Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft
File:                     VELdytiYUdlLqsCrc5LOQZohisw.mft (raw, json)
Hash identifier:          YP1QpTwPotCVRA9EI/yQk35J/NsqVJ28E36fk+A4c5A=
Subject key identifier:   84:61:3A:CE:9D:58:02:63:53:0B:6B:FB:D0:C0:34:71:33:52:50:5C
Authority key identifier: 54:42:DD:CA:D8:98:51:D9:4B:AA:C0:AB:73:92:CE:41:9A:21:8A:CC
Certificate issuer:       /CN=A91BA0F9/serialNumber=5442DDCAD89851D94BAAC0AB7392CE419A218ACC
Certificate serial:       1D34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VELdytiYUdlLqsCrc5LOQZohisw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft
Manifest number:          528C
Signing time:             Wed 22 Jul 2026 15:18:07 +0000
Manifest this update:     Wed 22 Jul 2026 15:18:06 +0000
Manifest next update:     Wed 29 Jul 2026 15:18:06 +0000
Files and hashes:         1: VELdytiYUdlLqsCrc5LOQZohisw.crl (hash: 08foTWPrrp86AA/iCyQAX4mrdcbfxGS705kQgAC2XOE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.crl
                          rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VELdytiYUdlLqsCrc5LOQZohisw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 15:18:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7476 (0x1d34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA0F9, serialNumber=5442DDCAD89851D94BAAC0AB7392CE419A218ACC
        Validity
            Not Before: Jul 22 15:18:06 2026 GMT
            Not After : Jul 29 15:18:06 2026 GMT
        Subject: CN=6a60df2f-440d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d8:71:99:ac:08:0d:28:11:7d:af:29:e9:94:
                    91:65:4d:dc:1d:e2:aa:ac:b4:3e:c1:5a:2f:0d:ee:
                    d3:0e:6b:c1:0f:ca:c0:0b:2a:a6:d3:0c:1f:43:4f:
                    c5:29:5b:45:3e:5d:c2:f3:31:e6:33:ac:0f:28:c2:
                    8b:96:da:75:77:4d:ac:93:48:30:89:0c:4b:8b:77:
                    aa:5e:d6:f7:a8:60:e7:a0:dd:dd:a3:3b:a8:07:22:
                    aa:e2:aa:d5:dc:65:e4:41:78:54:2b:a5:52:f8:30:
                    ba:21:80:b6:30:03:d3:18:be:b8:6b:a2:0d:1c:87:
                    97:35:63:c6:17:19:44:ea:36:d0:4f:0a:58:36:f7:
                    57:8a:4b:49:55:c8:61:00:b1:ba:fd:62:4e:9f:be:
                    06:dd:09:98:3b:f0:97:ce:4b:95:dc:cf:39:82:cf:
                    2b:3d:8b:1c:3b:25:f3:87:f9:11:09:c3:71:f0:40:
                    46:d6:9f:bf:d3:2f:99:8f:3d:88:ec:e7:98:aa:3c:
                    24:25:e7:b9:d5:ef:43:9a:55:db:4d:4f:3b:27:27:
                    3f:b0:5f:ab:61:52:e2:b2:f2:c4:77:b2:6b:66:5a:
                    ec:90:46:73:81:e4:78:c4:fa:87:51:38:ec:ee:08:
                    f0:72:87:11:4f:87:36:23:dc:50:fc:2c:48:3e:a3:
                    6c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:61:3A:CE:9D:58:02:63:53:0B:6B:FB:D0:C0:34:71:33:52:50:5C
