Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF7D7/820E2C74446A11F1A5622F6E97833773/vQ-y-thxIoOac4xJQZN5B-pcP9Q.mft
File:                     vQ-y-thxIoOac4xJQZN5B-pcP9Q.mft (raw, json)
Hash identifier:          vMC+HcTioE6XCDbRUyTW+WgUMIs+nuQuZ7dI7EalDO4=
Subject key identifier:   BF:84:79:77:1C:C3:63:F1:F8:94:A6:EC:F2:F8:D9:CD:78:05:63:03
Authority key identifier: BD:0F:B2:FA:D8:71:22:83:9A:73:8C:49:41:93:79:07:EA:5C:3F:D4
Certificate issuer:       /CN=A91BF7D7/serialNumber=BD0FB2FAD87122839A738C4941937907EA5C3FD4
Certificate serial:       17
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vQ-y-thxIoOac4xJQZN5B-pcP9Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF7D7/820E2C74446A11F1A5622F6E97833773/vQ-y-thxIoOac4xJQZN5B-pcP9Q.mft
Manifest number:          15
Signing time:             Mon 01 Jun 2026 09:50:48 +0000
Manifest this update:     Mon 01 Jun 2026 09:50:47 +0000
Manifest next update:     Mon 08 Jun 2026 09:50:47 +0000
Files and hashes:         1: vQ-y-thxIoOac4xJQZN5B-pcP9Q.crl (hash: XLiL3AZCGk1InrMepJ/Y4/URiPnuiIbNfzWkCuj/0Ks=)
                          2: 87331106446F11F1B67309509A833773.roa (hash: XggpXhcMUOMqUyl7v/7VH6Vt4POC4iPTSWjovesXRFA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF7D7/820E2C74446A11F1A5622F6E97833773/vQ-y-thxIoOac4xJQZN5B-pcP9Q.crl
                          rsync://rpki.apnic.net/member_repository/A91BF7D7/820E2C74446A11F1A5622F6E97833773/vQ-y-thxIoOac4xJQZN5B-pcP9Q.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vQ-y-thxIoOac4xJQZN5B-pcP9Q.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 09:50:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF7D7, serialNumber=BD0FB2FAD87122839A738C4941937907EA5C3FD4
        Validity
            Not Before: Jun  1 09:50:47 2026 GMT
            Not After : Jun  8 09:50:47 2026 GMT
        Subject: CN=6a1d55f7-3878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:66:c0:a9:c5:fc:f9:e8:01:00:6c:a7:23:38:
                    00:f3:c2:df:4b:50:10:91:9f:84:83:fc:b3:b4:49:
                    97:9f:85:c0:92:10:23:44:05:08:dd:9e:cd:2e:6b:
                    0b:01:c7:51:46:26:1c:52:34:3b:cc:6f:ce:74:79:
                    0f:5f:f2:4b:ed:49:a2:c0:84:94:37:bd:53:54:57:
                    00:2d:0c:f4:9d:da:d9:0d:c0:ba:1f:82:08:52:ae:
                    c2:4c:33:2d:7f:7a:37:44:a1:6b:ec:c1:bd:4d:83:
                    bf:a9:c5:e1:09:2b:ea:a4:bd:d8:19:d8:e9:3e:e9:
                    2d:ea:c6:a0:85:bf:0b:1f:4c:f1:b8:c9:63:7c:25:
                    c1:fc:81:3d:23:51:0e:9b:63:61:98:79:2d:03:d6:
                    5f:15:cb:49:db:e0:0d:f7:61:7c:32:14:13:91:52:
                    50:61:84:0f:77:77:34:10:d5:bc:9e:c2:5b:ab:b2:
                    2e:59:ac:e2:36:53:05:bd:94:40:2e:b1:7b:9e:0b:
                    72:5e:79:33:56:5e:bd:91:18:78:d3:6d:d3:fc:bd:
                    d5:1c:ae:df:64:f0:0b:94:79:b3:f5:4f:38:b6:42:
                    01:38:be:c5:16:25:a4:3b:10:4f:33:48:a0:0d:6e:
                    4c:72:ea:60:06:cb:db:92:a4:82:59:3e:bf:e4:33:
                    68:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:84:79:77:1C:C3:63:F1:F8:94:A6:EC:F2:F8:D9:CD:78:05:63:03
            X509v3 Authority Key Identifier:
                keyid:BD:0F:B2:FA:D8:71:22:83:9A:73:8C:49:41:93:79:07:EA:5C:3F:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF7D7/820E2C74446A11F1A5622F6E97833773/vQ-y-thxIoOac4xJQZN5B-pcP9Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vQ-y-thxIoOac4xJQZN5B-pcP9Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF7D7/820E2C74446A11F1A5622F6E97833773/vQ-y-thxIoOac4xJQZN5B-pcP9Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:4c:36:4a:d4:a3:a1:3c:18:26:ca:fb:a1:42:8d:72:b1:c1:
         f2:31:11:7f:ed:56:fa:97:5a:44:30:b7:27:52:be:1c:1b:95:
         e3:e8:2e:7a:7a:ad:fa:78:eb:34:21:72:01:5a:3a:aa:36:e7:
         ed:f3:b8:e9:cb:dc:4a:fb:7e:32:7a:ff:fa:2b:1f:45:54:b3:
         bf:36:9f:96:92:6e:48:76:54:19:bb:4f:8d:7a:45:21:b8:b5:
         9d:3c:6c:5f:0e:95:97:6b:7b:97:a1:7f:9d:7c:1a:aa:5d:60:
         81:92:9f:2a:c1:b8:2c:25:7e:6a:ca:49:39:59:a7:8a:cb:4e:
         6e:ca:ff:73:3a:f1:de:40:52:df:75:66:0d:28:20:80:cb:30:
         5c:1d:a7:d9:51:13:4e:9d:86:da:77:83:89:6a:2f:97:54:98:
         70:88:cb:9a:d4:a4:f2:dd:96:4b:6b:44:c8:74:9b:1e:73:4d:
         ee:db:03:8e:13:03:ce:21:d0:9d:72:84:ee:85:f0:1c:04:30:
         9b:f3:b9:a4:78:4b:51:b4:9a:7d:3e:34:59:db:9e:b5:0b:d5:
         0e:3d:0f:0b:d7:3f:23:5f:f0:e9:9a:51:90:57:03:23:5c:dd:
         9a:99:ca:1c:15:46:34:21:63:86:06:1f:00:f3:78:83:79:cd:
         e5:a9:d1:a8
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
RjdENzExMC8GA1UEBRMoQkQwRkIyRkFEODcxMjI4MzlBNzM4QzQ5NDE5Mzc5MDdF
QTVDM0ZENDAeFw0yNjA2MDEwOTUwNDdaFw0yNjA2MDgwOTUwNDdaMBgxFjAUBgNV
BAMTDTZhMWQ1NWY3LTM4NzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCvZsCpxfz56AEAbKcjOADzwt9LUBCRn4SD/LO0SZefhcCSECNEBQjdns0uawsB
x1FGJhxSNDvMb850eQ9f8kvtSaLAhJQ3vVNUVwAtDPSd2tkNwLofgghSrsJMMy1/
ejdEoWvswb1Ng7+pxeEJK+qkvdgZ2Ok+6S3qxqCFvwsfTPG4yWN8JcH8gT0jUQ6b
Y2GYeS0D1l8Vy0nb4A33YXwyFBORUlBhhA93dzQQ1byewlursi5ZrOI2UwW9lEAu
sXueC3JeeTNWXr2RGHjTbdP8vdUcrt9k8AuUebP1Tzi2QgE4vsUWJaQ7EE8zSKAN
bkxy6mAGy9uSpIJZPr/kM2i7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUv4R5dxzD
Y/H4lKbs8vjZzXgFYwMwHwYDVR0jBBgwFoAUvQ+y+thxIoOac4xJQZN5B+pcP9Qw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJGN0Q3LzgyMEUyQzc0NDQ2
QTExRjFBNTYyMkY2RTk3ODMzNzczL3ZRLXktdGh4SW9PYWM0eEpRWk41Qi1wY1A5
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvdlEteS10aHhJb09hYzR4SlFaTjVCLXBjUDlRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJG
N0Q3LzgyMEUyQzc0NDQ2QTExRjFBNTYyMkY2RTk3ODMzNzczL3ZRLXktdGh4SW9P
YWM0eEpRWk41Qi1wY1A5US5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCkTDZK1KOhPBgmyvuhQo1yscHyMRF/7Vb6l1pEMLcnUr4cG5Xj6C56eq36eOs0
IXIBWjqqNuft87jpy9xK+34yev/6Kx9FVLO/Np+Wkm5IdlQZu0+NekUhuLWdPGxf
DpWXa3uXoX+dfBqqXWCBkp8qwbgsJX5qykk5WaeKy05uyv9zOvHeQFLfdWYNKCCA
yzBcHafZURNOnYbad4OJai+XVJhwiMua1KTy3ZZLa0TIdJsec03u2wOOEwPOIdCd
coTuhfAcBDCb87mkeEtRtJp9PjRZ2561C9UOPQ8L1z8jX/DpmlGQVwMjXN2amcoc
FUY0IWOGBh8A83iDec3lqdGo
-----END CERTIFICATE-----
Generated at Thu Jun 4 17:16:37 2026 by rpki-client