Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.mft
File:                     Vd1sG_HER988yGQNERKpasrh-Aw.mft (raw, json)
Hash identifier:          YZ80PZXcY4qQnxgO7a0VeyLAjPzqaQUwbyD9J+2WBOo=
Subject key identifier:   06:AF:45:C4:2F:A0:B3:D5:60:3F:7D:4B:5E:3A:A4:FE:66:A4:4A:D9
Authority key identifier: 55:DD:6C:1B:F1:C4:47:DF:3C:C8:64:0D:11:12:A9:6A:CA:E1:F8:0C
Certificate issuer:       /CN=A91C5CA9/serialNumber=55DD6C1BF1C447DF3CC8640D1112A96ACAE1F80C
Certificate serial:       D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd1sG_HER988yGQNERKpasrh-Aw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.mft
Manifest number:          D0
Signing time:             Thu 23 Jul 2026 08:31:32 +0000
Manifest this update:     Thu 23 Jul 2026 08:31:32 +0000
Manifest next update:     Thu 30 Jul 2026 08:31:32 +0000
Files and hashes:         1: Vd1sG_HER988yGQNERKpasrh-Aw.crl (hash: r4rmObgNs/+JQxRI+hcSpiuDu71NY4s4Zj6SxJ9arrM=)
                          2: 36B587404B0F11F0A2359B4EC4F9AE02.roa (hash: Np4RhG1xsJNFE2oTPHnRwfjk0sVMuj4yUU4qDWm5ytg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.crl
                          rsync://rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd1sG_HER988yGQNERKpasrh-Aw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 08:31:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 216 (0xd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5CA9, serialNumber=55DD6C1BF1C447DF3CC8640D1112A96ACAE1F80C
        Validity
            Not Before: Jul 23 08:31:32 2026 GMT
            Not After : Jul 30 08:31:32 2026 GMT
        Subject: CN=6a61d164-7973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:87:06:00:1e:a1:4d:29:22:38:65:97:da:a1:
                    3f:61:11:02:7c:53:7a:f0:0d:58:42:0d:c7:3b:30:
                    11:1f:9f:d4:0b:77:92:e2:e1:8f:38:3d:77:a5:6b:
                    a7:de:a9:b9:27:77:0d:3f:b6:bf:07:95:f4:87:d8:
                    43:b6:15:f7:0e:71:ec:65:6c:7e:1d:7e:65:c8:05:
                    42:b0:b9:28:15:d6:69:89:81:1a:81:d1:c5:c1:e0:
                    bd:4c:aa:44:f2:df:64:ab:00:50:af:5e:1f:7b:9e:
                    8a:77:13:22:3b:5b:05:5a:2f:a3:ff:0b:d6:a9:7d:
                    6c:95:9c:3c:b5:39:25:c4:fa:f0:84:1e:c8:47:ce:
                    00:f1:eb:f0:09:30:40:02:58:34:c0:2b:e7:64:f2:
                    ec:83:58:03:6c:dc:b5:42:49:96:0b:58:5d:9e:58:
                    21:52:01:ae:7a:60:8e:85:13:a8:0d:f4:b3:e7:1d:
                    13:e6:95:11:e1:26:c7:73:a2:03:6b:a1:16:4c:f0:
                    f8:f8:ba:4f:47:d5:fe:51:55:5b:4c:16:43:2e:28:
                    43:ca:62:43:8c:a0:44:46:c2:9b:45:e8:bf:84:f7:
                    45:d4:15:9d:7b:16:47:8b:bc:8d:dd:49:ca:ed:67:
                    ed:6d:af:ec:a6:75:98:15:bf:70:d4:08:11:2f:51:
                    ba:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:AF:45:C4:2F:A0:B3:D5:60:3F:7D:4B:5E:3A:A4:FE:66:A4:4A:D9
            X509v3 Authority Key Identifier:
                keyid:55:DD:6C:1B:F1:C4:47:DF:3C:C8:64:0D:11:12:A9:6A:CA:E1:F8:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd1sG_HER988yGQNERKpasrh-Aw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:f8:3b:81:d2:a2:8f:fe:63:09:ce:5b:bf:19:aa:9b:14:b0:
         f0:cb:e9:57:ad:ed:17:54:72:d4:35:71:ef:c0:1c:f0:70:50:
         59:b5:07:09:6f:d0:1b:8f:94:94:4a:2e:b0:2f:58:07:e1:00:
         77:70:fa:9d:41:d3:6a:98:4b:18:36:ae:c6:49:f3:7e:47:5d:
         d6:03:6e:9e:d5:a9:ce:9f:ef:33:94:c7:07:aa:23:c6:fd:9b:
         46:ba:33:d6:e5:c8:da:0b:86:dd:84:aa:8e:0f:e1:07:3b:22:
         c5:86:31:c5:2e:0c:93:57:97:47:50:9b:03:67:97:ba:99:90:
         a9:d2:8b:eb:6c:8c:ee:65:29:12:bf:4f:c5:a5:5a:83:b9:31:
         3a:78:7a:5e:bb:e7:15:9e:13:83:df:80:7e:61:68:28:bc:91:
         a0:2f:46:ac:dd:d4:9e:4c:15:71:8a:07:e0:c8:3c:c5:a6:2f:
         96:23:26:b5:2a:cd:e0:58:9f:b0:3c:98:fa:21:71:54:d9:b3:
         75:80:94:6d:0b:a9:fa:64:be:be:53:9e:ed:2f:08:f9:18:47:
         f0:b4:6c:6d:e3:1c:c8:3a:af:a4:de:dd:28:e2:aa:8c:25:a3:
         27:d0:f0:68:94:09:5a:20:3f:60:b5:79:62:42:f1:6e:07:8f:
         b7:51:44:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:22:49 2026 by rpki-client