Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft
File:                     VktpF48mnvuWt2kW94FwdU6PDIc.mft (raw, json)
Hash identifier:          BFtw8RDoRxnglOikXcNlWtvlrhJA0y1uBlvEspkkM60=
Subject key identifier:   DC:61:56:94:F1:02:2E:FD:23:85:A9:23:03:A0:90:BE:B0:5D:54:3E
Authority key identifier: 56:4B:69:17:8F:26:9E:FB:96:B7:69:16:F7:81:70:75:4E:8F:0C:87
Certificate issuer:       /CN=A91A99C5/serialNumber=564B69178F269EFB96B76916F78170754E8F0C87
Certificate serial:       B5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VktpF48mnvuWt2kW94FwdU6PDIc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft
Manifest number:          AC
Signing time:             Mon 01 Jun 2026 07:59:01 +0000
Manifest this update:     Mon 01 Jun 2026 07:59:00 +0000
Manifest next update:     Mon 08 Jun 2026 07:59:00 +0000
Files and hashes:         1: VktpF48mnvuWt2kW94FwdU6PDIc.crl (hash: EQ7nx8VbhTzC5S4fTJOSViLa4Ua4xnTkt/E1T2J8I70=)
                          2: AE31872C5DBD11F083DD7F61C4F9AE02.roa (hash: PtmJapetaAUxJ5KEUkr9vfhR8x3TFcjZY4x2L67+TqA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.crl
                          rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VktpF48mnvuWt2kW94FwdU6PDIc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 07:58:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181 (0xb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A99C5, serialNumber=564B69178F269EFB96B76916F78170754E8F0C87
        Validity
            Not Before: Jun  1 07:59:00 2026 GMT
            Not After : Jun  8 07:59:00 2026 GMT
        Subject: CN=6a1d3bc4-2c99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f6:0b:59:65:66:ae:05:93:0d:f2:85:3e:4e:
                    e9:0e:2f:db:8c:ad:15:54:5c:36:29:d4:21:ef:d8:
                    98:35:1e:26:8e:ef:4a:18:64:3a:3d:db:3d:73:fd:
                    b7:9c:da:57:ca:3a:57:b3:10:e0:7e:99:e0:e1:5e:
                    03:0c:06:64:05:c8:0f:8c:05:8c:65:36:18:0f:a3:
                    15:68:35:4c:8b:2b:5f:ed:34:56:5d:23:37:c3:0d:
                    17:5b:5e:0c:ac:12:c3:e1:e6:3d:10:14:44:d8:ae:
                    15:2a:53:80:5d:02:03:4d:d6:34:79:c5:ed:79:cb:
                    23:db:7c:36:f2:95:6d:a0:51:e1:ce:41:4c:08:66:
                    93:90:fd:88:3b:4a:9d:1b:4c:0f:5d:79:bb:0a:c7:
                    10:8e:5e:83:5b:66:1a:9f:ab:0f:76:c4:81:ea:aa:
                    fc:76:c0:cb:50:67:66:2e:27:de:0b:40:90:c4:41:
                    8b:de:1e:6c:3a:2f:7a:47:49:40:7e:26:e6:68:67:
                    bf:f2:e6:fa:de:38:69:86:ef:a8:a3:55:fd:c4:6c:
                    db:a2:03:31:8c:61:40:b9:a3:4c:9f:16:59:57:05:
                    2d:a0:9a:dd:f1:3b:b0:ce:c5:66:34:cd:a6:03:26:
                    ef:36:13:d4:ea:58:3e:f0:82:e5:7d:05:8f:4f:ec:
