Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft
File:                     VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft (raw, json)
Hash identifier:          uDQEzASY9i7biyf+QQXl1dVLhpRVXS4DZ5RKChw8NQ8=
Subject key identifier:   14:FF:5B:C4:71:9C:FC:D9:BC:28:AB:17:71:D4:67:44:76:01:5C:5F
Authority key identifier: 55:F2:E4:87:40:05:8E:8F:CC:4F:90:1A:4A:33:E1:F4:17:62:00:F8
Certificate issuer:       /CN=A91C23DC/serialNumber=55F2E48740058E8FCC4F901A4A33E1F4176200F8
Certificate serial:       0D19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLkh0AFjo_MT5AaSjPh9BdiAPg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft
Manifest number:          0D05
Signing time:             Wed 22 Jul 2026 18:34:23 +0000
Manifest this update:     Wed 22 Jul 2026 18:34:22 +0000
Manifest next update:     Wed 29 Jul 2026 18:34:22 +0000
Files and hashes:         1: VfLkh0AFjo_MT5AaSjPh9BdiAPg.crl (hash: +fgxQf3LNEkiFKnJLkzELNVq5E+CxPCK1JzZsVAbvuA=)
                          2: 5AA3FD0868D111ED99477B87C4F9AE02.roa (hash: OtV6b8befwkPsOuYarHGh5SRZOjkzLz1qANk490i9b8=)
                          3: 598BD2E268D111ED99477B87C4F9AE02.roa (hash: PLVzOLnz/S3yAyLEYTQXk6jeemE0Coa5Zb4ZLWaW+pE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.crl
                          rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLkh0AFjo_MT5AaSjPh9BdiAPg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:34:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3353 (0xd19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C23DC, serialNumber=55F2E48740058E8FCC4F901A4A33E1F4176200F8
        Validity
            Not Before: Jul 22 18:34:22 2026 GMT
            Not After : Jul 29 18:34:22 2026 GMT
        Subject: CN=6a610d2e-5768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e8:c5:56:71:59:a0:78:e6:e9:4d:cb:80:38:
                    5b:ed:9f:ad:fa:b5:d1:40:27:8e:a0:5d:e1:d5:70:
                    6c:37:be:1f:d9:45:ae:70:35:c8:2d:d7:8c:cd:cc:
                    e7:69:49:c2:18:94:63:fe:63:6c:c1:00:fa:35:c3:
                    b7:48:d8:be:36:b6:5e:79:ed:9c:cb:a4:7e:4c:47:
                    2c:30:a9:14:ea:69:6d:53:b2:31:8d:1b:17:b3:a9:
                    1d:53:32:ea:cd:bb:ce:21:6e:7a:a5:4d:73:7c:38:
                    83:83:a7:b6:e1:1c:82:b9:f6:d2:b8:f0:9f:74:1b:
                    f5:b3:5b:34:d0:40:07:23:60:f8:0c:8d:c5:35:16:
                    ec:0c:69:27:f1:3c:ac:e0:1b:e0:8d:57:29:46:a9:
                    db:24:cf:3e:31:a4:7d:d0:98:0e:f8:3a:a3:0d:69:
                    8b:f0:06:7b:85:53:e8:d1:47:6b:c8:a7:48:cf:a0:
                    fa:3c:d3:66:8c:78:c8:18:18:99:d5:48:3c:b1:20:
                    17:5b:4b:03:ed:d8:4e:82:87:ac:29:b5:c1:cc:f2:
                    2d:a4:17:8c:0a:75:ee:2c:f8:e7:42:43:d6:ca:0b:
                    09:3f:24:c9:36:a4:4f:f3:05:20:db:a7:a1:ea:8b:
                    c3:2b:d8:e1:75:23:eb:5c:09:36:e8:c8:3f:24:ea:
                    a4:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:FF:5B:C4:71:9C:FC:D9:BC:28:AB:17:71:D4:67:44:76:01:5C:5F
            X509v3 Authority Key Identifier:
                keyid:55:F2:E4:87:40:05:8E:8F:CC:4F:90:1A:4A:33:E1:F4:17:62:00:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLkh0AFjo_MT5AaSjPh9BdiAPg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:c1:95:cf:09:37:61:c8:3a:b9:90:da:bd:8d:be:fc:48:b0:
         47:d1:77:0a:66:22:5d:14:dd:02:9f:9d:99:11:3c:f7:b1:9f:
         ad:f5:91:20:08:0e:4c:b6:74:28:34:4b:c1:aa:34:9f:92:f3:
         81:41:ab:68:fd:b4:84:b5:2e:87:e8:1a:35:31:76:61:b0:3d:
         d6:e2:24:97:16:95:8e:3b:a6:06:d9:c8:cc:ec:60:e6:96:9b:
         c1:36:4f:d1:c0:40:18:80:7c:02:d3:e3:ac:7c:67:21:d9:9d:
         f2:59:cb:7b:fe:43:4c:86:f5:a8:b2:ed:9f:a0:22:8d:a0:5b:
         65:6f:f1:d6:23:c5:c8:21:5b:09:d6:9f:e2:61:d4:db:23:77:
         75:48:d4:5d:46:79:9d:31:36:3d:13:ea:cb:fd:cc:13:1f:cb:
         0a:9c:a6:2e:72:c3:4b:6e:2f:3e:09:2e:77:2c:df:be:9d:64:
         5d:92:3a:49:e5:65:71:9b:29:93:3c:49:69:9a:41:e6:03:b9:
         54:c0:6e:d8:6a:3c:df:44:33:45:4a:37:38:e2:2e:5a:bb:5b:
         3a:bc:6a:95:5d:d2:81:e8:1f:e7:4b:cc:49:0f:1e:5d:78:bd:
         5b:72:91:83:f0:18:3a:53:b5:ae:f3:09:3e:07:75:fc:37:78:
         bd:27:0a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:04:12 2026 by rpki-client