Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.mft
File:                     vELDvIdcBnayn9eryfgbSpH9iok.mft (raw, json)
Hash identifier:          1rlzCYBY7DQyOYAsB1/P8TrDu/GMPNqJzGiVzrhnz20=
Subject key identifier:   55:80:E8:8B:41:17:22:25:92:5F:35:95:E6:5A:91:D6:92:55:9F:6E
Authority key identifier: BC:42:C3:BC:87:5C:06:76:B2:9F:D7:AB:C9:F8:1B:4A:91:FD:8A:89
Certificate issuer:       /CN=A91B7D14/serialNumber=BC42C3BC875C0676B29FD7ABC9F81B4A91FD8A89
Certificate serial:       013C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vELDvIdcBnayn9eryfgbSpH9iok.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.mft
Manifest number:          0137
Signing time:             Mon 11 May 2026 05:32:37 +0000
Manifest this update:     Mon 11 May 2026 05:32:36 +0000
Manifest next update:     Mon 18 May 2026 05:32:36 +0000
Files and hashes:         1: vELDvIdcBnayn9eryfgbSpH9iok.crl (hash: nwX9d2doe8/QYUY0Dm5lg4LE3ekkFXXBk24hWCWc9fE=)
                          2: AAA33A7A74B011EF85E1C348C4F9AE02.roa (hash: FW4g/QhH4gL1hdaSiCtFk1K0xDP8/LV5Fbh+qpfxD0o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.crl
                          rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vELDvIdcBnayn9eryfgbSpH9iok.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 05:32:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 316 (0x13c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7D14, serialNumber=BC42C3BC875C0676B29FD7ABC9F81B4A91FD8A89
        Validity
            Not Before: May 11 05:32:36 2026 GMT
            Not After : May 18 05:32:36 2026 GMT
        Subject: CN=6a0169f5-3bf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:90:26:6f:fd:99:0d:81:51:0f:57:ed:74:f3:
                    c6:ae:e5:40:87:d7:1d:20:ae:4c:50:23:bb:93:1a:
                    c8:86:d3:dd:71:a7:bf:d1:5f:27:bf:df:ea:d2:20:
                    65:84:f6:d7:0c:27:8b:a2:ef:75:97:09:85:14:62:
                    3b:2c:02:e7:ee:03:ee:26:ee:bc:37:28:29:88:15:
                    a1:11:95:64:b4:1b:ae:25:4c:2d:7e:b8:bd:0a:ec:
                    c7:2c:b1:45:d7:0b:67:80:e6:03:4e:a4:b9:d8:80:
                    2f:b2:30:2e:70:0a:8a:87:68:8b:49:5e:df:c4:86:
                    99:ca:ed:af:cd:ab:5a:db:27:04:7c:58:f7:04:6d:
                    cb:ed:8b:26:42:4b:94:a7:03:8d:1c:a3:76:fb:79:
                    1e:b6:5f:a4:c1:0b:fa:41:a5:b7:b2:af:54:70:cf:
                    43:e7:e8:33:19:dc:eb:ae:4d:f8:f7:19:2a:7d:14:
                    a2:1b:f5:25:5e:79:a4:78:96:b4:5c:b4:91:0a:4c:
                    69:72:15:b1:65:b7:82:5b:2b:3a:cb:69:ff:47:62:
                    ac:81:77:c2:51:3b:0e:08:6e:5e:82:f0:22:10:af:
                    d3:61:53:b9:19:33:e1:42:99:c4:da:64:3b:8a:d8:
                    ed:e3:f7:fb:b0:dd:c1:19:a6:6a:70:70:3e:e5:0d:
                    1e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:80:E8:8B:41:17:22:25:92:5F:35:95:E6:5A:91:D6:92:55:9F:6E
