Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.mft
File:                     VlIPoddulfCBm23dSWe0VQRphp0.mft (raw, json)
Hash identifier:          Qm8+aY0FLE4mvWVsMpXcSHKdHaI1trE8AAgYfBKwofc=
Subject key identifier:   E2:B6:7D:1F:EB:8F:41:FB:2F:80:22:89:16:35:E2:19:51:84:C4:2E
Authority key identifier: 56:52:0F:A1:D7:6E:95:F0:81:9B:6D:DD:49:67:B4:55:04:69:86:9D
Certificate issuer:       /CN=A91A91CB/serialNumber=56520FA1D76E95F0819B6DDD4967B4550469869D
Certificate serial:       0121
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VlIPoddulfCBm23dSWe0VQRphp0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.mft
Manifest number:          011D
Signing time:             Wed 19 Aug 2026 06:31:10 +0000
Manifest this update:     Wed 19 Aug 2026 06:31:10 +0000
Manifest next update:     Wed 26 Aug 2026 06:31:10 +0000
Files and hashes:         1: VlIPoddulfCBm23dSWe0VQRphp0.crl (hash: nuyWcWthZHqbd9yS51sZWIah9kIZI4bZFyzZvIagmYc=)
                          2: EE8CD88EEA5A11EF922B276DC4F9AE02.roa (hash: hBcnC5PFlnMmxlDxFJ5KaA+un9OP3sAitrTcxqtGxZY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.crl
                          rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VlIPoddulfCBm23dSWe0VQRphp0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 06:31:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 289 (0x121)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A91CB, serialNumber=56520FA1D76E95F0819B6DDD4967B4550469869D
        Validity
            Not Before: Aug 19 06:31:10 2026 GMT
            Not After : Aug 26 06:31:10 2026 GMT
        Subject: CN=6a854dae-489f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:cd:39:c6:39:11:9d:a7:77:66:a7:c4:a2:26:
                    a5:25:eb:d0:27:62:29:29:42:22:a0:48:cf:c8:0d:
                    f3:32:97:51:ff:75:61:ba:04:c0:b0:69:6c:67:aa:
                    54:6c:61:3f:ed:c7:ab:93:d9:bc:62:2e:30:b6:a6:
                    9c:8f:da:31:27:1b:65:e4:2e:5a:25:d2:ce:e1:eb:
                    ba:24:56:84:5f:3f:f5:c8:d7:12:38:d1:c8:2c:37:
                    32:a9:96:89:2c:01:8a:c0:b2:0c:51:53:a8:1c:02:
                    37:73:87:e2:40:8a:cd:6a:fc:d1:3e:13:fc:13:12:
                    fd:ff:a5:7c:cd:1b:79:cf:94:02:e2:0d:5d:ac:d0:
                    2b:f0:f9:0e:69:08:eb:1a:93:f8:9c:ef:b3:2c:62:
                    ac:4d:6e:7b:c1:6a:a6:fd:44:de:ab:7c:49:75:fb:
                    78:24:03:14:e0:ee:7c:c1:90:d2:e2:43:39:3a:1f:
                    2a:e4:60:36:d3:1a:02:44:26:e3:19:45:f2:a0:c7:
                    e7:1a:42:c1:8a:e7:52:6a:e1:c9:6a:a6:7a:05:62:
                    74:f6:47:a7:0f:2f:14:d7:5d:bf:21:d1:05:d4:a0:
                    0f:79:a3:d0:93:25:e2:06:f9:9d:00:4c:66:6b:da:
                    75:57:d2:9e:08:f0:75:09:04:62:85:5d:ad:ae:d7:
