Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.mft
File:                     vttNMcgBx4se-jSHY50DVayRNUs.mft (raw, json)
Hash identifier:          m/GHhFD/888mLEUfVI7DkvnUJu0VrZplRn8+5S4MQ2Q=
Subject key identifier:   E5:E7:A5:E8:C5:51:2F:37:0B:14:D7:7E:7A:95:3F:13:C6:BE:86:7A
Authority key identifier: BE:DB:4D:31:C8:01:C7:8B:1E:FA:34:87:63:9D:03:55:AC:91:35:4B
Certificate issuer:       /CN=A91CB063/serialNumber=BEDB4D31C801C78B1EFA3487639D0355AC91354B
Certificate serial:       0115
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vttNMcgBx4se-jSHY50DVayRNUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.mft
Manifest number:          010A
Signing time:             Mon 01 Jun 2026 06:56:01 +0000
Manifest this update:     Mon 01 Jun 2026 06:56:01 +0000
Manifest next update:     Mon 08 Jun 2026 06:56:01 +0000
Files and hashes:         1: vttNMcgBx4se-jSHY50DVayRNUs.crl (hash: tT9ALKO1wF5gLSv9bR1rXSuoYi5F4DsZBszs5mBH0xY=)
                          2: D99266FE4F7911F095AB2D46C4F9AE02.roa (hash: S7S5igmQvKLW0ck787Ok4dnnBzff6qmeN+pto8WjXmE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.crl
                          rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vttNMcgBx4se-jSHY50DVayRNUs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 06:56:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 277 (0x115)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB063, serialNumber=BEDB4D31C801C78B1EFA3487639D0355AC91354B
        Validity
            Not Before: Jun  1 06:56:01 2026 GMT
            Not After : Jun  8 06:56:01 2026 GMT
        Subject: CN=6a1d2d01-495f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5a:b8:00:05:81:18:36:03:68:a3:48:8c:59:
                    d7:17:9e:52:cd:be:2d:2b:ff:ee:17:d6:ad:4b:ba:
                    93:32:e0:fd:10:5e:1b:60:d8:84:ac:a8:2c:3f:74:
                    39:61:3f:d3:ed:c4:2d:d0:f9:59:bb:5d:4f:b7:4c:
                    5a:43:b2:ea:0f:74:8a:ec:1c:1d:30:f2:70:9e:08:
                    46:79:e2:46:57:49:c6:d0:c1:84:ad:43:34:81:6b:
                    9b:8b:51:e0:a8:22:cb:6a:2b:2e:a0:53:ab:37:ed:
                    2d:4f:6f:37:4d:34:b2:b6:0c:49:12:c8:4c:ff:e5:
                    ab:c0:dc:d3:e5:4f:15:14:1a:34:7f:75:12:5f:b8:
                    37:8d:ec:ca:91:0b:b6:ae:1a:4b:94:fb:66:f9:f3:
                    bd:41:63:db:ac:87:82:9e:8e:d7:03:4b:8b:85:a2:
                    45:89:e3:3f:85:63:25:39:58:55:36:55:9a:15:52:
                    99:73:33:97:93:e8:47:c2:31:7d:29:4d:c7:27:31:
                    0a:74:4d:53:98:c9:c5:82:03:bd:e7:01:60:77:fe:
                    18:26:c3:93:5f:7b:8a:27:4e:f8:97:4c:df:cf:8a:
                    c6:10:89:f8:59:17:02:17:1f:e6:05:84:ce:45:55:
                    e8:1c:00:81:15:e5:b5:33:47:92:13:df:92:35:3d:
                    75:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E7:A5:E8:C5:51:2F:37:0B:14:D7:7E:7A:95:3F:13:C6:BE:86:7A
            X509v3 Authority Key Identifier:
                keyid:BE:DB:4D:31:C8:01:C7:8B:1E:FA:34:87:63:9D:03:55:AC:91:35:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vttNMcgBx4se-jSHY50DVayRNUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:91:12:4b:9d:5e:44:9b:5f:e7:c4:32:a7:b6:79:92:19:33:
         00:e9:64:e0:d2:ff:45:96:ed:a4:8d:f4:81:5e:9c:6c:90:39:
         b2:e6:26:55:c5:44:43:c0:a6:92:ad:f3:34:f6:0c:e5:94:98:
         1d:8b:1c:42:89:e7:0c:e5:8e:f6:ad:67:4f:e6:0b:28:ec:ae:
         fe:ee:8b:10:d5:09:4a:b3:f4:6c:70:2d:11:2b:68:10:f5:d0:
         af:7d:46:08:7d:2f:d8:ac:02:8c:90:0a:84:47:48:fd:9c:77:
         8c:77:df:3f:3b:0b:fb:70:c9:1a:88:28:b7:b4:36:03:25:21:
         de:f6:6a:94:c8:03:29:84:f1:96:ba:90:af:00:14:3f:a6:1f:
         a4:c7:b0:27:de:44:cf:e5:2d:de:44:67:d8:84:c2:76:66:9a:
         81:a6:19:c5:0a:57:10:5d:c0:a3:41:2a:41:7a:54:07:96:f9:
         9f:7d:46:dc:70:18:d4:63:37:9d:eb:80:18:ff:c9:2b:63:de:
         79:2a:84:04:df:26:69:17:72:4d:a8:a4:e5:bd:0b:e8:9c:3a:
         05:4d:5b:be:5f:37:c8:e0:ca:58:33:c6:26:43:8b:4b:85:08:
         0c:6b:3a:c6:63:ab:85:d0:78:5a:74:ce:1e:52:be:34:ef:aa:
         7c:dc:dc:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:41:39 2026 by rpki-client