Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft
File:                     0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft (raw, json)
Hash identifier:          W8Uz2mITQl9wl8ho17Nh00AJYvwTUUCK0TLWsFuT/hQ=
Subject key identifier:   95:E6:04:13:6B:53:CF:83:AD:0B:F3:84:DE:37:AD:59:DC:F2:04:37
Authority key identifier: D1:5A:5A:F9:AF:8D:99:DF:E5:E4:4D:35:EE:55:01:05:FE:D9:45:11
Certificate issuer:       /CN=A91A20A3/serialNumber=D15A5AF9AF8D99DFE5E44D35EE550105FED94511
Certificate serial:       356B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft
Manifest number:          355B
Signing time:             Mon 22 Jun 2026 15:00:20 +0000
Manifest this update:     Mon 22 Jun 2026 15:00:19 +0000
Manifest next update:     Mon 29 Jun 2026 15:00:19 +0000
Files and hashes:         1: 0Vpa-a-Nmd_l5E017lUBBf7ZRRE.crl (hash: bAlg8vuSqrwxb11cLg+9OKK774djoWMavGOfn3H1VAU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.crl
                          rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 15:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13675 (0x356b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A20A3, serialNumber=D15A5AF9AF8D99DFE5E44D35EE550105FED94511
        Validity
            Not Before: Jun 22 15:00:19 2026 GMT
            Not After : Jun 29 15:00:19 2026 GMT
        Subject: CN=6a394e04-5f82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:63:5a:09:b3:2c:c2:b9:81:74:12:30:22:ec:
                    b6:d6:c3:a4:29:cd:96:46:33:40:d8:f9:c8:2b:4d:
                    01:f1:61:4f:7d:bb:ea:18:c8:52:76:e7:35:f6:b0:
                    89:16:32:08:ad:34:91:3b:ea:55:f1:ab:80:1a:fd:
                    0c:e4:e6:3f:c3:3e:aa:e9:cb:e2:95:68:30:03:63:
                    4b:42:ec:54:e8:53:c6:94:3a:54:1f:a4:79:d6:9c:
                    f0:0f:d5:36:30:45:8e:60:d1:05:50:43:bb:21:15:
                    22:4d:77:2b:fe:88:26:c9:5d:7a:cf:19:22:65:41:
                    69:8f:e9:73:fb:bd:91:93:8b:72:5c:36:bf:b8:e5:
                    e0:e3:97:46:b5:65:e2:83:ee:36:2f:02:3b:a5:c2:
                    f0:47:ea:d0:b7:33:18:96:9c:f5:bf:1c:6a:d4:09:
                    37:34:88:64:b4:08:df:50:37:b7:3f:8b:73:49:93:
                    45:7d:9b:4f:72:54:97:df:e0:d1:f6:9e:5a:62:23:
                    1c:89:f9:69:83:9d:bf:54:1c:83:a9:2d:71:bc:af:
                    08:a1:9c:61:7a:95:29:8e:37:1d:1e:d5:aa:a2:2a:
                    e3:02:80:ab:4b:6e:65:0c:e6:b1:3d:e9:0a:8d:df:
                    ff:5a:2f:3d:58:be:6f:4f:8c:44:43:13:c9:17:89:
                    0f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:E6:04:13:6B:53:CF:83:AD:0B:F3:84:DE:37:AD:59:DC:F2:04:37
            X509v3 Authority Key Identifier:
                keyid:D1:5A:5A:F9:AF:8D:99:DF:E5:E4:4D:35:EE:55:01:05:FE:D9:45:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:cc:07:b1:fd:89:84:9b:a9:0f:13:6c:c2:38:49:a7:63:d7:
         64:14:bc:01:16:b7:d4:c5:af:bb:d4:d2:6d:1e:11:cd:23:18:
         88:3d:8f:a4:c4:0a:17:a7:30:1d:10:b7:02:e1:09:e5:ea:11:
         06:82:12:a7:c6:e3:7b:ff:19:72:c4:3e:22:dc:c8:3e:63:63:
         ad:61:12:47:c4:7b:70:3c:34:55:12:29:96:24:76:88:28:b3:
         8a:57:b5:1c:50:9f:a4:d2:f0:78:97:2d:f9:7c:d8:f7:06:e8:
         9e:16:99:b3:dc:d4:4b:d1:48:39:98:58:3d:99:c8:0d:88:62:
         cc:5f:17:4a:86:ab:6e:3a:74:bc:78:08:0d:b5:94:fb:cd:02:
         11:aa:0a:77:e9:3f:88:68:d9:6d:a8:1d:64:31:bd:ef:7b:65:
         7a:d0:09:c5:91:d7:43:ab:d1:6f:e1:02:99:fd:12:4f:e5:cb:
         1a:dc:3a:01:4b:40:be:ef:5d:ab:92:06:ff:48:0a:93:97:99:
         8f:02:e0:d7:43:15:6a:f0:71:3a:c4:61:d2:3c:2a:09:91:4a:
         1a:1d:26:9c:c9:a8:65:4d:0e:0c:b4:31:1a:9b:14:1c:e5:cc:
         58:82:31:72:91:d6:fe:f8:e8:79:de:23:c5:1f:32:74:b9:bc:
         2f:71:67:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:26:57 2026 by rpki-client