                    f1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:B6:7D:1F:EB:8F:41:FB:2F:80:22:89:16:35:E2:19:51:84:C4:2E
            X509v3 Authority Key Identifier:
                keyid:56:52:0F:A1:D7:6E:95:F0:81:9B:6D:DD:49:67:B4:55:04:69:86:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VlIPoddulfCBm23dSWe0VQRphp0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:d5:c6:a0:b7:16:f4:68:a3:8d:67:61:a3:b2:c0:9f:f3:ed:
         26:c3:f2:57:a3:55:f8:a2:d8:52:ef:a8:da:3d:76:75:e8:36:
         ff:8f:c2:b2:54:82:7c:dd:40:60:77:d5:0b:a0:ba:62:b2:db:
         aa:35:26:99:ed:c8:f5:8a:62:d9:b7:24:b2:57:1e:49:36:7c:
         c9:19:04:01:37:0a:13:bf:e6:64:c8:2a:d8:a8:08:19:bb:5a:
         5c:c6:25:08:32:5a:f1:ca:d8:7d:b2:d8:19:98:41:6f:36:4f:
         62:06:e9:35:e6:98:34:04:3d:1c:a9:a4:d6:53:7a:e2:37:a4:
         f2:98:2b:d0:e1:72:d5:b8:31:84:53:c1:f4:a9:30:92:30:62:
         69:3b:27:95:96:17:18:bd:34:54:7e:44:24:c6:d7:a3:6e:1c:
         ca:63:77:8e:aa:fc:ac:04:15:dc:7a:4d:b2:e2:70:cf:2e:8f:
         c2:ad:1a:8a:fc:f3:c7:6d:43:1a:12:f2:db:c6:72:64:83:7f:
         49:60:41:82:df:d3:e5:a5:c7:51:45:e0:db:b5:3b:a5:28:d0:
         1f:e6:5e:9e:d1:13:98:ea:5a:26:3c:51:e9:da:c9:e1:e9:25:
         31:bd:bc:7f:73:ee:e4:86:30:81:e3:97:fc:f9:ad:59:f2:3d:
         08:1e:97:c7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTkxQ0IxMTAvBgNVBAUTKDU2NTIwRkExRDc2RTk1RjA4MTlCNkRERDQ5NjdCNDU1
MDQ2OTg2OUQwHhcNMjYwODE5MDYzMTEwWhcNMjYwODI2MDYzMTEwWjAYMRYwFAYD
VQQDEw02YTg1NGRhZS00ODlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnM05xjkRnad3ZqfEoialJevQJ2IpKUIioEjPyA3zMpdR/3VhugTAsGlsZ6pU
bGE/7cerk9m8Yi4wtqacj9oxJxtl5C5aJdLO4eu6JFaEXz/1yNcSONHILDcyqZaJ
LAGKwLIMUVOoHAI3c4fiQIrNavzRPhP8ExL9/6V8zRt5z5QC4g1drNAr8PkOaQjr
GpP4nO+zLGKsTW57wWqm/UTeq3xJdft4JAMU4O58wZDS4kM5Oh8q5GA20xoCRCbj
GUXyoMfnGkLBiudSauHJaqZ6BWJ09kenDy8U112/IdEF1KAPeaPQkyXiBvmdAExm
a9p1V9KeCPB1CQRihV2trtfxfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOK2fR/r
j0H7L4AiiRY14hlRhMQuMB8GA1UdIwQYMBaAFFZSD6HXbpXwgZtt3UlntFUEaYad
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTFDQi81QjZGQTM2MEVB
NUExMUVGQjg0QUU0NjhDNEY5QUUwMi9WbElQb2RkdWxmQ0JtMjNkU1dlMFZRUnBo
cDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1ZsSVBvZGR1bGZDQm0yM2RTV2UwVlFScGhwMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OTFDQi81QjZGQTM2MEVBNUExMUVGQjg0QUU0NjhDNEY5QUUwMi9WbElQb2RkdWxm
Q0JtMjNkU1dlMFZRUnBocDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAydXGoLcW9GijjWdho7LAn/PtJsPyV6NV+KLYUu+o2j12deg2/4/CslSCfN1A
YHfVC6C6YrLbqjUmme3I9Ypi2bckslceSTZ8yRkEATcKE7/mZMgq2KgIGbtaXMYl
CDJa8crYfbLYGZhBbzZPYgbpNeaYNAQ9HKmk1lN64jek8pgr0OFy1bgxhFPB9Kkw
kjBiaTsnlZYXGL00VH5EJMbXo24cymN3jqr8rAQV3HpNsuJwzy6Pwq0aivzzx21D
GhLy28ZyZIN/SWBBgt/T5aXHUUXg27U7pSjQH+ZentETmOpaJjxR6drJ4eklMb28
f3Pu5IYwgeOX/PmtWfI9CB6Xxw==
-----END CERTIFICATE-----
Generated at Fri Aug 21 02:48:06 2026 by rpki-client