Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B00DC/2FBBC36E001811F1B6A12A14426F56BC/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.mft
File:                     Vd5CtrGL1XmaJuhCmWED-jS8Fxg.mft (raw, json)
Hash identifier:          s4tQcU4cOibX7odEEGUaF+OBLqPEGRGHF0bEJlc7pBE=
Subject key identifier:   01:E7:E6:8A:2E:A4:BF:FE:A4:62:74:6F:51:46:1E:F5:8F:F5:91:3C
Authority key identifier: 55:DE:42:B6:B1:8B:D5:79:9A:26:E8:42:99:61:03:FA:34:BC:17:18
Certificate issuer:       /CN=A91B00DC/serialNumber=55DE42B6B18BD5799A26E842996103FA34BC1718
Certificate serial:       55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B00DC/2FBBC36E001811F1B6A12A14426F56BC/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.mft
Manifest number:          52
Signing time:             Fri 03 Jul 2026 09:12:08 +0000
Manifest this update:     Fri 03 Jul 2026 09:12:07 +0000
Manifest next update:     Fri 10 Jul 2026 09:12:07 +0000
Files and hashes:         1: Vd5CtrGL1XmaJuhCmWED-jS8Fxg.crl (hash: mcg5rLvqapsMCJ8e8ZsdrrYsr+gsziesPU1fkHUKzlI=)
                          2: 63ABE3C0001811F1804E761C426F56BC.roa (hash: yY65u/jqJQmHqnGhqt0gIcasuvIles8dQWtNSaAAQqc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B00DC/2FBBC36E001811F1B6A12A14426F56BC/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.crl
                          rsync://rpki.apnic.net/member_repository/A91B00DC/2FBBC36E001811F1B6A12A14426F56BC/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 10 Jul 2026 09:12:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B00DC, serialNumber=55DE42B6B18BD5799A26E842996103FA34BC1718
        Validity
            Not Before: Jul  3 09:12:07 2026 GMT
            Not After : Jul 10 09:12:07 2026 GMT
        Subject: CN=6a477ce8-585a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:f3:ba:7c:60:56:cf:c6:39:e0:7b:fb:e3:ef:
                    5d:a1:42:9f:05:96:d6:64:bd:ed:4e:f9:34:b6:94:
                    4a:fd:dd:a8:0a:e8:5d:7c:26:1f:98:12:53:2d:58:
                    70:59:68:0f:e0:53:1f:13:44:fa:89:de:89:0c:65:
                    73:ff:64:86:0d:42:2a:23:d7:ef:f8:98:52:25:d3:
                    ae:70:bf:ed:22:06:c4:e9:b0:51:d0:da:08:b2:bb:
                    d9:65:5e:fc:1d:91:29:39:d7:86:e1:b6:ae:b7:90:
                    d4:69:44:72:31:cb:51:5a:3a:18:4a:2c:d7:1d:8b:
                    95:b9:44:45:0c:6d:cc:78:1b:d7:f9:24:79:9d:19:
                    13:b4:a3:1e:8d:9e:71:c5:74:9b:4f:f9:59:6c:99:
                    dc:3f:23:a3:80:be:da:7f:b7:30:e5:02:1b:1e:8a:
                    c0:77:32:fd:50:17:e5:a1:20:c0:c0:c6:f4:e0:ce:
                    64:b2:b0:00:5d:1a:a5:81:a8:62:54:20:89:48:7f:
                    2a:5e:8f:16:e0:cb:fd:7a:28:49:88:ba:9d:67:f2:
                    19:8f:7c:25:cb:4f:1b:31:56:f2:2b:b0:1e:73:10:
                    84:d1:ec:80:50:cd:54:f6:4c:cb:51:ad:de:19:3c:
                    bc:f4:35:82:10:27:93:52:7e:cc:26:e2:67:7d:ff:
