Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.mft
File:                     vphUuYSZNmQ-DUAVo7N7XkSErVo.mft (raw, json)
Hash identifier:          sqD/YJM074nXoA7gLqWnaIV6lsEE4wcPmowX8l5Dv9E=
Subject key identifier:   3C:34:91:1C:23:73:F8:5D:02:65:83:1C:44:B9:13:73:20:63:B4:FA
Authority key identifier: BE:98:54:B9:84:99:36:64:3E:0D:40:15:A3:B3:7B:5E:44:84:AD:5A
Certificate issuer:       /CN=A9123D19/serialNumber=BE9854B9849936643E0D4015A3B37B5E4484AD5A
Certificate serial:       2A89
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vphUuYSZNmQ-DUAVo7N7XkSErVo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.mft
Manifest number:          2A72
Signing time:             Wed 20 May 2026 15:35:21 +0000
Manifest this update:     Wed 20 May 2026 15:35:20 +0000
Manifest next update:     Wed 27 May 2026 15:35:20 +0000
Files and hashes:         1: vphUuYSZNmQ-DUAVo7N7XkSErVo.crl (hash: ZGuIfVu28l7RqQIElWHhtBRsm+2ruk4IzXIi+bL6h2Q=)
                          2: 73E0191A967811EA92E45A27C4F9AE02.roa (hash: mpjVMZqgsEDLte7km/wxxa0aijeYSHyV/D4q8GjzrZc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.crl
                          rsync://rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vphUuYSZNmQ-DUAVo7N7XkSErVo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 15:35:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10889 (0x2a89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123D19, serialNumber=BE9854B9849936643E0D4015A3B37B5E4484AD5A
        Validity
            Not Before: May 20 15:35:20 2026 GMT
            Not After : May 27 15:35:20 2026 GMT
        Subject: CN=6a0dd4b8-5c21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:77:bf:49:56:75:b9:c0:74:bd:42:a4:0c:d5:
                    cb:1d:cf:e5:ce:f6:a3:aa:c5:f8:b3:bc:3a:1b:99:
                    b5:bb:48:a4:8b:19:52:91:e9:f7:4a:3b:90:4f:f1:
                    0f:25:5b:c6:8c:86:7e:f9:3c:ab:da:dd:e7:9e:f8:
                    77:3d:65:bf:86:fb:04:be:f0:2b:18:54:02:4e:23:
                    51:7e:19:c3:16:a1:a3:45:e1:8c:13:62:a2:61:dd:
                    b5:3d:00:7f:e6:6e:7c:70:ad:02:da:91:0a:f9:20:
                    cc:da:f8:69:fc:b4:36:4b:4f:e4:d3:0e:6e:a5:33:
                    b6:ff:88:81:d2:b9:54:a3:47:86:1f:e1:fd:b5:0b:
                    64:c1:af:8f:c9:01:b6:33:53:ba:09:af:45:1e:32:
                    35:2a:6c:f7:fd:9e:df:f4:5c:20:3b:a5:36:e8:83:
                    61:35:8b:c0:c4:ae:70:52:a5:52:bd:80:00:ff:6d:
                    bd:8b:d6:c0:c7:d6:ad:81:3c:1a:70:f3:52:8a:06:
                    ae:c2:4d:d8:5c:c7:37:d6:81:87:fd:ee:56:c6:ce:
                    52:d8:5d:89:05:cc:45:b6:f2:50:a1:00:b2:6c:af:
                    59:e7:fb:d0:0d:19:a6:ac:b6:0d:9d:da:cd:0d:3e:
                    6d:24:ec:de:10:31:c0:6a:bb:3c:83:14:da:e7:0a:
                    45:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:34:91:1C:23:73:F8:5D:02:65:83:1C:44:B9:13:73:20:63:B4:FA
            X509v3 Authority Key Identifier:
                keyid:BE:98:54:B9:84:99:36:64:3E:0D:40:15:A3:B3:7B:5E:44:84:AD:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vphUuYSZNmQ-DUAVo7N7XkSErVo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:db:9c:58:3e:69:6f:92:18:47:66:36:23:be:28:c0:93:74:
         b4:e1:36:fa:4e:df:9c:30:f4:ce:8b:2c:bd:e1:e3:6a:5c:47:
         b4:b8:3b:86:3b:28:7a:cc:50:91:4c:09:89:45:7b:7f:43:90:
         6b:ff:fc:db:0a:a1:55:37:bc:c3:ad:fa:da:d5:d1:df:11:0c:
         fb:c6:a2:dc:5a:17:c5:2e:5e:21:30:81:e0:a4:0c:f8:01:54:
         34:f7:42:09:e2:23:81:1b:b5:40:90:f0:06:4a:08:3c:db:23:
         9d:2a:0c:0e:39:fa:71:6b:d7:82:ec:fe:a6:40:67:21:3c:ee:
         e7:ee:66:fb:75:f9:a1:1b:0e:3f:60:a1:6d:8c:91:06:24:7b:
         aa:3c:81:e1:18:47:9d:9f:6b:50:06:37:f1:77:b7:1f:95:8b:
         79:c7:0f:c4:cc:cf:6e:60:40:92:5f:b5:8b:ab:ae:73:d8:d9:
         cb:ae:a7:b8:1f:04:5c:34:c3:c6:af:82:ab:f3:33:9e:2b:65:
         58:ba:9e:0b:2d:76:60:10:9c:26:7f:cf:44:84:af:f0:73:35:
         ed:21:ef:ae:8f:5a:a2:b5:ef:32:3b:61:6a:49:d1:9b:94:49:
         4d:b7:b0:30:dc:d5:09:30:e7:cf:19:62:4b:02:25:f3:56:bc:
         2f:29:1c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:14:38 2026 by rpki-client