Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9159BAE/F2EE257C000211F1853A7DAD3C6F56BC/VJBJ1XYexh0wSzifWGuz9e6Ko8M.mft
File:                     VJBJ1XYexh0wSzifWGuz9e6Ko8M.mft (raw, json)
Hash identifier:          xrLL24Ngppd2/LDNkuj9v7TBjphvj2U72GESPzOuRXQ=
Subject key identifier:   89:59:E3:50:D1:9E:A1:83:AC:34:85:AD:E3:17:D3:D0:77:4A:4D:A8
Authority key identifier: 54:90:49:D5:76:1E:C6:1D:30:4B:38:9F:58:6B:B3:F5:EE:8A:A3:C3
Certificate issuer:       /CN=A9159BAE/serialNumber=549049D5761EC61D304B389F586BB3F5EE8AA3C3
Certificate serial:       3A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJBJ1XYexh0wSzifWGuz9e6Ko8M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9159BAE/F2EE257C000211F1853A7DAD3C6F56BC/VJBJ1XYexh0wSzifWGuz9e6Ko8M.mft
Manifest number:          38
Signing time:             Fri 15 May 2026 08:42:32 +0000
Manifest this update:     Fri 15 May 2026 08:42:32 +0000
Manifest next update:     Fri 22 May 2026 08:42:32 +0000
Files and hashes:         1: VJBJ1XYexh0wSzifWGuz9e6Ko8M.crl (hash: j5WsLj4otptXzzjNebdUdtER9/bQ3aO7LqE39EAWZF8=)
                          2: 550BEEB0000311F1893529AE3C6F56BC.roa (hash: 2Te1NMqIJ2B9pmKNpdjXQir35QqlPCZ8GX9jF3OrH3Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9159BAE/F2EE257C000211F1853A7DAD3C6F56BC/VJBJ1XYexh0wSzifWGuz9e6Ko8M.crl
                          rsync://rpki.apnic.net/member_repository/A9159BAE/F2EE257C000211F1853A7DAD3C6F56BC/VJBJ1XYexh0wSzifWGuz9e6Ko8M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJBJ1XYexh0wSzifWGuz9e6Ko8M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 May 2026 08:42:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9159BAE, serialNumber=549049D5761EC61D304B389F586BB3F5EE8AA3C3
        Validity
            Not Before: May 15 08:42:32 2026 GMT
            Not After : May 22 08:42:32 2026 GMT
        Subject: CN=6a06dc78-1110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a7:d5:0c:25:3b:35:54:ed:39:5e:80:04:73:
                    58:c6:21:e6:27:c6:06:20:05:a8:6c:43:fe:5a:ad:
                    7b:c6:db:6c:19:e8:8c:7d:a6:d8:06:c0:7e:6e:89:
                    cb:fe:49:0d:4d:fd:df:75:bf:fd:95:5e:df:dd:3a:
                    d5:02:dd:62:00:66:0d:71:f9:42:05:a3:74:d6:cf:
                    86:fc:cf:30:13:c1:ea:c2:38:c8:17:ff:ed:a8:69:
                    35:7c:05:bc:fa:46:d3:2d:05:c1:b2:de:36:42:fc:
                    56:7c:18:80:ac:e7:79:99:b4:52:f9:cc:31:b3:59:
                    f3:bc:29:b9:30:33:c0:a6:23:58:78:32:f4:b6:d5:
                    fa:71:d6:09:c2:8f:e4:d8:47:f0:d3:4a:d5:e8:65:
                    9f:35:a0:d6:60:d2:30:6c:46:9e:b2:2f:40:92:c9:
                    8c:76:af:66:1d:9d:d0:3a:c8:7e:8a:1e:b9:0e:3f:
                    75:24:70:7f:cb:85:7d:67:7f:7f:69:b3:04:c1:e8:
                    ab:ed:6c:37:3b:84:c5:ca:c4:7f:9b:83:eb:6e:cc:
                    98:b5:c3:2f:46:af:ef:a1:cd:71:9b:57:c2:2f:65:
                    c3:3a:10:93:39:12:f8:ab:43:e4:ed:6f:8c:a2:99:
                    e4:16:de:59:b4:ee:51:79:c6:ae:49:2b:cb:be:9e:
                    0c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:59:E3:50:D1:9E:A1:83:AC:34:85:AD:E3:17:D3:D0:77:4A:4D:A8
            X509v3 Authority Key Identifier:
                keyid:54:90:49:D5:76:1E:C6:1D:30:4B:38:9F:58:6B:B3:F5:EE:8A:A3:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9159BAE/F2EE257C000211F1853A7DAD3C6F56BC/VJBJ1XYexh0wSzifWGuz9e6Ko8M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJBJ1XYexh0wSzifWGuz9e6Ko8M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159BAE/F2EE257C000211F1853A7DAD3C6F56BC/VJBJ1XYexh0wSzifWGuz9e6Ko8M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:c8:4f:8d:ef:06:8c:de:3f:86:d0:bd:ba:e7:1d:51:4e:99:
         20:17:d5:42:62:ca:28:b0:f5:06:aa:b6:17:99:b0:16:a9:d0:
         dd:01:27:e7:cf:f5:70:68:2d:6d:ea:8c:f6:96:38:4d:06:fc:
         7a:fa:78:ed:33:2d:3a:64:1b:bb:c0:b9:37:55:c5:9a:f5:3c:
         6f:47:a2:e3:2e:c8:7d:fd:ad:d1:3f:a6:37:99:4a:02:a9:8a:
         f6:69:12:db:a1:39:05:b9:44:d6:c5:f0:67:2c:13:87:c7:bc:
         be:4e:c7:d3:0b:4c:2f:18:46:f3:fc:ce:03:ff:6e:1a:d2:01:
         ec:0e:d8:4c:e1:0b:2c:36:0a:03:ec:d3:6b:0a:31:53:e1:f0:
         1e:ce:4e:ae:77:1d:cb:c9:0f:6c:2f:28:ad:0e:4f:a9:3b:ec:
         14:ca:e5:e9:80:24:b8:bd:16:72:14:fd:e1:e2:04:71:41:83:
         1c:f8:b6:72:e8:e1:37:a9:15:17:75:8e:b8:5a:80:39:7d:50:
         20:d2:7b:d1:16:b2:c2:13:52:73:cb:92:dd:46:ac:7e:46:ef:
         aa:2c:6d:fe:a2:3e:b2:ed:95:20:8f:77:e3:13:5b:50:61:90:
         54:90:ea:04:02:bd:1a:73:8c:c7:a1:8a:33:19:89:51:11:e1:
         69:58:e0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 03:34:27 2026 by rpki-client