                    9e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:E7:E6:8A:2E:A4:BF:FE:A4:62:74:6F:51:46:1E:F5:8F:F5:91:3C
            X509v3 Authority Key Identifier:
                keyid:55:DE:42:B6:B1:8B:D5:79:9A:26:E8:42:99:61:03:FA:34:BC:17:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B00DC/2FBBC36E001811F1B6A12A14426F56BC/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B00DC/2FBBC36E001811F1B6A12A14426F56BC/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:b0:f0:93:6c:28:79:88:ae:b1:2b:c7:96:5a:63:00:c7:ca:
         2c:08:b1:15:3f:13:cb:9e:62:b6:54:fc:d5:f0:66:b8:c5:31:
         dd:2d:b6:08:a8:f2:42:85:5a:a4:cb:8f:76:92:86:24:49:87:
         b0:07:d7:10:29:79:84:2a:a7:23:02:e3:14:ec:d6:10:67:17:
         22:28:ff:99:aa:25:0f:28:b2:4a:14:c4:bc:40:f0:6b:80:41:
         19:c3:b8:d5:5e:20:43:ab:97:ef:82:f3:64:f6:ef:46:74:61:
         f9:00:8b:7e:48:b2:ba:ac:66:4d:0b:b6:05:dd:82:70:ee:9c:
         13:51:a5:b4:0f:7d:3e:8d:6c:b3:fa:da:46:3d:90:f8:2d:3f:
         a7:96:db:45:bb:8b:77:2d:cb:77:16:8f:e3:30:1d:58:3a:6b:
         c3:c9:36:f0:63:14:be:dc:dd:d5:e1:7f:20:cb:68:97:44:6a:
         4d:ff:65:33:4b:ac:1c:ce:22:1b:d5:9b:2e:c0:91:0a:2c:c7:
         ef:35:ab:f2:52:01:a7:d4:36:92:94:35:8a:0b:0c:16:7a:2c:
         e8:58:77:90:bc:57:7c:ef:1d:27:ff:6e:96:ac:18:a8:45:fc:
         df:08:35:5a:02:a5:f0:5a:18:bd:d0:d5:80:ce:d0:a4:12:4f:
         1c:7a:88:8e
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
MDBEQzExMC8GA1UEBRMoNTVERTQyQjZCMThCRDU3OTlBMjZFODQyOTk2MTAzRkEz
NEJDMTcxODAeFw0yNjA3MDMwOTEyMDdaFw0yNjA3MTAwOTEyMDdaMBgxFjAUBgNV
BAMTDTZhNDc3Y2U4LTU4NWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDp87p8YFbPxjnge/vj712hQp8FltZkve1O+TS2lEr93agK6F18Jh+YElMtWHBZ
aA/gUx8TRPqJ3okMZXP/ZIYNQioj1+/4mFIl065wv+0iBsTpsFHQ2giyu9llXvwd
kSk514bhtq63kNRpRHIxy1FaOhhKLNcdi5W5REUMbcx4G9f5JHmdGRO0ox6NnnHF
dJtP+Vlsmdw/I6OAvtp/tzDlAhseisB3Mv1QF+WhIMDAxvTgzmSysABdGqWBqGJU
IIlIfypejxbgy/16KEmIup1n8hmPfCXLTxsxVvIrsB5zEITR7IBQzVT2TMtRrd4Z
PLz0NYIQJ5NSfswm4md9/55nAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUAefmii6k
v/6kYnRvUUYe9Y/1kTwwHwYDVR0jBBgwFoAUVd5CtrGL1XmaJuhCmWED+jS8Fxgw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIwMERDLzJGQkJDMzZFMDAx
ODExRjFCNkExMkExNDQyNkY1NkJDL1ZkNUN0ckdMMVhtYUp1aENtV0VELWpTOEZ4
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvVmQ1Q3RyR0wxWG1hSnVoQ21XRUQtalM4RnhnLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIw
MERDLzJGQkJDMzZFMDAxODExRjFCNkExMkExNDQyNkY1NkJDL1ZkNUN0ckdMMVht
YUp1aENtV0VELWpTOEZ4Zy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBasPCTbCh5iK6xK8eWWmMAx8osCLEVPxPLnmK2VPzV8Ga4xTHdLbYIqPJChVqk
y492koYkSYewB9cQKXmEKqcjAuMU7NYQZxciKP+ZqiUPKLJKFMS8QPBrgEEZw7jV
XiBDq5fvgvNk9u9GdGH5AIt+SLK6rGZNC7YF3YJw7pwTUaW0D30+jWyz+tpGPZD4
LT+nlttFu4t3Lct3Fo/jMB1YOmvDyTbwYxS+3N3V4X8gy2iXRGpN/2UzS6wcziIb
1ZsuwJEKLMfvNavyUgGn1DaSlDWKCwwWeizoWHeQvFd87x0n/26WrBioRfzfCDVa
AqXwWhi90NWAztCkEk8ceoiO
-----END CERTIFICATE-----
Generated at Sun Jul 5 08:39:37 2026 by rpki-client