Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft
File:                     vZ1mh32GbnyQQVa-CMtDcargAb0.mft (raw, json)
Hash identifier:          RWWNz4spcHZx6rUamDej7FHv7VdjMIWTkG4kMhvV8IA=
Subject key identifier:   E6:E6:90:EA:26:99:21:A4:D8:89:EA:8B:D2:DD:22:C2:1F:3C:86:F1
Authority key identifier: BD:9D:66:87:7D:86:6E:7C:90:41:56:BE:08:CB:43:71:AA:E0:01:BD
Certificate issuer:       /CN=A91E5E8B/serialNumber=BD9D66877D866E7C904156BE08CB4371AAE001BD
Certificate serial:       021A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft
Manifest number:          0207
Signing time:             Mon 11 May 2026 03:19:07 +0000
Manifest this update:     Mon 11 May 2026 03:19:06 +0000
Manifest next update:     Mon 18 May 2026 03:19:06 +0000
Files and hashes:         1: vZ1mh32GbnyQQVa-CMtDcargAb0.crl (hash: HhQZjA64evOH/xkrH/D00MTgrUCokSPVFtZQjrfpqOc=)
                          2: 975A513293B011EF9203EA6BC4F9AE02.roa (hash: JQYmKsWXoSm0lfyUAQDHWsNMbQA1U6oOzIeZnxZREpc=)
                          3: AC9A49A6B79811EF9C8DF330C4F9AE02.roa (hash: TlPZUMDag0+nbHWC7VeEq/uQgXojgN3hKUwwE1rmyAE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.crl
                          rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 03:19:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 538 (0x21a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5E8B, serialNumber=BD9D66877D866E7C904156BE08CB4371AAE001BD
        Validity
            Not Before: May 11 03:19:06 2026 GMT
            Not After : May 18 03:19:06 2026 GMT
        Subject: CN=6a014aaa-3a96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0b:94:d0:8a:c8:14:23:7d:d1:6f:9d:28:9a:
                    ca:e9:0a:3e:82:19:d6:2a:b8:d9:d3:4c:de:70:c1:
                    7c:98:3e:68:a2:74:fd:42:60:57:2e:69:57:d5:f1:
                    1a:39:22:16:7b:e8:0b:0f:3f:a1:42:f9:00:8b:1b:
                    97:df:6a:32:09:62:ed:39:64:77:ed:3a:fd:61:3e:
                    44:c8:fc:f8:2e:08:d4:ec:cb:fd:0a:8c:4b:34:37:
                    e1:29:41:8a:12:2f:d4:27:1f:a0:1a:e7:61:b0:f7:
                    92:38:0a:52:b7:9f:f2:18:3a:f1:a9:78:e0:2d:42:
                    14:69:de:e4:50:e1:4f:35:d6:3f:15:eb:36:87:6e:
                    dc:66:78:2c:e9:09:2b:3d:3f:b7:d4:35:5e:d8:5b:
                    50:30:58:94:75:9b:68:5d:18:cc:d2:a7:af:4d:b0:
                    ab:b6:7c:9c:85:1e:5b:70:c8:53:b8:74:8e:d3:35:
                    12:c2:5d:2d:70:b6:ff:21:92:70:b1:af:f5:2c:ac:
                    2b:c6:30:41:31:9e:50:65:16:80:98:fd:41:38:3f:
                    16:a3:94:19:d8:9c:49:b6:66:43:d8:e3:87:6f:a4:
                    f9:3d:6d:b0:ea:b4:d7:fb:c8:35:ca:78:9b:43:be:
                    88:64:ed:29:53:b9:33:5e:e1:43:b3:e3:41:e3:15:
                    ff:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:E6:90:EA:26:99:21:A4:D8:89:EA:8B:D2:DD:22:C2:1F:3C:86:F1
            X509v3 Authority Key Identifier:
                keyid:BD:9D:66:87:7D:86:6E:7C:90:41:56:BE:08:CB:43:71:AA:E0:01:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:81:0d:42:26:f4:71:0c:9a:bf:67:6f:9c:54:f7:c3:9f:bd:
         20:92:48:39:db:77:01:f5:e5:ce:4b:23:05:66:23:7b:10:68:
         b2:af:f4:31:ba:21:fc:3a:dc:b7:f2:bd:2c:55:07:b8:ed:4d:
         78:c2:7c:42:d8:3a:24:96:98:59:dc:08:fa:21:4f:9e:ae:33:
         02:c5:3d:49:e6:82:f3:71:04:18:5c:d8:64:cd:7b:70:20:aa:
         e1:65:9a:88:0a:46:25:4a:6c:66:3b:ad:7e:80:df:58:92:aa:
         f1:cd:14:a3:82:07:8a:85:ce:8f:3c:09:19:82:cf:e4:d0:13:
         9e:a4:e3:97:ae:6d:0d:d1:cf:75:52:2b:18:29:8e:d4:84:1a:
         e4:45:76:ee:2b:f3:56:6d:e3:56:e4:8b:d9:42:4b:e6:51:07:
         ad:e2:0b:4a:52:62:b4:22:92:6c:59:9d:c3:4c:c4:2f:2b:c8:
         26:92:66:14:95:c5:19:3c:94:1f:0a:49:5b:57:7a:c3:0c:2a:
         51:d2:ba:4c:79:60:91:b7:23:71:46:21:af:b9:b0:64:5e:e1:
         c9:ed:fe:67:89:f0:66:c4:7c:69:45:4f:5e:28:47:27:fe:ce:
         65:56:c5:2d:16:27:25:b3:3c:4e:19:d9:5c:ed:7c:86:b8:5e:
         65:26:08:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:05:31 2026 by rpki-client