Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft
File:                     vaPoqCMceH9rfxi8FGuV-1wDjtk.mft (raw, json)
Hash identifier:          TtdrKLI+51SDA3GtO5sJIbhqTYBN/e07m0m67AOratg=
Subject key identifier:   B3:ED:EE:79:71:81:15:80:10:29:C0:04:45:6B:94:86:F3:31:8E:CA
Authority key identifier: BD:A3:E8:A8:23:1C:78:7F:6B:7F:18:BC:14:6B:95:FB:5C:03:8E:D9
Certificate issuer:       /CN=A91AE8D7/serialNumber=BDA3E8A8231C787F6B7F18BC146B95FB5C038ED9
Certificate serial:       0102
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vaPoqCMceH9rfxi8FGuV-1wDjtk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft
Manifest number:          0102
Signing time:             Thu 23 Jul 2026 07:50:30 +0000
Manifest this update:     Thu 23 Jul 2026 07:50:30 +0000
Manifest next update:     Thu 30 Jul 2026 07:50:30 +0000
Files and hashes:         1: vaPoqCMceH9rfxi8FGuV-1wDjtk.crl (hash: 2jjqU2/C/VyULY5k+QBMJWHO9zLRTXhGSUg+MYeehxA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.crl
                          rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vaPoqCMceH9rfxi8FGuV-1wDjtk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 07:50:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 258 (0x102)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE8D7, serialNumber=BDA3E8A8231C787F6B7F18BC146B95FB5C038ED9
        Validity
            Not Before: Jul 23 07:50:30 2026 GMT
            Not After : Jul 30 07:50:30 2026 GMT
        Subject: CN=6a61c7c6-34f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:03:40:7b:cb:93:d7:8f:12:c8:4c:0e:33:0e:
                    b2:95:f7:81:8d:e0:84:e4:bd:28:bf:b5:4b:c5:04:
                    9f:2d:e4:d3:21:27:95:5c:ca:ee:1d:07:e1:92:2c:
                    b4:67:4a:7e:70:44:51:5c:7f:df:2f:dd:29:6e:63:
                    6f:4f:d9:ec:49:65:f3:9f:b3:6b:ec:2b:2d:07:e3:
                    67:3a:ce:5a:c8:fa:2a:e7:36:ac:69:6a:de:81:0d:
                    1e:6a:a7:00:4f:19:88:6a:2a:b7:7c:f8:6b:c5:5d:
                    be:e2:ea:6f:42:2a:fa:06:af:d9:62:bf:20:e9:cd:
                    6f:ef:92:19:45:c0:d2:2b:bf:6d:1e:db:2a:45:06:
                    17:f6:31:cd:0f:fb:76:c7:e0:34:60:4e:f1:f4:0a:
                    9e:80:69:cd:8d:8c:2f:65:85:2a:81:d1:b3:50:b9:
                    49:c9:c9:3e:44:2d:67:83:a3:37:2d:72:52:e2:59:
                    32:8f:c6:55:bb:0b:1b:ee:ee:08:94:de:53:ca:79:
                    9b:2a:87:2e:d3:b9:04:06:84:f4:08:75:10:c2:18:
                    c5:c0:68:39:2d:4f:3a:4f:84:8f:e7:19:e3:0b:a6:
                    94:1d:eb:b4:10:9c:ce:21:02:06:56:0f:82:4a:77:
                    18:e9:27:93:bc:a8:76:64:b6:49:59:86:fd:af:cf:
                    e3:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:ED:EE:79:71:81:15:80:10:29:C0:04:45:6B:94:86:F3:31:8E:CA
            X509v3 Authority Key Identifier:
                keyid:BD:A3:E8:A8:23:1C:78:7F:6B:7F:18:BC:14:6B:95:FB:5C:03:8E:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vaPoqCMceH9rfxi8FGuV-1wDjtk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:b5:7b:ea:60:b2:41:97:5e:6b:2e:04:38:c0:97:8e:81:bb:
         8a:45:57:83:79:fe:6b:01:fd:4c:89:9b:6b:22:0f:64:c2:d0:
         80:1d:e7:c7:a5:87:76:af:7d:d6:30:e8:8c:84:30:16:4a:2d:
         0d:21:c0:2b:0e:70:a3:d1:5e:ad:31:c8:53:a2:53:1a:03:b1:
         d8:89:73:fa:5f:c6:25:eb:42:7a:af:43:51:69:af:44:fd:c3:
         6b:e4:24:b2:04:f5:34:f4:be:f0:d7:b8:e7:51:01:a3:b0:3d:
         c0:ee:03:4d:85:85:0a:8a:90:71:cd:ae:f6:f2:25:06:39:81:
         86:26:e1:2c:4b:6e:be:29:39:e4:58:a2:07:7f:fd:4c:ef:11:
         57:5e:5b:f0:95:74:30:b6:62:aa:ce:a4:37:9d:3b:2e:9d:b6:
         a7:1b:39:36:68:37:6a:82:81:59:d7:26:11:60:45:4d:71:e6:
         72:86:e9:16:8b:68:97:eb:55:02:97:8b:c8:da:b8:9b:8f:b2:
         ee:84:86:88:21:02:27:de:3a:7a:11:10:6a:07:80:16:9c:d2:
         28:9a:06:7a:a0:41:b0:9b:81:49:1e:9a:41:1b:86:0c:38:32:
         63:44:cb:4f:f3:25:27:a8:63:90:9c:41:77:9c:79:88:4f:ef:
         5b:7f:ca:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:38:24 2026 by rpki-client