Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft
File:                     vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft (raw, json)
Hash identifier:          t4A/heZIdHLb1umW5MXq5nDpBK345/XHxwHYwNS8WYs=
Subject key identifier:   6A:CA:B0:D2:10:28:A2:34:CF:0C:C9:83:79:B4:93:C5:48:A8:AB:E0
Authority key identifier: BE:63:41:A7:CC:0C:A0:F6:C1:A1:5E:04:66:EC:71:55:B8:28:3C:9D
Certificate issuer:       /CN=A91862F9/serialNumber=BE6341A7CC0CA0F6C1A15E0466EC7155B8283C9D
Certificate serial:       023E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft
Manifest number:          022D
Signing time:             Fri 17 Jul 2026 03:38:48 +0000
Manifest this update:     Fri 17 Jul 2026 03:38:47 +0000
Manifest next update:     Fri 24 Jul 2026 03:38:47 +0000
Files and hashes:         1: vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl (hash: UestPO+eJW2RC1XVbbpWwnpPwVqiL6qBO8DYe47foVM=)
                          2: 46E49D1CE79811EEA89C5E56C4F9AE02.roa (hash: ZP+Fsk2FtcDycpwS+m0D9syGyr7ezG1ogPe4OjBVvG4=)
                          3: EF15AC2A9EB611F09A08B07EC4F9AE02.roa (hash: 85UD2/db2JNfOGlb39R7ySUL/Ipyzf/y8vjlGn3oMtE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl
                          rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 03:38:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 574 (0x23e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862F9, serialNumber=BE6341A7CC0CA0F6C1A15E0466EC7155B8283C9D
        Validity
            Not Before: Jul 17 03:38:47 2026 GMT
            Not After : Jul 24 03:38:47 2026 GMT
        Subject: CN=6a59a3c8-67c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:82:e2:e0:4c:01:2c:19:93:11:75:6d:4b:71:
                    b7:a0:d0:b1:f4:37:4b:1a:ba:4a:1a:85:5e:cf:f1:
                    0f:09:dd:3e:5b:d8:6b:66:4a:a1:09:1f:1d:10:13:
                    d2:7c:e6:2b:20:53:cb:9b:1b:87:e9:d5:17:eb:86:
                    e7:f7:a3:74:c5:f4:17:29:ea:da:91:6f:cd:ef:72:
                    b1:df:fd:bf:99:57:92:8c:29:0d:3a:e3:b7:28:74:
                    dc:82:ff:0d:52:51:f9:d8:f5:24:0a:5f:d2:05:ff:
                    2a:4c:3f:81:5f:86:ff:1e:f1:b7:5d:b0:51:3c:8b:
                    67:54:de:4e:57:14:d5:1a:02:b3:c7:be:6f:ce:5e:
                    fb:ec:13:43:5c:6f:18:1f:75:ea:60:3c:fc:bb:87:
                    c7:64:b3:a5:ed:55:ed:9c:f4:e4:fb:89:0c:0c:dd:
                    dc:64:36:04:3c:29:c5:aa:c0:3e:db:28:e1:f4:60:
                    5f:ec:20:cf:50:4c:e5:95:98:f6:39:0d:57:76:7f:
                    10:89:51:aa:b0:6d:f3:aa:d7:08:00:3b:7d:5d:11:
                    eb:c2:4a:cb:70:0f:88:38:a6:4d:5a:f5:93:2c:3c:
                    db:31:88:ea:12:7b:ce:fc:23:fe:8f:f9:15:8b:c9:
                    49:06:6b:0b:f4:0b:f5:82:86:5c:03:53:d2:4f:d3:
                    f3:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:CA:B0:D2:10:28:A2:34:CF:0C:C9:83:79:B4:93:C5:48:A8:AB:E0
            X509v3 Authority Key Identifier:
                keyid:BE:63:41:A7:CC:0C:A0:F6:C1:A1:5E:04:66:EC:71:55:B8:28:3C:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:14:e7:c6:df:fe:b6:a8:a7:76:07:5b:09:18:29:a9:8f:8e:
         d7:0a:dd:0b:87:d1:1a:f5:78:51:15:8e:ee:06:5c:82:13:7b:
         8d:df:ce:37:7a:2a:3f:82:03:4e:2b:e3:71:cd:8d:ba:fc:c1:
         c8:03:a5:d4:38:92:97:17:92:f7:8c:97:02:ec:35:e5:1f:5f:
         0a:f3:a0:f9:1b:bd:e8:04:d9:50:e2:96:d4:57:bf:fd:74:76:
         ca:64:54:32:8f:12:bc:49:25:83:af:bf:35:bf:f0:79:5c:e6:
         1d:9f:4f:10:49:66:29:36:70:87:0e:4a:e2:ca:65:32:77:bd:
         48:64:7d:bc:43:51:35:65:7a:ed:59:dc:f4:ca:dd:2f:6c:0d:
         bf:8e:3d:09:7f:f0:58:de:38:76:40:29:11:79:b7:73:80:d0:
         ff:87:43:98:6d:40:b7:b5:33:5b:14:e2:eb:7d:96:f3:f5:de:
         41:a7:03:fe:13:a1:a1:42:97:1e:10:f9:37:f3:77:6d:5a:14:
         a6:3a:19:e5:71:fd:b8:63:fe:5d:0c:d9:e4:76:7a:af:fb:48:
         41:06:69:7e:da:ed:43:28:b6:01:db:fa:61:7d:c7:d2:9e:44:
         3b:0b:9e:77:27:c2:9b:6e:60:b7:95:3f:0e:aa:ea:88:f4:86:
         9d:e0:1c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 07:14:25 2026 by rpki-client