e:cc:77:01:58:bd:e5:05:cb:1f:da:9d:47:
                    c1:5c:45:47:01:c8:70:4a:97:58:dd:26:ea:ce:93:
                    53:fb:42:05:76:61:c2:4d:68:cd:f9:1e:76:03:c1:
                    6f:8e:eb:55:4e:23:e9:3e:28:af:bf:75:99:85:6d:
                    d0:0e:27:b8:b9:30:17:de:b5:2b:f9:03:b9:5a:94:
                    ca:d0:5c:fe:a2:ac:64:2b:d0:3c:32:60:4b:4c:81:
                    9a:50:1e:a2:4e:ac:40:56:9e:f3:a8:38:de:4e:7f:
                    f5:0b:18:2f:b7:b5:7b:ef:5a:27:24:42:82:73:e6:
                    cd:2c:c7:28:4a:df:55:06:cd:7d:52:44:cf:55:8b:
                    b0:fa:ce:b0:26:29:ff:7c:49:2c:ee:96:0f:a5:55:
                    8c:e5:cf:51:70:c9:65:70:48:d3:ac:79:b9:78:ea:
                    aa:25:b5:fc:89:44:23:a4:dc:3b:21:d4:c6:10:8c:
                    03:b4:e7:53:5d:58:1a:e9:4d:97:01:fb:48:ec:e9:
                    4f:5d:e0:60:1d:95:ea:13:2d:ad:ea:fc:3a:59:e1:
                    62:ba:b9:de:6e:16:6f:1b:be:c7:df:40:fe:6a:78:
                    fa:f3:b7:3d:dc:99:4f:5f:19:33:19:16:e6:90:4e:
                    f9:17:87:d6:ea:6f:ce:01:e6:8f:02:b2:5e:80:d5:
                    14:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:6F:61:07:BA:8F:EA:9A:28:81:FE:CA:1D:51:B6:63:CA:B3:8D:94
            X509v3 Authority Key Identifier:
                keyid:BF:1A:1B:C8:C0:2C:20:36:2D:0F:D9:F9:2B:C0:06:A2:89:5E:8C:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:27:72:48:35:b0:5b:30:45:f0:2c:ee:c5:dc:ee:f3:f2:d8:
         b7:75:c6:ab:05:77:33:59:00:7b:2c:65:49:77:1d:73:5d:19:
         5b:48:ab:43:06:d4:bf:4f:e7:15:eb:df:37:6c:34:fd:04:75:
         6b:af:bb:42:2e:7b:2a:ec:ec:f8:10:eb:f2:10:38:ec:31:d4:
         58:53:5e:ea:7f:51:50:ec:6b:fb:80:89:ab:00:e5:f1:b0:a3:
         95:a9:6b:6c:3c:28:e4:68:41:9c:40:24:24:bb:d7:d8:3f:8c:
         1e:57:d0:0a:8f:a4:2c:f1:b4:53:55:a6:19:54:58:b6:54:24:
         34:c1:1a:60:d2:a6:55:50:77:cc:d0:4a:b7:3e:63:c2:62:2a:
         fe:32:61:8f:65:21:b0:bc:74:52:b2:43:92:84:c8:37:8c:67:
         a8:82:4b:3f:f9:b9:d0:e5:d8:e5:98:54:33:e5:7e:01:67:56:
         c7:c0:d9:b3:31:87:56:8b:fa:16:95:9a:70:df:4e:07:ff:87:
         3d:95:2a:df:28:b2:c4:c3:a2:97:a1:63:cb:5b:21:44:05:fb:
         ef:91:c2:19:87:96:d0:e1:fd:d6:ee:25:63:e5:2a:93:f4:cc:
         93:d1:f3:ce:ab:33:3d:46:49:23:a2:08:68:d9:ad:3c:f9:96:
         ab:4c:d0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:56:08 2026 by rpki-client