Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916537A/9F817BB6276A11F1A891B17FC2833773/VqcyG_yMPsLpkWD6MztPVMGClGo.mft
File:                     VqcyG_yMPsLpkWD6MztPVMGClGo.mft (raw, json)
Hash identifier:          5suRWWBUCjHVJHuizPCegqy9VZBZaQbPH8YCwXwpAZM=
Subject key identifier:   30:D9:04:8A:37:94:C7:4D:2D:EB:4A:CB:BB:3A:7F:42:69:D6:44:D2
Authority key identifier: 56:A7:32:1B:FC:8C:3E:C2:E9:91:60:FA:33:3B:4F:54:C1:82:94:6A
Certificate issuer:       /CN=A916537A/serialNumber=56A7321BFC8C3EC2E99160FA333B4F54C182946A
Certificate serial:       46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqcyG_yMPsLpkWD6MztPVMGClGo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916537A/9F817BB6276A11F1A891B17FC2833773/VqcyG_yMPsLpkWD6MztPVMGClGo.mft
Manifest number:          44
Signing time:             Mon 27 Jul 2026 10:50:12 +0000
Manifest this update:     Mon 27 Jul 2026 10:50:12 +0000
Manifest next update:     Mon 03 Aug 2026 10:50:12 +0000
Files and hashes:         1: VqcyG_yMPsLpkWD6MztPVMGClGo.crl (hash: ooKoEG6uM16umJFfjS9N1bqyS6NW+cuarxDvwCPMnG0=)
                          2: 955C204027D911F183CCD80FA7833773.roa (hash: c6JUDw7tq3Ict9tWMfIj9zis/6zIdlmfIPXyLf2HU9E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916537A/9F817BB6276A11F1A891B17FC2833773/VqcyG_yMPsLpkWD6MztPVMGClGo.crl
                          rsync://rpki.apnic.net/member_repository/A916537A/9F817BB6276A11F1A891B17FC2833773/VqcyG_yMPsLpkWD6MztPVMGClGo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqcyG_yMPsLpkWD6MztPVMGClGo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 10:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916537A, serialNumber=56A7321BFC8C3EC2E99160FA333B4F54C182946A
        Validity
            Not Before: Jul 27 10:50:12 2026 GMT
            Not After : Aug  3 10:50:12 2026 GMT
        Subject: CN=6a6737e4-e3d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3b:2a:b4:fa:d8:e6:be:9d:90:9b:b7:01:50:
                    7b:e9:fa:f2:59:6f:fe:b4:66:9b:88:cf:3e:fb:66:
                    08:3f:90:57:94:88:0a:a1:ea:7c:74:eb:a6:85:f4:
                    3b:2c:14:22:c3:b9:68:c6:87:26:cb:e6:3e:6c:f1:
                    97:d8:4a:3d:17:d4:cd:e9:76:7c:8a:46:ee:b3:1d:
                    45:5d:5e:6c:29:3c:28:84:ef:f8:b2:b2:3f:7b:9b:
                    aa:61:29:17:28:12:2a:00:d3:b0:5a:4b:da:d4:c5:
                    5e:58:36:cc:8b:86:f2:de:0c:c8:06:3d:24:90:26:
                    00:63:33:7c:75:e4:e4:14:12:83:6d:26:70:2e:67:
                    ae:e6:56:1d:9c:13:7e:28:99:dc:20:c8:49:80:c1:
                    28:e7:b6:5f:16:6c:48:53:27:15:97:78:0f:da:26:
                    a0:4e:37:a5:dc:50:46:22:7b:86:40:05:e9:40:6f:
                    4c:ac:a0:35:5a:4b:fe:d0:30:19:a3:32:45:58:73:
                    18:e1:8e:d9:f7:00:0e:95:31:74:7a:1d:9c:aa:ca:
                    b4:2e:1c:ec:10:a5:bc:a0:30:62:97:e9:c8:6e:95:
                    02:63:da:d9:a0:c1:2d:2d:31:69:25:24:9f:72:fa:
                    22:97:88:cd:b3:c5:22:d1:bc:de:b1:ec:06:a5:c3:
                    c9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:D9:04:8A:37:94:C7:4D:2D:EB:4A:CB:BB:3A:7F:42:69:D6:44:D2
            X509v3 Authority Key Identifier:
                keyid:56:A7:32:1B:FC:8C:3E:C2:E9:91:60:FA:33:3B:4F:54:C1:82:94:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916537A/9F817BB6276A11F1A891B17FC2833773/VqcyG_yMPsLpkWD6MztPVMGClGo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqcyG_yMPsLpkWD6MztPVMGClGo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916537A/9F817BB6276A11F1A891B17FC2833773/VqcyG_yMPsLpkWD6MztPVMGClGo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:f9:ca:8b:4a:bd:04:f3:e2:cf:4b:6d:61:86:2d:89:34:3c:
         88:83:a7:3a:a9:31:7c:9d:c4:46:b0:81:f1:b5:f6:0f:3c:2f:
         f7:39:29:cf:39:95:29:f3:69:1a:54:1d:c6:e8:9a:7b:1c:25:
         8a:b7:d9:2f:14:74:62:51:cc:68:59:a3:94:50:4d:95:50:27:
         a6:bc:37:90:5e:63:8a:cb:09:d3:38:c7:d3:a4:51:e6:83:07:
         ff:b6:9f:dd:ad:1d:75:0b:2e:78:6e:f1:5d:c3:c9:59:19:34:
         cd:54:08:0b:3d:ae:00:dc:11:c7:79:a5:13:0a:6e:c3:4a:fa:
         2c:17:96:f2:3d:98:41:54:c3:44:a7:0d:0c:15:31:78:cf:42:
         9c:96:3a:b7:bd:0e:99:c7:65:c3:62:af:d2:f5:c5:4b:a2:19:
         2a:1a:97:3a:c8:d2:d9:92:b5:a7:ea:c2:3a:40:1c:fe:01:02:
         1a:d1:09:6f:00:69:c2:71:54:7a:5b:96:bb:2b:14:4c:1d:75:
         81:85:8c:17:06:b3:ae:ab:ad:06:ef:8c:94:0d:1e:4b:42:8b:
         3a:f6:6f:7b:3c:4e:76:43:7a:8d:51:1c:77:52:4c:20:42:9b:
         13:67:eb:5f:cc:bf:12:38:1b:58:dd:7b:69:d1:99:b7:14:d7:
         b4:2f:f6:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:39:13 2026 by rpki-client