            X509v3 Authority Key Identifier:
                keyid:BC:42:C3:BC:87:5C:06:76:B2:9F:D7:AB:C9:F8:1B:4A:91:FD:8A:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vELDvIdcBnayn9eryfgbSpH9iok.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:31:d4:f5:6b:f1:88:8b:ee:f7:e8:d6:43:83:e8:b2:14:6c:
         b0:67:00:a7:6f:86:e8:bc:e4:92:ab:30:5b:74:70:a9:ac:a1:
         8b:ac:f5:00:af:5f:eb:f5:37:ee:03:94:01:e7:e9:38:44:5f:
         a0:b3:be:9a:16:4c:b8:93:00:df:8c:f9:63:83:c1:69:30:69:
         16:3d:15:58:d3:ea:76:6e:24:e2:ab:37:28:a0:06:81:e2:41:
         29:ff:0f:ba:61:d8:56:23:1a:cc:53:df:d3:9e:92:bb:ea:b5:
         5b:42:30:51:f5:ee:56:d5:53:86:50:da:a3:bb:c6:25:e5:cd:
         b9:7b:c9:6a:5d:87:83:2f:3c:f9:29:53:1a:db:00:38:e5:b9:
         9e:81:91:9d:b0:3d:3e:d2:dd:5b:6e:fe:fb:a7:72:63:16:e2:
         51:07:70:53:6b:1e:2b:c0:7d:18:7e:87:05:a2:c3:51:98:56:
         38:30:36:c9:b9:8c:0d:d0:17:c5:57:c8:8f:bf:56:0f:f0:ce:
         90:51:af:c2:3c:17:97:2f:6e:9c:07:4d:93:fd:4a:82:1b:17:
         06:23:54:81:8f:4e:71:29:95:9a:d2:cd:fe:75:72:2b:47:2f:
         6f:e4:a1:c3:9f:b9:a0:be:e9:e7:1c:f8:71:aa:03:a7:e7:df:
         bf:d3:39:4a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICATwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjdEMTQxMTAvBgNVBAUTKEJDNDJDM0JDODc1QzA2NzZCMjlGRDdBQkM5RjgxQjRB
OTFGRDhBODkwHhcNMjYwNTExMDUzMjM2WhcNMjYwNTE4MDUzMjM2WjAYMRYwFAYD
VQQDEw02YTAxNjlmNS0zYmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArZAmb/2ZDYFRD1ftdPPGruVAh9cdIK5MUCO7kxrIhtPdcae/0V8nv9/q0iBl
hPbXDCeLou91lwmFFGI7LALn7gPuJu68NygpiBWhEZVktBuuJUwtfri9CuzHLLFF
1wtngOYDTqS52IAvsjAucAqKh2iLSV7fxIaZyu2vzata2ycEfFj3BG3L7YsmQkuU
pwONHKN2+3ketl+kwQv6QaW3sq9UcM9D5+gzGdzrrk349xkqfRSiG/UlXnmkeJa0
XLSRCkxpchWxZbeCWys6y2n/R2KsgXfCUTsOCG5egvAiEK/TYVO5GTPhQpnE2mQ7
itjt4/f7sN3BGaZqcHA+5Q0ePQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFWA6ItB
FyIlkl81leZakdaSVZ9uMB8GA1UdIwQYMBaAFLxCw7yHXAZ2sp/Xq8n4G0qR/YqJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0QxNC9DREIzQjlBQTc0
QUYxMUVGOTFBNjYxNDZDNEY5QUUwMi92RUxEdklkY0JuYXluOWVyeWZnYlNwSDlp
b2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZFTER2SWRjQm5heW45ZXJ5ZmdiU3BIOWlvay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
N0QxNC9DREIzQjlBQTc0QUYxMUVGOTFBNjYxNDZDNEY5QUUwMi92RUxEdklkY0Ju
YXluOWVyeWZnYlNwSDlpb2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArTHU9WvxiIvu9+jWQ4PoshRssGcAp2+G6LzkkqswW3Rwqayhi6z1AK9f6/U3
7gOUAefpOERfoLO+mhZMuJMA34z5Y4PBaTBpFj0VWNPqdm4k4qs3KKAGgeJBKf8P
umHYViMazFPf056Su+q1W0IwUfXuVtVThlDao7vGJeXNuXvJal2Hgy88+SlTGtsA
OOW5noGRnbA9PtLdW27++6dyYxbiUQdwU2seK8B9GH6HBaLDUZhWODA2ybmMDdAX
xVfIj79WD/DOkFGvwjwXly9unAdNk/1KghsXBiNUgY9OcSmVmtLN/nVyK0cvb+Sh
w5+5oL7p5xz4caoDp+ffv9M5Sg==
-----END CERTIFICATE-----
Generated at Wed May 13 06:35:25 2026 by rpki-client