Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft
File:                     VktpF48mnvuWt2kW94FwdU6PDIc.mft (raw, json)
Hash identifier:          2K/29oKo8P+/M/epfqvBAcAwGCFsuKrTrpWlPF3Ewjw=
Subject key identifier:   D0:F2:15:BD:B8:7A:2E:09:A4:24:03:C3:88:39:59:5A:03:A6:27:DB
Authority key identifier: 56:4B:69:17:8F:26:9E:FB:96:B7:69:16:F7:81:70:75:4E:8F:0C:87
Certificate issuer:       /CN=A91A99C5/serialNumber=564B69178F269EFB96B76916F78170754E8F0C87
Certificate serial:       AA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VktpF48mnvuWt2kW94FwdU6PDIc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft
Manifest number:          A1
Signing time:             Mon 11 May 2026 07:28:40 +0000
Manifest this update:     Mon 11 May 2026 07:28:40 +0000
Manifest next update:     Mon 18 May 2026 07:28:40 +0000
Files and hashes:         1: VktpF48mnvuWt2kW94FwdU6PDIc.crl (hash: z58B9fBXkOspetGEC+cKnZtvvAv3NLC+zB/ypFtHUDY=)
                          2: AE31872C5DBD11F083DD7F61C4F9AE02.roa (hash: PtmJapetaAUxJ5KEUkr9vfhR8x3TFcjZY4x2L67+TqA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.crl
                          rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VktpF48mnvuWt2kW94FwdU6PDIc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 07:28:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 170 (0xaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A99C5, serialNumber=564B69178F269EFB96B76916F78170754E8F0C87
        Validity
            Not Before: May 11 07:28:40 2026 GMT
            Not After : May 18 07:28:40 2026 GMT
        Subject: CN=6a018528-c367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:96:b6:c8:5f:f3:57:85:98:a4:52:26:9a:a5:
                    a9:31:05:f4:c4:84:1e:77:18:2d:2c:23:de:0c:8d:
                    de:75:e5:82:28:35:b1:e1:28:03:d8:3f:a0:8e:fd:
                    18:1e:54:3b:25:31:d8:2b:12:dd:9f:3b:3e:9b:7d:
                    b6:2d:10:18:fd:e2:48:3e:79:4d:77:e1:c4:04:b3:
                    eb:01:40:1e:bd:ec:b9:ba:ef:4f:d0:db:f9:0e:c3:
                    7d:92:9c:cf:9e:6d:15:e6:3f:06:31:43:bb:b3:0b:
                    71:03:c5:85:d4:6e:9b:28:d7:2b:15:e9:e4:12:ea:
                    1a:27:3d:8b:a3:23:a2:40:a5:b5:49:2d:20:d8:ea:
                    14:20:1f:5d:7d:92:b9:fb:72:48:00:0e:7f:b5:54:
                    56:ce:3f:c7:91:87:08:5e:42:5b:b3:da:c7:2a:e7:
                    a0:c7:82:57:63:55:06:c5:90:88:42:5b:10:60:71:
                    25:8e:1d:4c:31:2c:b9:8b:82:c6:61:fc:cb:1f:87:
                    00:32:23:b4:19:3d:35:a9:c1:d8:64:55:40:c9:6a:
                    70:a2:e4:40:75:d3:99:f4:d6:b9:51:4f:6b:80:a1:
                    68:bb:e8:3f:38:f8:0d:61:c7:f1:7a:5a:30:0b:08:
                    7f:ec:b4:03:b6:ff:68:2c:e2:1f:83:8c:7b:15:27:
