Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft
File:                     VzWraqwyeVRCT5_oyoUzQpnde8I.mft (raw, json)
Hash identifier:          3DYFOfgsr5iM7tjM+Kf2T/R+WI8ulXvZ5sQcJ19YT0Q=
Subject key identifier:   3F:9D:1D:F0:E7:6A:49:DD:98:B7:1D:B5:2C:06:84:E0:1B:03:A7:81
Authority key identifier: 57:35:AB:6A:AC:32:79:54:42:4F:9F:E8:CA:85:33:42:99:DD:7B:C2
Certificate issuer:       /CN=A91CE392/serialNumber=5735AB6AAC327954424F9FE8CA85334299DD7BC2
Certificate serial:       1044
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft
Manifest number:          1036
Signing time:             Tue 18 Aug 2026 17:37:35 +0000
Manifest this update:     Tue 18 Aug 2026 17:37:34 +0000
Manifest next update:     Tue 25 Aug 2026 17:37:34 +0000
Files and hashes:         1: VzWraqwyeVRCT5_oyoUzQpnde8I.crl (hash: 00xLlOPeK0Vx69yGAjvgsFrqteayYMaJCd8z8UjSmRM=)
                          2: F27C04B8779E11E997C0204AC4F9AE02.roa (hash: gcXkSl5BDm7BPmptXZao6xrfNU8xKrBthGWtRyIpA9Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.crl
                          rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 17:37:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4164 (0x1044)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE392, serialNumber=5735AB6AAC327954424F9FE8CA85334299DD7BC2
        Validity
            Not Before: Aug 18 17:37:34 2026 GMT
            Not After : Aug 25 17:37:34 2026 GMT
        Subject: CN=6a84985f-c8d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a9:fc:be:c1:93:ed:15:b2:42:29:4c:7e:90:
                    1e:bc:d7:20:b5:13:ce:2c:50:71:4c:ab:d0:78:d3:
                    5c:0e:17:51:87:48:87:72:99:69:2e:98:06:f9:64:
                    45:fa:ea:e2:c9:aa:16:21:5f:5b:06:fe:8f:21:20:
                    13:1e:3b:90:6f:44:58:6c:ea:21:cd:c8:a4:48:33:
                    85:27:16:31:49:8f:db:42:02:c7:37:b1:d4:f9:ca:
                    44:9f:e9:f8:0a:3f:68:6b:36:9d:e6:16:14:7d:cc:
                    14:14:b8:9a:a3:c7:9a:c8:14:5b:fc:1a:5a:57:3b:
                    25:3d:78:16:e4:88:6e:6b:1a:9f:58:36:8d:58:2b:
                    7e:bf:35:4b:d5:b7:f2:d2:aa:bd:f7:38:7f:b4:07:
                    5f:1b:a6:e1:2c:a9:cc:d5:54:68:94:ee:c9:a0:93:
                    f0:0b:36:c3:41:9b:08:0f:8b:ba:b1:c8:8f:70:b2:
                    83:ce:c7:54:29:6f:1a:8c:c2:45:bb:7a:d5:85:c6:
                    9e:1f:35:2b:66:ba:63:5c:96:74:34:04:8d:ad:96:
                    96:95:2b:e0:ad:79:57:f4:79:59:77:73:ad:b7:16:
                    99:5b:d4:7c:ae:da:26:06:6e:fc:28:31:73:33:25:
                    59:b0:3f:4a:07:1b:96:4c:5e:56:86:2d:63:35:38:
                    f9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:9D:1D:F0:E7:6A:49:DD:98:B7:1D:B5:2C:06:84:E0:1B:03:A7:81