                    80:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:61:56:94:F1:02:2E:FD:23:85:A9:23:03:A0:90:BE:B0:5D:54:3E
            X509v3 Authority Key Identifier:
                keyid:56:4B:69:17:8F:26:9E:FB:96:B7:69:16:F7:81:70:75:4E:8F:0C:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VktpF48mnvuWt2kW94FwdU6PDIc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:87:a6:c6:16:74:fc:46:d2:59:f9:ed:40:69:fc:60:31:2c:
         2c:9e:47:a2:a4:7a:a5:ac:94:cf:29:c3:17:70:92:31:69:37:
         9f:cf:87:e3:3d:c6:d2:2f:4b:e0:c8:93:b8:2d:fe:f5:5b:d7:
         20:eb:97:5f:50:6c:00:8d:27:5d:d6:ab:d3:29:51:c4:5a:d3:
         a4:f0:de:0c:2a:6c:1a:d8:6c:3b:6c:bc:c7:d7:0e:0a:5e:1a:
         20:d0:99:b1:eb:53:9a:93:a0:72:c5:ca:8d:a2:d8:d9:7f:1d:
         b2:aa:b1:92:7e:cf:ce:a5:55:cb:62:a5:5a:85:ff:9c:cd:63:
         d5:3f:3a:f4:fc:e6:b5:94:cd:7a:62:d3:25:7e:b3:63:45:a2:
         15:b5:80:fd:e2:7b:5a:a6:18:81:66:ca:e1:48:44:b6:09:bb:
         64:83:c2:ba:17:3d:42:cc:d6:65:9e:92:0d:cf:99:ae:b5:ab:
         31:d9:70:cc:1d:c0:15:7a:fc:b6:93:d7:69:0c:18:5e:59:3b:
         34:7e:80:7b:aa:c0:ff:89:bd:d3:42:5d:d4:dc:6c:28:8c:9a:
         10:da:26:9b:9d:a0:90:7e:ae:f8:5c:89:d9:9c:81:c5:dd:05:
         35:fb:f5:03:bd:f2:53:2e:ec:b7:b8:79:ab:67:90:4b:04:c7:
         f7:58:4a:c2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTk5QzUxMTAvBgNVBAUTKDU2NEI2OTE3OEYyNjlFRkI5NkI3NjkxNkY3ODE3MDc1
NEU4RjBDODcwHhcNMjYwNjAxMDc1OTAwWhcNMjYwNjA4MDc1OTAwWjAYMRYwFAYD
VQQDEw02YTFkM2JjNC0yYzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvPYLWWVmrgWTDfKFPk7pDi/bjK0VVFw2KdQh79iYNR4mju9KGGQ6Pds9c/23
nNpXyjpXsxDgfpng4V4DDAZkBcgPjAWMZTYYD6MVaDVMiytf7TRWXSM3ww0XW14M
rBLD4eY9EBRE2K4VKlOAXQIDTdY0ecXtecsj23w28pVtoFHhzkFMCGaTkP2IO0qd
G0wPXXm7CscQjl6DW2Yan6sPdsSB6qr8dsDLUGdmLifeC0CQxEGL3h5sOi96R0lA
fibmaGe/8ub63jhphu+oo1X9xGzbogMxjGFAuaNMnxZZVwUtoJrd8TuwzsVmNM2m
AybvNhPU6lg+8ILlfQWPT+yARQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNxhVpTx
Ai79I4WpIwOgkL6wXVQ+MB8GA1UdIwQYMBaAFFZLaRePJp77lrdpFveBcHVOjwyH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTlDNS9GQzAxRTg3QzVE
QkIxMUYwOUFBMTc4NTBDNEY5QUUwMi9Wa3RwRjQ4bW52dVd0MmtXOTRGd2RVNlBE
SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1ZrdHBGNDhtbnZ1V3Qya1c5NEZ3ZFU2UERJYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OTlDNS9GQzAxRTg3QzVEQkIxMUYwOUFBMTc4NTBDNEY5QUUwMi9Wa3RwRjQ4bW52
dVd0MmtXOTRGd2RVNlBESWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfYemxhZ0/EbSWfntQGn8YDEsLJ5HoqR6payUzynDF3CSMWk3n8+H4z3G0i9L
4MiTuC3+9VvXIOuXX1BsAI0nXdar0ylRxFrTpPDeDCpsGthsO2y8x9cOCl4aINCZ
setTmpOgcsXKjaLY2X8dsqqxkn7PzqVVy2KlWoX/nM1j1T869PzmtZTNemLTJX6z
Y0WiFbWA/eJ7WqYYgWbK4UhEtgm7ZIPCuhc9QszWZZ6SDc+ZrrWrMdlwzB3AFXr8
tpPXaQwYXlk7NH6Ae6rA/4m900Jd1NxsKIyaENomm52gkH6u+FyJ2ZyBxd0FNfv1
A73yUy7st7h5q2eQSwTH91hKwg==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:30:00 2026 by rpki-client