                    c0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:F2:15:BD:B8:7A:2E:09:A4:24:03:C3:88:39:59:5A:03:A6:27:DB
            X509v3 Authority Key Identifier:
                keyid:56:4B:69:17:8F:26:9E:FB:96:B7:69:16:F7:81:70:75:4E:8F:0C:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VktpF48mnvuWt2kW94FwdU6PDIc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:38:86:9d:c3:e0:73:7c:14:db:a4:9a:2e:c4:83:f1:f5:90:
         db:a0:78:50:50:43:a5:98:f0:7b:20:e5:a3:f5:0e:70:0e:dd:
         67:30:2d:af:15:78:fd:f2:07:ce:83:21:ed:87:45:5d:51:b9:
         04:7e:9b:df:c9:1b:0d:23:db:49:7a:ab:85:0c:30:42:ff:c6:
         7c:0c:dc:66:fd:c0:4e:b2:86:22:4e:6e:2e:6e:03:1f:cc:30:
         ce:1e:a8:ab:56:b5:4f:53:30:df:78:69:57:ae:b1:6b:a4:e4:
         16:7b:c8:bb:ad:26:6b:27:fc:73:9c:dc:9f:6a:82:66:d6:0e:
         ea:89:a0:46:a8:b1:45:9d:50:97:23:6c:59:3b:88:cc:66:4f:
         07:0a:73:46:06:b1:a1:76:df:64:0c:64:64:ee:d3:47:d1:a6:
         23:b2:df:1b:15:7a:e3:3c:4d:0a:b6:ee:46:9f:eb:8a:06:de:
         15:5f:df:78:8e:bc:f0:0a:84:90:57:b3:d8:d7:46:6d:b5:f0:
         08:74:e5:93:93:69:cc:05:81:93:d7:12:88:4b:f6:90:39:fc:
         58:56:7a:1e:27:86:fd:8f:f2:50:75:ed:6e:d7:c3:95:7a:86:
         81:b9:6e:23:8f:5c:f6:f7:6b:86:ec:4e:d9:8d:21:2e:6d:e3:
         04:f8:70:3e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTk5QzUxMTAvBgNVBAUTKDU2NEI2OTE3OEYyNjlFRkI5NkI3NjkxNkY3ODE3MDc1
NEU4RjBDODcwHhcNMjYwNTExMDcyODQwWhcNMjYwNTE4MDcyODQwWjAYMRYwFAYD
VQQDEw02YTAxODUyOC1jMzY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkZa2yF/zV4WYpFImmqWpMQX0xIQedxgtLCPeDI3edeWCKDWx4SgD2D+gjv0Y
HlQ7JTHYKxLdnzs+m322LRAY/eJIPnlNd+HEBLPrAUAevey5uu9P0Nv5DsN9kpzP
nm0V5j8GMUO7swtxA8WF1G6bKNcrFenkEuoaJz2LoyOiQKW1SS0g2OoUIB9dfZK5
+3JIAA5/tVRWzj/HkYcIXkJbs9rHKuegx4JXY1UGxZCIQlsQYHEljh1MMSy5i4LG
YfzLH4cAMiO0GT01qcHYZFVAyWpwouRAddOZ9Na5UU9rgKFou+g/OPgNYcfxelow
Cwh/7LQDtv9oLOIfg4x7FSfAwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNDyFb24
ei4JpCQDw4g5WVoDpifbMB8GA1UdIwQYMBaAFFZLaRePJp77lrdpFveBcHVOjwyH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTlDNS9GQzAxRTg3QzVE
QkIxMUYwOUFBMTc4NTBDNEY5QUUwMi9Wa3RwRjQ4bW52dVd0MmtXOTRGd2RVNlBE
SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1ZrdHBGNDhtbnZ1V3Qya1c5NEZ3ZFU2UERJYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OTlDNS9GQzAxRTg3QzVEQkIxMUYwOUFBMTc4NTBDNEY5QUUwMi9Wa3RwRjQ4bW52
dVd0MmtXOTRGd2RVNlBESWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVTiGncPgc3wU26SaLsSD8fWQ26B4UFBDpZjweyDlo/UOcA7dZzAtrxV4/fIH
zoMh7YdFXVG5BH6b38kbDSPbSXqrhQwwQv/GfAzcZv3ATrKGIk5uLm4DH8wwzh6o
q1a1T1Mw33hpV66xa6TkFnvIu60mayf8c5zcn2qCZtYO6omgRqixRZ1QlyNsWTuI
zGZPBwpzRgaxoXbfZAxkZO7TR9GmI7LfGxV64zxNCrbuRp/rigbeFV/feI688AqE
kFez2NdGbbXwCHTlk5NpzAWBk9cSiEv2kDn8WFZ6HieG/Y/yUHXtbtfDlXqGgblu
I49c9vdrhuxO2Y0hLm3jBPhwPg==
-----END CERTIFICATE-----
Generated at Wed May 13 03:10:33 2026 by rpki-client