            X509v3 Authority Key Identifier:
                keyid:57:35:AB:6A:AC:32:79:54:42:4F:9F:E8:CA:85:33:42:99:DD:7B:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:11:7a:7c:2d:07:3c:76:56:51:2a:3f:66:db:c8:e3:d4:ed:
         a9:fb:ac:c3:1b:5c:e3:e1:41:be:d1:a2:90:b9:b9:48:ad:dc:
         72:71:f7:8e:fa:0d:78:a2:f8:65:6a:b4:19:c8:7b:7a:de:35:
         e2:74:0a:92:f8:f4:61:18:03:42:4f:ad:d4:1b:ba:ed:8e:db:
         aa:e5:fa:92:24:77:12:02:a5:6b:2e:d9:87:14:2e:d6:cc:0a:
         bf:0d:7b:19:d6:09:e2:6a:09:5d:0c:ba:8e:e2:e9:e1:e2:c2:
         d0:62:f8:13:e1:41:a7:5d:32:cb:e4:ab:01:77:4d:5f:43:81:
         52:3d:fc:ec:37:98:ce:1c:46:3a:25:11:30:b5:23:7b:cd:33:
         73:4a:c5:8b:59:c5:a5:b5:43:22:52:0f:ad:72:8c:cd:c0:a3:
         00:b8:57:02:ee:89:11:ed:d8:a6:e9:72:ea:7b:9e:5b:02:12:
         d6:db:e8:92:9e:6c:fd:f5:ae:27:d2:cc:cd:b0:45:59:3a:61:
         f2:44:6f:39:5d:b4:0e:87:a7:f4:33:d4:fa:4a:21:b4:47:24:
         0b:6d:47:ee:cc:6b:ce:da:0c:64:c6:60:12:a1:36:69:4c:28:
         00:db:50:12:82:58:ef:ca:7a:c7:9d:c8:58:61:a5:1f:71:f1:
         2a:ba:6a:b7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEEQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0UzOTIxMTAvBgNVBAUTKDU3MzVBQjZBQUMzMjc5NTQ0MjRGOUZFOENBODUzMzQy
OTlERDdCQzIwHhcNMjYwODE4MTczNzM0WhcNMjYwODI1MTczNzM0WjAYMRYwFAYD
VQQDEw02YTg0OTg1Zi1jOGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvan8vsGT7RWyQilMfpAevNcgtRPOLFBxTKvQeNNcDhdRh0iHcplpLpgG+WRF
+uriyaoWIV9bBv6PISATHjuQb0RYbOohzcikSDOFJxYxSY/bQgLHN7HU+cpEn+n4
Cj9oazad5hYUfcwUFLiao8eayBRb/BpaVzslPXgW5IhuaxqfWDaNWCt+vzVL1bfy
0qq99zh/tAdfG6bhLKnM1VRolO7JoJPwCzbDQZsID4u6sciPcLKDzsdUKW8ajMJF
u3rVhcaeHzUrZrpjXJZ0NASNrZaWlSvgrXlX9HlZd3OttxaZW9R8rtomBm78KDFz
MyVZsD9KBxuWTF5Whi1jNTj5vwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD+dHfDn
akndmLcdtSwGhOAbA6eBMB8GA1UdIwQYMBaAFFc1q2qsMnlUQk+f6MqFM0KZ3XvC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTM5Mi82RDZBMkEyODZD
RDgxMUU5Qjk5RkUzMjlDNEY5QUUwMi9WeldyYXF3eWVWUkNUNV9veW9VelFwbmRl
OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Z6V3JhcXd5ZVZSQ1Q1X295b1V6UXBuZGU4SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RTM5Mi82RDZBMkEyODZDRDgxMUU5Qjk5RkUzMjlDNEY5QUUwMi9WeldyYXF3eWVW
UkNUNV9veW9VelFwbmRlOEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALBF6fC0HPHZWUSo/ZtvI49Ttqfuswxtc4+FBvtGikLm5SK3ccnH3jvoNeKL4
ZWq0Gch7et414nQKkvj0YRgDQk+t1Bu67Y7bquX6kiR3EgKlay7ZhxQu1swKvw17
GdYJ4moJXQy6juLp4eLC0GL4E+FBp10yy+SrAXdNX0OBUj387DeYzhxGOiURMLUj
e80zc0rFi1nFpbVDIlIPrXKMzcCjALhXAu6JEe3Ypuly6nueWwIS1tvokp5s/fWu
J9LMzbBFWTph8kRvOV20Doen9DPU+kohtEckC21H7sxrztoMZMZgEqE2aUwoANtQ
EoJY78p6x53IWGGlH3HxKrpqtw==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:52:35 2026 by rpki-client