Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.mft
File:                     VVzqN0EM0oazHxoArfYlPUzgUjI.mft (raw, json)
Hash identifier:          td/iEMI7zwJX5tHt4bCEfubx4mEX9vGUARN2FRhzvE8=
Subject key identifier:   9A:C2:76:BB:C6:0E:C3:E9:39:CB:31:8B:25:92:EF:AB:C7:89:9B:1A
Authority key identifier: 55:5C:EA:37:41:0C:D2:86:B3:1F:1A:00:AD:F6:25:3D:4C:E0:52:32
Certificate issuer:       /CN=A9137522/serialNumber=555CEA37410CD286B31F1A00ADF6253D4CE05232
Certificate serial:       3547
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVzqN0EM0oazHxoArfYlPUzgUjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.mft
Manifest number:          353F
Signing time:             Wed 20 May 2026 15:01:56 +0000
Manifest this update:     Wed 20 May 2026 15:01:56 +0000
Manifest next update:     Wed 27 May 2026 15:01:56 +0000
Files and hashes:         1: VVzqN0EM0oazHxoArfYlPUzgUjI.crl (hash: XZJQm0fQQgHhCLDhbnADZ2OoBDaVgJo0Q64zwWaGn98=)
                          2: FF9802D6FE3911EBBCE1485DC4F9AE02.roa (hash: Zqu39Uw0HncOG5VI+5Ts7HDsov6x0MYg0Iq+gNjyWCk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.crl
                          rsync://rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVzqN0EM0oazHxoArfYlPUzgUjI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 15:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13639 (0x3547)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137522, serialNumber=555CEA37410CD286B31F1A00ADF6253D4CE05232
        Validity
            Not Before: May 20 15:01:56 2026 GMT
            Not After : May 27 15:01:56 2026 GMT
        Subject: CN=6a0dcce4-5751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:10:43:e4:f8:65:89:f9:e3:3c:0e:b1:7f:f9:
                    dd:b9:9b:7e:a3:34:91:6f:f0:46:ce:f4:cc:53:2a:
                    cf:61:30:1d:a8:8e:b0:ef:6e:c2:e6:e5:19:0a:61:
                    cd:cb:e6:3d:65:d3:02:ea:5e:59:3b:76:c6:6d:22:
                    b0:fa:1c:a6:68:38:d1:33:dc:be:71:72:0a:8b:17:
                    28:ff:72:fd:56:f4:34:6f:fa:40:71:30:a4:d4:34:
                    1c:0d:79:15:db:ee:c7:98:fb:47:4d:8e:c4:3f:2e:
                    37:46:11:be:41:49:99:d5:cd:8c:3f:9f:9a:11:43:
                    a7:d8:98:c5:02:2f:62:a6:25:48:23:11:57:3b:b9:
                    39:c7:4f:2b:d0:04:6e:ee:75:e6:b3:fd:df:fb:3d:
                    83:cd:8d:48:b9:78:cb:fb:f7:40:8c:a1:b1:74:5e:
                    68:11:cc:c0:c8:66:9b:ed:5b:e7:3d:12:9c:f6:68:
                    97:8a:f2:cd:6d:14:a3:b6:37:89:75:9e:b1:86:a7:
                    b6:57:f1:3c:8c:c2:52:42:7f:b8:8c:8b:b5:0f:21:
                    56:2b:54:af:79:07:c0:ec:63:d9:8a:0a:c1:a2:7f:
                    45:23:ef:f1:db:58:5d:fc:95:b6:30:33:9f:cb:1c:
                    98:c8:66:1e:75:42:74:a7:ca:d4:7a:38:16:44:0b:
                    76:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:C2:76:BB:C6:0E:C3:E9:39:CB:31:8B:25:92:EF:AB:C7:89:9B:1A
            X509v3 Authority Key Identifier:
                keyid:55:5C:EA:37:41:0C:D2:86:B3:1F:1A:00:AD:F6:25:3D:4C:E0:52:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVzqN0EM0oazHxoArfYlPUzgUjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:5c:27:43:47:00:b1:bd:68:c2:5e:5f:a2:a0:d7:bf:2c:c0:
         ca:9c:bc:03:2f:64:e8:d2:4f:fc:b6:34:4c:fa:db:c6:18:b1:
         e4:a2:c5:f1:e8:aa:83:21:67:80:b0:c8:7f:d3:29:cf:4f:57:
         23:d9:16:88:ac:82:96:fd:3b:dc:ac:7d:9e:99:7c:99:90:34:
         fc:51:15:f6:35:b3:6e:7a:31:c9:a1:c8:d9:d5:a2:ad:5a:6b:
         c4:3e:44:12:54:81:3c:5b:8e:b5:52:71:57:c2:24:e2:ed:73:
         b1:23:48:6c:4a:0a:cf:cb:83:50:fa:08:d5:9f:f7:6e:d0:7a:
         80:c7:9f:be:a2:15:2d:f6:21:14:5c:2e:3d:4c:35:d3:44:f6:
         fc:42:db:10:28:15:6f:2e:ec:cf:b8:1a:4c:91:62:26:be:36:
         8e:f3:7e:40:6e:64:cc:4e:ac:fd:66:3f:11:1e:bb:dc:53:93:
         fd:32:e6:cd:03:bd:b2:0c:15:05:2e:a2:10:09:08:b1:5f:e3:
         7b:42:cb:be:f0:d6:57:17:a6:bc:40:67:dc:a4:9d:76:90:f4:
         20:cf:d4:13:54:53:b3:d7:be:d6:74:66:d2:95:d6:47:fd:9b:
         31:3a:f3:a0:13:93:2d:69:91:80:0c:75:5f:66:52:53:e7:bd:
         b0:3a:b0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:39:00 2026 by rpki-client