Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.mft
File:                     VB3RXhVOUI-wD9skXE528q09iB0.mft (raw, json)
Hash identifier:          nHIMcrQ6GIgN6M1bcf4o6332aNiuDNIOQuwG8wGE4bo=
Subject key identifier:   92:C5:D0:73:91:3B:25:E1:E3:3B:B1:C6:0B:99:55:94:9D:1F:C1:64
Authority key identifier: 54:1D:D1:5E:15:4E:50:8F:B0:0F:DB:24:5C:4E:76:F2:AD:3D:88:1D
Certificate issuer:       /CN=A911CE4A/serialNumber=541DD15E154E508FB00FDB245C4E76F2AD3D881D
Certificate serial:       C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB3RXhVOUI-wD9skXE528q09iB0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.mft
Manifest number:          C3
Signing time:             Mon 27 Jul 2026 09:07:26 +0000
Manifest this update:     Mon 27 Jul 2026 09:07:25 +0000
Manifest next update:     Mon 03 Aug 2026 09:07:25 +0000
Files and hashes:         1: VB3RXhVOUI-wD9skXE528q09iB0.crl (hash: h0UprvhOaGms/2llhPZ0IXOi8TmaDjrKFbfz1ud3l18=)
                          2: BA2C0A9E673A11F0B876713DC4F9AE02.roa (hash: k7KAeEujUB9hyqnv/uSDh4wrDBFacTBtGdVKJFRlzqg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.crl
                          rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB3RXhVOUI-wD9skXE528q09iB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:07:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 199 (0xc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CE4A, serialNumber=541DD15E154E508FB00FDB245C4E76F2AD3D881D
        Validity
            Not Before: Jul 27 09:07:25 2026 GMT
            Not After : Aug  3 09:07:25 2026 GMT
        Subject: CN=6a671fce-f96a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:67:be:56:91:80:75:c8:f4:ab:5f:92:f0:f2:
                    07:3f:cb:79:66:77:29:c0:aa:82:73:3b:87:a1:63:
                    6c:9d:c9:59:1f:69:09:25:48:f8:da:c4:50:6c:f4:
                    14:89:34:e3:cb:57:f6:92:e3:6e:35:ce:8b:d0:4b:
                    a7:ed:ac:5d:ca:b7:72:56:ec:d2:6e:31:d6:05:d3:
                    3a:41:b9:8f:db:ff:e9:c3:33:d3:52:40:4c:39:b3:
                    54:96:b9:2f:58:10:75:76:4b:8c:4b:6a:aa:56:88:
                    a5:a5:a3:e9:f4:f3:06:aa:36:7d:08:2b:f1:7f:54:
                    02:7d:ee:f1:20:e1:e0:07:98:3e:fd:0c:27:78:b6:
                    da:48:c2:f8:1f:13:66:e7:7b:1d:ac:78:b7:90:8a:
                    ce:db:27:66:96:d2:7b:7f:69:f2:81:42:7d:02:60:
                    01:20:11:06:92:f2:12:51:de:1a:90:ca:31:3c:46:
                    8d:b1:64:81:cd:50:3c:00:04:5b:4b:ac:b8:c7:dc:
                    d1:5f:45:4d:6c:2a:26:63:04:84:a2:ed:6d:59:41:
                    56:40:2d:fa:a3:d5:bf:88:92:ff:72:13:c7:0d:6c:
                    85:f4:f6:ca:8d:b8:b7:7b:c1:de:18:6e:2a:60:1f:
                    48:7d:8a:57:84:82:7e:be:68:4c:35:12:a8:36:99:
                    25:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:C5:D0:73:91:3B:25:E1:E3:3B:B1:C6:0B:99:55:94:9D:1F:C1:64
            X509v3 Authority Key Identifier:
                keyid:54:1D:D1:5E:15:4E:50:8F:B0:0F:DB:24:5C:4E:76:F2:AD:3D:88:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB3RXhVOUI-wD9skXE528q09iB0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:66:31:8b:4e:cf:eb:fb:4f:72:24:60:d6:54:8a:ac:56:f7:
         78:f2:b4:c5:2b:eb:44:86:1c:c6:f6:08:98:51:42:bd:2b:53:
         1d:0b:e6:cd:ee:dd:49:5f:b8:72:09:51:9b:5d:3d:11:ff:51:
         3c:6e:5e:d2:fb:9e:6a:af:33:c5:6a:84:24:c2:af:49:41:56:
         76:f1:b4:d3:98:34:dc:f7:8c:28:71:de:00:f1:39:63:30:3b:
         1f:50:57:e8:21:fa:59:bb:d6:99:79:79:93:e9:ff:99:2d:47:
         ca:7f:ea:b8:2e:1b:c8:9d:fa:b2:3d:66:34:de:a6:5a:8e:fe:
         54:d6:b2:ac:4c:02:2b:62:92:a6:1e:78:59:ba:6c:9e:c8:33:
         47:e3:19:a6:6a:1b:ae:67:ba:40:e4:48:e0:06:93:6b:a8:bc:
         77:56:49:5e:00:a5:48:6a:ec:01:b4:a1:72:c5:db:a6:7e:24:
         09:1f:e5:4e:c2:4d:27:9c:c9:d9:5e:50:85:d0:42:f1:2a:e0:
         7f:13:76:54:d0:7b:ee:a5:be:7d:9a:8c:dd:f8:e2:e0:34:fa:
         6b:b3:1a:67:60:75:6c:10:df:21:0f:e4:29:de:ab:56:45:54:
         d4:43:09:0a:94:8c:1f:94:2c:08:29:81:19:34:74:00:f8:fc:
         26:ad:b1:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 10:35:11 2026 by rpki-client