Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B00DC/2FBBC36E001811F1B6A12A14426F56BC/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.mft
File:                     Vd5CtrGL1XmaJuhCmWED-jS8Fxg.mft (raw, json)
Hash identifier:          3cgS/g4oDtxFU+kagKEgprHAlRoynPNCyc/095Rl4Pc=
Subject key identifier:   AE:08:2A:4B:A3:D6:C5:B2:44:C7:41:B6:76:43:BD:B6:7E:D9:36:61
Authority key identifier: 55:DE:42:B6:B1:8B:D5:79:9A:26:E8:42:99:61:03:FA:34:BC:17:18
Certificate issuer:       /CN=A91B00DC/serialNumber=55DE42B6B18BD5799A26E842996103FA34BC1718
Certificate serial:       5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B00DC/2FBBC36E001811F1B6A12A14426F56BC/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.mft
Manifest number:          5C
Signing time:             Thu 23 Jul 2026 10:09:55 +0000
Manifest this update:     Thu 23 Jul 2026 10:09:54 +0000
Manifest next update:     Thu 30 Jul 2026 10:09:54 +0000
Files and hashes:         1: Vd5CtrGL1XmaJuhCmWED-jS8Fxg.crl (hash: 6kwp39Zbzu/123wbs5cwbl4fONXyjnyySi8VcnyLFnU=)
                          2: 63ABE3C0001811F1804E761C426F56BC.roa (hash: yY65u/jqJQmHqnGhqt0gIcasuvIles8dQWtNSaAAQqc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B00DC/2FBBC36E001811F1B6A12A14426F56BC/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.crl
                          rsync://rpki.apnic.net/member_repository/A91B00DC/2FBBC36E001811F1B6A12A14426F56BC/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:09:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95 (0x5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B00DC, serialNumber=55DE42B6B18BD5799A26E842996103FA34BC1718
        Validity
            Not Before: Jul 23 10:09:54 2026 GMT
            Not After : Jul 30 10:09:54 2026 GMT
        Subject: CN=6a61e873-8e03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0d:a1:27:4f:df:e4:51:be:2f:3e:aa:50:2e:
                    47:c6:dd:b6:01:ce:24:fa:ba:51:e8:1e:74:44:06:
                    b5:d8:86:fc:12:74:d7:28:b5:0f:66:33:03:9f:06:
                    fe:56:de:3a:67:77:45:37:b0:6c:78:d2:28:57:57:
                    38:f5:af:13:48:57:e8:9c:2d:e0:24:44:2b:12:87:
                    51:9c:56:98:bf:3b:83:24:4a:3f:2a:af:af:29:c9:
                    52:98:96:f1:3e:24:41:8f:54:6b:8a:cb:8c:f7:c1:
                    54:2e:8c:d3:ba:a3:fe:cc:7b:8e:ce:0d:1b:65:01:
                    e2:8b:7d:6c:c6:be:3c:df:66:fb:7e:94:c6:74:61:
                    74:6a:59:9f:41:bf:32:8f:d2:e9:e9:7f:5d:44:be:
                    21:00:5c:bc:a9:ee:ec:6e:1f:0a:89:64:41:e0:bf:
                    85:a4:a7:c7:fc:e5:e6:b8:99:97:dd:1a:df:29:ab:
                    c3:f7:f1:04:fc:1c:27:7f:0b:3f:d1:aa:3c:4b:55:
                    d7:61:62:52:c7:f6:cd:79:e4:ac:08:39:eb:36:73:
                    3c:be:43:67:08:43:57:58:30:94:91:cf:f6:90:0e:
                    7e:fb:3e:5d:22:47:fd:ba:86:a1:28:4f:f2:71:9b:
                    e0:28:95:7c:3f:53:d6:67:d9:15:82:ed:fc:3d:b9:
                    b7:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:08:2A:4B:A3:D6:C5:B2:44:C7:41:B6:76:43:BD:B6:7E:D9:36:61
            X509v3 Authority Key Identifier:
                keyid:55:DE:42:B6:B1:8B:D5:79:9A:26:E8:42:99:61:03:FA:34:BC:17:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B00DC/2FBBC36E001811F1B6A12A14426F56BC/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B00DC/2FBBC36E001811F1B6A12A14426F56BC/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:3a:12:00:ec:e8:b7:3c:71:ab:a5:73:9e:21:62:50:bc:a1:
         e9:55:d1:9c:a6:0c:d6:68:13:ed:bf:d5:a8:29:9e:8e:a8:6b:
         38:be:0e:34:59:09:e3:f1:ae:81:a3:9d:f5:0c:96:3b:7b:06:
         4b:6a:88:49:ee:a9:68:80:4f:8d:f6:d4:3d:02:b5:c3:ad:db:
         be:24:c9:b2:db:01:73:b3:29:b2:b4:50:04:ec:ac:df:9c:8f:
         0f:60:e4:77:48:1c:fd:f9:ba:c9:b8:c0:18:49:f5:a2:02:30:
         bb:27:43:b1:93:01:24:d5:2d:64:26:13:24:8d:72:ed:74:4d:
         01:99:de:d9:ef:17:de:f5:8d:39:b6:3c:e9:42:d5:4e:ed:56:
         0e:2a:81:a9:ea:f6:c2:26:c4:9c:1e:91:cf:f9:51:63:97:92:
         d8:ee:83:9e:16:93:3d:f1:b5:58:6b:d6:7b:8b:87:24:1d:86:
         1b:48:20:80:8a:67:7a:18:3c:99:e9:5c:19:b9:fc:48:4f:bf:
         a2:ec:65:50:ce:83:5c:d9:f3:60:22:b5:7e:4c:4a:68:0d:71:
         43:a6:47:1a:75:17:f4:6b:32:da:4e:28:e4:82:ed:38:38:e6:
         ba:f0:1b:9c:b9:7c:85:57:f8:9a:ed:e8:28:91:72:17:fb:0c:
         b4:c0:85:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:06:48 2026 by rpki-client