            X509v3 Authority Key Identifier:
                keyid:54:42:DD:CA:D8:98:51:D9:4B:AA:C0:AB:73:92:CE:41:9A:21:8A:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VELdytiYUdlLqsCrc5LOQZohisw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:c0:59:c0:07:ec:81:cf:c3:41:1b:77:c9:66:07:1e:cf:35:
         27:e3:9d:6e:a6:72:a3:62:0d:d3:86:94:c9:e9:0f:a1:46:39:
         a3:0a:df:5b:dd:be:40:0f:67:2e:a4:2d:08:8e:4c:1e:94:34:
         b4:f0:98:26:fc:4c:18:28:cb:7b:01:5a:43:66:8a:79:1f:ad:
         3d:db:12:e3:fc:5e:af:61:9b:f1:93:4a:1b:c5:07:6d:22:50:
         48:b1:b6:ef:fd:14:fc:c0:47:51:04:51:b5:04:fe:a2:85:2f:
         2f:d3:86:e0:d1:65:54:ef:15:e3:4e:5d:47:b4:7b:8f:4d:b5:
         2f:e5:8a:92:47:78:f9:69:bb:6b:ab:ed:c6:4c:6a:8c:27:62:
         08:28:e5:98:66:6d:3d:44:35:ef:b8:0d:ec:f8:67:00:53:3b:
         d4:7d:4e:9b:66:63:4a:53:26:bb:09:f8:98:f2:bd:61:a0:8a:
         50:00:30:cd:05:bd:c9:1a:4b:64:97:a7:b4:76:09:b9:71:d7:
         ba:02:18:0e:5d:76:53:5c:d4:e9:f1:2a:31:8f:1d:8d:4d:d1:
         c6:57:e0:8b:33:e3:7a:7f:b3:b0:65:94:ae:fc:33:ad:c2:d0:
         4c:7f:5f:1c:4b:0f:8b:32:d5:83:7c:19:63:9b:26:72:e0:03:
         8a:69:cc:ef
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHTQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkEwRjkxMTAvBgNVBAUTKDU0NDJERENBRDg5ODUxRDk0QkFBQzBBQjczOTJDRTQx
OUEyMThBQ0MwHhcNMjYwNzIyMTUxODA2WhcNMjYwNzI5MTUxODA2WjAYMRYwFAYD
VQQDEw02YTYwZGYyZi00NDBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz9hxmawIDSgRfa8p6ZSRZU3cHeKqrLQ+wVovDe7TDmvBD8rACyqm0wwfQ0/F
KVtFPl3C8zHmM6wPKMKLltp1d02sk0gwiQxLi3eqXtb3qGDnoN3dozuoByKq4qrV
3GXkQXhUK6VS+DC6IYC2MAPTGL64a6INHIeXNWPGFxlE6jbQTwpYNvdXiktJVchh
ALG6/WJOn74G3QmYO/CXzkuV3M85gs8rPYscOyXzh/kRCcNx8EBG1p+/0y+Zjz2I
7OeYqjwkJee51e9DmlXbTU87Jyc/sF+rYVLisvLEd7JrZlrskEZzgeR4xPqHUTjs
7gjwcocRT4c2I9xQ/CxIPqNsIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIRhOs6d
WAJjUwtr+9DANHEzUlBcMB8GA1UdIwQYMBaAFFRC3crYmFHZS6rAq3OSzkGaIYrM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTBGOS9GQ0FBMkMwMDFE
QTgxMUUyQjBFMkNBQTMwOEIwMkNEMi9WRUxkeXRpWVVkbExxc0NyYzVMT1Fab2hp
c3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZFTGR5dGlZVWRsTHFzQ3JjNUxPUVpvaGlzdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QTBGOS9GQ0FBMkMwMDFEQTgxMUUyQjBFMkNBQTMwOEIwMkNEMi9WRUxkeXRpWVVk
bExxc0NyYzVMT1Fab2hpc3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVsBZwAfsgc/DQRt3yWYHHs81J+OdbqZyo2IN04aUyekPoUY5owrfW92+QA9n
LqQtCI5MHpQ0tPCYJvxMGCjLewFaQ2aKeR+tPdsS4/xer2Gb8ZNKG8UHbSJQSLG2
7/0U/MBHUQRRtQT+ooUvL9OG4NFlVO8V405dR7R7j021L+WKkkd4+Wm7a6vtxkxq
jCdiCCjlmGZtPUQ177gN7PhnAFM71H1Om2ZjSlMmuwn4mPK9YaCKUAAwzQW9yRpL
ZJentHYJuXHXugIYDl12U1zU6fEqMY8djU3RxlfgizPjen+zsGWUrvwzrcLQTH9f
HEsPizLVg3wZY5smcuADimnM7w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:41:39 2026 by rpki-client