Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft
File:                     VktpF48mnvuWt2kW94FwdU6PDIc.mft (raw, json)
Hash identifier:          zmrLxp7WkikOOe1o+EfhCzvJEvsJYy//wt3ymqyX/J0=
Subject key identifier:   B5:86:3C:13:3F:2D:49:5D:EE:CB:C6:37:FF:50:88:52:D8:A2:23:54
Authority key identifier: 56:4B:69:17:8F:26:9E:FB:96:B7:69:16:F7:81:70:75:4E:8F:0C:87
Certificate issuer:       /CN=A91A99C5/serialNumber=564B69178F269EFB96B76916F78170754E8F0C87
Certificate serial:       CB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VktpF48mnvuWt2kW94FwdU6PDIc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft
Manifest number:          C2
Signing time:             Fri 17 Jul 2026 08:08:25 +0000
Manifest this update:     Fri 17 Jul 2026 08:08:25 +0000
Manifest next update:     Fri 24 Jul 2026 08:08:25 +0000
Files and hashes:         1: VktpF48mnvuWt2kW94FwdU6PDIc.crl (hash: 5hLVVd68slg6ZrUfjj6mv2DYC4lVSYAYVwOaU7Y4jYA=)
                          2: AE31872C5DBD11F083DD7F61C4F9AE02.roa (hash: PtmJapetaAUxJ5KEUkr9vfhR8x3TFcjZY4x2L67+TqA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.crl
                          rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VktpF48mnvuWt2kW94FwdU6PDIc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 08:08:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 203 (0xcb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A99C5, serialNumber=564B69178F269EFB96B76916F78170754E8F0C87
        Validity
            Not Before: Jul 17 08:08:25 2026 GMT
            Not After : Jul 24 08:08:25 2026 GMT
        Subject: CN=6a59e2f9-08b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a6:f3:3f:b3:d8:e4:f5:c8:84:a5:90:f4:1d:
                    73:61:76:f2:f9:60:7b:d6:2e:81:5d:d7:cd:19:37:
                    23:b2:e5:61:c9:e6:d5:21:7b:9d:d3:99:56:37:f6:
                    cf:de:fa:07:18:58:e4:dd:ab:3d:ec:bd:85:06:2b:
                    ee:5d:6b:25:a4:69:12:f1:ea:3c:f7:df:e6:fe:5b:
                    36:f6:91:b6:7d:8b:15:a7:9a:43:02:b2:f2:e3:5d:
                    d0:38:b6:c0:bd:41:6e:03:4a:ce:39:6c:87:ec:00:
                    41:dc:ef:f5:ba:3e:5f:a9:d3:97:24:df:af:7f:c6:
                    b7:64:1c:e8:c1:3e:f8:8e:bd:74:26:28:38:20:f4:
                    cc:d8:92:1e:9d:d2:08:14:99:21:d9:e6:70:29:08:
                    36:9b:b6:be:e6:c0:04:6a:e0:32:a0:10:7c:f5:34:
                    37:c0:e7:76:2a:53:30:f8:e8:7a:a1:d1:30:af:20:
                    b6:f8:b1:40:34:8a:ff:8a:ea:48:c8:7b:98:97:33:
                    be:77:f7:8f:d5:80:03:cd:b3:b3:00:d2:44:76:90:
                    46:2c:dc:73:83:94:9e:ca:3c:b9:0c:b0:ac:63:cf:
                    02:fd:6f:8c:4e:75:98:1c:ea:0f:34:6b:fb:a7:6b:
                    09:37:9c:78:3e:97:01:5e:83:21:0f:4d:79:ed:c9:
                    4d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:86:3C:13:3F:2D:49:5D:EE:CB:C6:37:FF:50:88:52:D8:A2:23:54
            X509v3 Authority Key Identifier:
                keyid:56:4B:69:17:8F:26:9E:FB:96:B7:69:16:F7:81:70:75:4E:8F:0C:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VktpF48mnvuWt2kW94FwdU6PDIc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:d9:ea:e7:ad:2c:4c:a5:f5:fc:36:2c:b9:6f:1f:df:42:54:
         64:cd:dd:cf:1f:b0:d5:3a:0f:be:00:22:2b:19:47:3c:a1:39:
         e3:e6:1b:bd:78:d7:7a:f9:24:48:f9:d4:d3:68:41:cc:bc:f5:
         35:8d:6e:50:bd:e4:9d:29:50:db:b0:55:49:f1:b4:9a:bf:d0:
         bf:ef:de:ff:ce:e5:d4:8a:b3:79:d5:5d:7e:65:47:62:9f:d7:
         0b:55:b2:23:0b:f3:ba:08:bc:4c:55:21:fb:fc:ff:9b:7d:ed:
         65:fd:42:19:d4:b1:fc:e4:4a:4b:02:2f:f6:ae:9a:4f:93:06:
         02:ee:c2:4e:39:3c:22:02:d7:78:e1:ed:1a:ab:c6:4d:64:16:
         ce:09:b5:e6:3f:a6:0b:e3:b9:0d:85:b0:e7:19:b8:3c:ac:7b:
         59:8b:2d:48:46:c5:80:48:31:2b:6f:23:78:7e:17:31:72:72:
         cc:61:48:21:66:1f:f9:8b:19:d3:05:d4:4a:9c:fc:0f:88:87:
         48:c9:34:a5:47:2e:8c:2b:62:cc:0a:02:df:1a:11:2a:26:57:
         2e:97:43:94:5b:1a:e7:96:ea:d3:3e:c9:1d:f9:69:34:5f:ff:
         d9:bb:97:92:30:98:93:4c:c9:d6:93:d5:1d:8d:92:d0:a7:d5:
         41:a8:95:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:27:22 2026 by rpki-client