Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.mft
File:                     Vd1sG_HER988yGQNERKpasrh-Aw.mft (raw, json)
Hash identifier:          KXLUX1JP76JR8WYyJJCW8MH4Zgbb9g1r8OiBEPFhrE8=
Subject key identifier:   0C:B9:80:51:70:A1:71:61:52:C7:D5:E8:56:DD:16:56:79:D9:D1:C6
Authority key identifier: 55:DD:6C:1B:F1:C4:47:DF:3C:C8:64:0D:11:12:A9:6A:CA:E1:F8:0C
Certificate issuer:       /CN=A91C5CA9/serialNumber=55DD6C1BF1C447DF3CC8640D1112A96ACAE1F80C
Certificate serial:       B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd1sG_HER988yGQNERKpasrh-Aw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.mft
Manifest number:          AC
Signing time:             Mon 11 May 2026 07:20:07 +0000
Manifest this update:     Mon 11 May 2026 07:20:07 +0000
Manifest next update:     Mon 18 May 2026 07:20:07 +0000
Files and hashes:         1: Vd1sG_HER988yGQNERKpasrh-Aw.crl (hash: AgfOreDkmJZU8NO9wM/GMYJkL/gGcU0lDJlMVnrF51s=)
                          2: 36B587404B0F11F0A2359B4EC4F9AE02.roa (hash: Np4RhG1xsJNFE2oTPHnRwfjk0sVMuj4yUU4qDWm5ytg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.crl
                          rsync://rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd1sG_HER988yGQNERKpasrh-Aw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 07:20:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 180 (0xb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5CA9, serialNumber=55DD6C1BF1C447DF3CC8640D1112A96ACAE1F80C
        Validity
            Not Before: May 11 07:20:07 2026 GMT
            Not After : May 18 07:20:07 2026 GMT
        Subject: CN=6a018327-0e07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ed:de:b6:55:be:38:8e:ab:ca:a4:bd:a0:d4:
                    de:a3:76:b1:34:28:5d:e6:db:6f:80:63:0e:d4:37:
                    5d:b9:14:8d:81:10:12:1e:52:91:23:9d:68:97:da:
                    a1:6d:c2:2d:03:ca:74:35:c7:6a:54:ac:85:ee:0f:
                    eb:f8:94:e9:6a:10:fa:4e:94:e1:ba:7b:86:41:22:
                    07:5e:d9:1c:dc:2b:5f:06:3c:de:0a:7f:ba:56:1f:
                    c0:93:b3:c2:37:a0:d7:2c:1b:ba:43:1b:56:58:af:
                    c3:98:f3:c9:0d:81:d4:f8:d3:e0:36:12:f9:ca:b1:
                    eb:50:82:25:32:6e:1c:9c:83:67:dc:0c:36:bf:19:
                    90:12:97:34:c4:f2:2e:53:d0:16:4a:35:1e:71:3c:
                    cb:a3:90:d8:6c:ee:f1:7e:87:e9:d2:03:c5:bd:9a:
                    0f:9c:c7:ac:5b:6b:c9:f0:68:17:4e:9b:83:1f:77:
                    bb:08:9c:9e:48:29:0e:08:f2:6c:bd:6e:0b:43:ff:
                    f1:ca:63:a7:23:85:fe:44:4f:61:29:3d:ae:1f:f8:
                    ec:fd:20:21:0c:4c:b6:0b:ab:06:fa:6b:81:48:f9:
                    d2:2c:d1:39:0d:c7:d9:b2:85:ba:83:f5:20:1c:b2:
                    8a:f9:c5:6a:5e:0b:8b:83:5e:d1:bf:d3:f0:0b:a8:
                    d5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:B9:80:51:70:A1:71:61:52:C7:D5:E8:56:DD:16:56:79:D9:D1:C6
            X509v3 Authority Key Identifier:
                keyid:55:DD:6C:1B:F1:C4:47:DF:3C:C8:64:0D:11:12:A9:6A:CA:E1:F8:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd1sG_HER988yGQNERKpasrh-Aw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:92:76:01:52:59:9b:ce:d7:38:ed:4a:4e:a0:1c:42:87:1a:
         22:8c:03:ad:3e:91:07:36:7f:ec:84:68:b5:bd:b6:11:87:cc:
         ca:69:4f:53:71:b3:cf:fc:17:03:b3:bf:05:78:0e:1b:9d:b5:
         dc:8e:89:e9:1c:31:31:86:66:c0:2f:41:8b:55:10:b7:13:4d:
         3b:72:64:49:4f:12:29:f4:c1:3b:34:22:98:47:ce:1a:06:f4:
         3d:87:40:ee:21:ae:2a:7c:83:5a:cb:d8:6b:ea:cd:f1:23:7b:
         8e:1c:b5:6c:39:7d:4e:22:85:3a:26:f4:81:c5:bf:72:c3:0c:
         f8:95:72:97:61:08:9c:3e:11:18:5b:8b:8f:df:67:37:85:37:
         df:b5:53:3f:77:e6:35:64:66:06:83:9b:c9:53:11:75:95:4e:
         ee:3a:fa:4d:c5:10:54:54:97:7d:74:34:b5:c9:bd:8b:c3:6b:
         d7:c7:a0:a0:53:4f:ad:78:49:cf:f7:5f:b6:0c:fa:0d:20:7b:
         45:cd:94:3c:79:9f:fb:84:82:e2:a4:ba:79:27:dc:61:f6:c6:
         a3:7c:8f:91:39:c7:0c:df:7f:a2:d5:87:45:aa:af:b2:cf:cb:
         63:39:08:25:fa:94:ff:8b:0a:6d:31:7e:0b:07:7c:d0:4f:8a:
         b6:82:1c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:52:47 2026 by rpki-client