Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.mft
File:                     VfLp2yg8tFniZmj5Ik8ms6KkRk4.mft (raw, json)
Hash identifier:          d2VdB18GENSF8gWv1XS3k9jMyX9ZHDwKQmfbUsKdyJ0=
Subject key identifier:   A1:12:AE:55:0B:6D:5B:CB:B0:93:5D:9E:22:02:9D:79:08:36:F2:95
Authority key identifier: 55:F2:E9:DB:28:3C:B4:59:E2:66:68:F9:22:4F:26:B3:A2:A4:46:4E
Certificate issuer:       /CN=A915B878/serialNumber=55F2E9DB283CB459E26668F9224F26B3A2A4464E
Certificate serial:       0685
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLp2yg8tFniZmj5Ik8ms6KkRk4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.mft
Manifest number:          0683
Signing time:             Tue 18 Aug 2026 22:50:56 +0000
Manifest this update:     Tue 18 Aug 2026 22:50:56 +0000
Manifest next update:     Tue 25 Aug 2026 22:50:56 +0000
Files and hashes:         1: VfLp2yg8tFniZmj5Ik8ms6KkRk4.crl (hash: y6CwYyS68WouGB/mgFR41bN7L93aQqe57PFI8ZW7wrQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.crl
                          rsync://rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLp2yg8tFniZmj5Ik8ms6KkRk4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 22:50:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1669 (0x685)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B878, serialNumber=55F2E9DB283CB459E26668F9224F26B3A2A4464E
        Validity
            Not Before: Aug 18 22:50:56 2026 GMT
            Not After : Aug 25 22:50:56 2026 GMT
        Subject: CN=6a84e1d0-a0c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d3:ed:4b:7a:7a:0e:77:c8:ba:51:0d:fb:5b:
                    93:b1:28:e8:b3:33:ee:36:87:5f:03:a1:55:9b:9e:
                    b4:84:1c:05:34:66:b6:63:82:d6:20:53:5b:d2:d2:
                    87:09:ee:92:14:01:8c:e5:37:97:ee:d4:a9:5f:01:
                    8c:8c:88:fc:fb:01:1a:81:ec:80:a4:b1:b5:5e:45:
                    ad:d7:c1:d8:3e:6e:b4:a5:b6:dd:ae:bc:42:03:e5:
                    9f:90:47:b4:c5:67:6e:02:a6:f6:91:dd:94:b5:1f:
                    23:0b:17:00:8b:f4:35:8d:3a:f7:ae:58:d1:d3:28:
                    0d:50:d1:90:ef:74:ca:3c:c8:34:0d:14:af:a4:72:
                    90:40:e4:95:72:0d:e9:03:60:85:96:7c:82:c9:93:
                    0a:b9:bd:ef:76:f3:f4:4b:5e:77:aa:8c:db:f6:e7:
                    b4:13:bd:97:c6:9d:eb:e1:df:72:27:fb:52:55:6d:
                    fc:b2:0d:8a:df:75:7e:9e:f1:11:2b:c5:a6:18:62:
                    40:d4:71:c3:6a:07:d4:a2:a0:dc:46:24:ad:dd:be:
                    bc:ea:14:1c:27:f5:c2:7b:81:26:38:ee:48:47:4c:
                    ec:4d:3e:37:d8:e3:65:0d:67:90:53:bf:14:87:fe:
                    cc:5f:7d:95:41:76:fb:21:0b:ee:ae:fb:1c:bb:42:
                    5d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:12:AE:55:0B:6D:5B:CB:B0:93:5D:9E:22:02:9D:79:08:36:F2:95
            X509v3 Authority Key Identifier:
                keyid:55:F2:E9:DB:28:3C:B4:59:E2:66:68:F9:22:4F:26:B3:A2:A4:46:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLp2yg8tFniZmj5Ik8ms6KkRk4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:e4:2b:5b:0d:06:8e:ca:4e:e8:b9:03:96:e4:08:aa:58:fb:
         7d:38:b9:be:9c:59:ae:ed:d2:01:38:73:89:86:cb:4b:43:2b:
         a3:90:3b:1e:32:ea:6f:96:09:da:a5:93:69:44:33:7d:40:29:
         de:c0:cc:37:3d:16:ab:96:7e:fe:98:93:e6:e0:bb:81:44:5d:
         78:37:1e:65:85:5a:37:5e:67:e4:be:cd:b3:68:d2:9a:90:50:
         56:db:f4:02:e0:7c:98:08:7f:0f:d3:92:7d:5a:f4:35:fc:2a:
         43:f7:14:4e:36:3f:e1:b2:96:03:14:df:a2:74:fb:fb:ca:b1:
         b9:d6:3d:27:27:1a:c1:1e:42:c0:90:f5:07:4e:40:6f:9e:dd:
         47:eb:dc:1b:6a:fc:08:1b:03:6a:c6:61:af:20:7c:2c:d6:a3:
         3e:3d:ca:2e:6e:5d:63:12:54:7b:d4:e0:90:b9:a2:46:96:bb:
         bf:54:0a:17:14:7f:ba:82:59:18:7f:85:48:a5:e0:1c:4e:fc:
         80:4c:2b:8b:c4:12:64:be:68:5f:cd:f1:e8:d9:ea:a1:66:40:
         92:ec:cf:2c:87:54:6a:d6:0b:26:a9:30:81:76:28:51:f3:a9:
         73:00:59:c0:db:51:10:fc:e4:eb:e4:af:f4:9b:43:f4:18:38:
         6a:e2:d4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:53:56 2026 by rpki-client