Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.mft
File:                     VXcPY6DmX0wvyWrxmLxXhNznikY.mft (raw, json)
Hash identifier:          vNxRryJThzh1MH8l86I4Ry8CMHm0zV0/Yz8Iv1qM0OY=
Subject key identifier:   12:01:A7:62:B7:CA:86:C5:DB:A9:C7:5F:6C:19:DC:8D:7B:C9:C7:39
Authority key identifier: 55:77:0F:63:A0:E6:5F:4C:2F:C9:6A:F1:98:BC:57:84:DC:E7:8A:46
Certificate issuer:       /CN=A912B75A/serialNumber=55770F63A0E65F4C2FC96AF198BC5784DCE78A46
Certificate serial:       016B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXcPY6DmX0wvyWrxmLxXhNznikY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.mft
Manifest number:          0151
Signing time:             Thu 21 May 2026 05:14:43 +0000
Manifest this update:     Thu 21 May 2026 05:14:43 +0000
Manifest next update:     Thu 28 May 2026 05:14:43 +0000
Files and hashes:         1: VXcPY6DmX0wvyWrxmLxXhNznikY.crl (hash: c0BTVdBewGDIx+Fbue/U/F5XLb2HHi80knu+WrXGXS8=)
                          2: 8A54B9326F0C11EF866A7A83C4F9AE02.roa (hash: Al8YtI295Qv3VLO+dWvpu3tZeFYQjhzt57J20RQFzEM=)
                          3: 3590B0F65B9B11EFB90EBF42C4F9AE02.roa (hash: hSeIp929vHi0Xgq96P+KYhFORbkTXCu0ObyLBiOE7yE=)
                          4: 887E73265B9A11EF80F47C41C4F9AE02.roa (hash: y6lsTAzxceftnb0UckbxcnuqjkGYgeTxQZKU2zv7Tfc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.crl
                          rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXcPY6DmX0wvyWrxmLxXhNznikY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 05:14:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 363 (0x16b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B75A, serialNumber=55770F63A0E65F4C2FC96AF198BC5784DCE78A46
        Validity
            Not Before: May 21 05:14:43 2026 GMT
            Not After : May 28 05:14:43 2026 GMT
        Subject: CN=6a0e94c3-9285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a7:5b:20:81:af:7e:ec:b6:5f:ca:4c:bb:37:
                    a9:6c:32:f5:44:19:34:14:de:61:eb:9a:de:75:7b:
                    d2:e8:dd:e7:ba:4b:e6:df:67:87:00:8b:96:9f:95:
                    6c:46:f2:8b:aa:88:08:07:4c:fd:4c:75:28:47:e7:
                    92:39:44:fb:a6:46:5e:51:c1:10:17:f3:92:45:23:
                    7b:a8:01:69:19:c6:47:cf:1f:0f:d7:22:58:d8:5b:
                    36:89:ae:7d:25:b3:b3:4c:09:b6:f0:1f:be:14:db:
                    6b:d2:2e:36:67:a0:04:ab:76:2a:bd:74:91:59:14:
                    ef:54:79:7c:34:cb:32:61:ac:b6:96:8a:f8:22:85:
                    3b:e8:da:9b:8d:78:ac:b1:4d:4d:93:61:4e:ed:96:
                    19:bb:db:c7:ff:8f:46:b9:e2:59:e0:1a:ae:f8:1b:
                    85:dc:3d:c1:aa:8d:6d:ff:41:9c:fa:26:ff:e2:a7:
                    8c:47:9a:ff:92:b8:83:85:c5:ee:69:f4:4a:61:28:
                    c4:73:4d:13:77:55:f4:2b:fb:56:cf:63:32:7d:08:
                    ca:fb:a8:76:7b:0f:4a:96:ca:24:93:89:3a:51:20:
                    0f:9f:c1:9b:d4:2c:f5:bd:ae:1f:14:41:75:d0:d6:
                    c2:c9:0c:b4:14:8c:4a:9f:67:00:9d:09:0a:2e:9a:
                    95:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:01:A7:62:B7:CA:86:C5:DB:A9:C7:5F:6C:19:DC:8D:7B:C9:C7:39
            X509v3 Authority Key Identifier:
                keyid:55:77:0F:63:A0:E6:5F:4C:2F:C9:6A:F1:98:BC:57:84:DC:E7:8A:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXcPY6DmX0wvyWrxmLxXhNznikY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:b7:21:86:4c:50:40:d5:2f:f0:57:65:6e:49:ea:41:5d:ec:
         75:93:be:12:6c:3e:b8:63:c1:87:66:50:f2:88:03:06:f3:ee:
         65:4c:0b:ca:e0:10:e2:47:b6:fd:46:86:66:d1:fc:02:5c:c2:
         ef:17:a3:12:1a:1c:4d:51:b2:86:a6:1f:de:86:ef:e8:8a:3d:
         96:8c:7c:ae:ad:51:24:d9:ee:5c:f2:88:60:2e:2e:f4:62:e3:
         ae:72:1b:ec:c6:4f:fc:d6:d7:3f:c1:e5:b9:7c:ff:f6:c0:55:
         35:37:e5:6b:5f:43:11:71:7c:2e:45:98:80:30:d7:29:6b:4d:
         98:9c:30:ef:4c:09:dc:3a:49:f6:b4:66:74:b0:24:bb:60:54:
         41:74:78:f7:64:86:fd:13:6a:01:1a:f6:ab:9f:76:a6:35:03:
         f8:36:98:05:5f:f5:a4:5f:5f:d0:02:ce:07:69:c2:89:76:09:
         20:13:2a:4e:1c:e3:d5:26:ae:d4:25:34:4d:54:f4:91:d1:68:
         67:73:6b:fc:ea:f7:1b:a6:c3:33:19:5e:8b:d2:60:c6:ff:9a:
         d1:96:96:73:6f:db:94:6d:cc:50:15:a4:8b:b5:8a:d3:09:68:
         a5:1a:1a:d5:b3:3b:98:52:fe:82:f9:94:9c:c5:77:1a:3c:1f:
         4f:9e:52:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 12:21:17 2026 by rpki-client