Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1DA2/B8BA899A229411F1BD86858EAE833773/VVf9XdSgiVmupCqY3iBy7QUB204.mft
File:                     VVf9XdSgiVmupCqY3iBy7QUB204.mft (raw, json)
Hash identifier:          sntyVXZGWeLcpM/lHpa6603GD+4qXgxHdAgdRgCf2kY=
Subject key identifier:   E6:46:C8:43:97:01:01:34:0B:91:B4:2D:71:D2:28:EB:70:C0:A4:45
Authority key identifier: 55:57:FD:5D:D4:A0:89:59:AE:A4:2A:98:DE:20:72:ED:05:01:DB:4E
Certificate issuer:       /CN=A91F1DA2/serialNumber=5557FD5DD4A08959AEA42A98DE2072ED0501DB4E
Certificate serial:       51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVf9XdSgiVmupCqY3iBy7QUB204.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1DA2/B8BA899A229411F1BD86858EAE833773/VVf9XdSgiVmupCqY3iBy7QUB204.mft
Manifest number:          50
Signing time:             Wed 19 Aug 2026 09:00:46 +0000
Manifest this update:     Wed 19 Aug 2026 09:00:45 +0000
Manifest next update:     Wed 26 Aug 2026 09:00:45 +0000
Files and hashes:         1: VVf9XdSgiVmupCqY3iBy7QUB204.crl (hash: xX8kbbTXdEbpgQXeHyERD81OlUs/MmLNTmJ7cSc+l2U=)
                          2: 1CEBECEC229511F1916F29FEAE833773.roa (hash: m1cTe0sjbHKB5Ksm5p5JN7pFm5DtOLvmL4Q6d+C3sDY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1DA2/B8BA899A229411F1BD86858EAE833773/VVf9XdSgiVmupCqY3iBy7QUB204.crl
                          rsync://rpki.apnic.net/member_repository/A91F1DA2/B8BA899A229411F1BD86858EAE833773/VVf9XdSgiVmupCqY3iBy7QUB204.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVf9XdSgiVmupCqY3iBy7QUB204.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1DA2, serialNumber=5557FD5DD4A08959AEA42A98DE2072ED0501DB4E
        Validity
            Not Before: Aug 19 09:00:45 2026 GMT
            Not After : Aug 26 09:00:45 2026 GMT
        Subject: CN=6a8570be-fe2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:bd:27:74:c9:43:45:2f:dc:0d:88:be:1b:60:
                    e3:ee:95:fd:9b:1f:5a:19:f2:7e:fb:29:fe:df:85:
                    69:d2:99:7b:db:8e:ee:bb:ae:e8:d4:ac:9d:36:47:
                    eb:39:b1:b6:74:82:d6:8a:52:36:3b:61:87:65:ce:
                    bd:c8:4f:d1:58:ff:e3:3c:a1:13:68:82:56:77:d4:
                    a9:6c:fe:d0:c8:1d:73:ec:1e:21:2a:44:a1:d4:c0:
                    23:4a:af:b3:b2:1c:6f:3c:82:97:34:91:cc:c4:63:
                    aa:1f:37:b7:78:c1:c7:3b:26:6e:ae:5f:d8:50:97:
                    bc:9d:cf:a1:1b:da:7c:2b:0f:13:12:f5:54:92:d9:
                    ce:01:e3:2f:71:b2:c0:27:87:79:33:e8:3e:fb:ac:
                    ba:dd:d9:19:b4:8e:f4:42:9a:ec:af:2c:0b:3f:9b:
                    a6:94:e3:24:a3:66:06:4c:b5:a3:d4:13:eb:fe:96:
                    23:c2:e0:22:37:10:70:fe:1c:e8:a3:df:a9:d3:0b:
                    ae:5c:b6:77:05:ad:f9:87:cc:17:6d:34:4e:b0:f9:
                    be:17:f1:e7:34:f0:99:b0:45:69:09:c5:6a:2c:84:
                    f2:85:d0:cc:f1:86:cd:44:69:35:a7:b0:9e:46:24:
                    40:fb:51:bc:85:f8:9e:91:34:ad:55:04:07:13:3a:
                    9b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:46:C8:43:97:01:01:34:0B:91:B4:2D:71:D2:28:EB:70:C0:A4:45
            X509v3 Authority Key Identifier:
                keyid:55:57:FD:5D:D4:A0:89:59:AE:A4:2A:98:DE:20:72:ED:05:01:DB:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1DA2/B8BA899A229411F1BD86858EAE833773/VVf9XdSgiVmupCqY3iBy7QUB204.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVf9XdSgiVmupCqY3iBy7QUB204.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1DA2/B8BA899A229411F1BD86858EAE833773/VVf9XdSgiVmupCqY3iBy7QUB204.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:1f:e8:94:f4:1e:a4:68:48:ab:fd:c2:10:3c:fa:30:3f:15:
         49:7c:a1:05:a6:f9:0f:4a:c5:b7:75:e2:c0:4d:34:61:ac:3e:
         5d:04:5e:56:2b:ba:07:b3:cd:e5:58:ae:2f:61:ea:f3:d6:b4:
         55:08:b8:ed:8b:36:e5:27:3b:45:cd:1c:a8:5c:8d:ee:9a:c8:
         1f:68:f2:a4:ee:26:11:af:d1:27:73:65:81:f6:48:9f:6f:a2:
         a1:4b:f0:00:cf:b0:55:87:04:09:f5:2e:2d:6c:2f:84:e9:96:
         20:24:26:d4:d2:47:89:3c:b6:ab:39:0b:1d:1c:80:d8:21:ca:
         d4:82:e6:9e:50:29:36:b3:53:f8:af:84:e6:af:50:37:84:26:
         4a:e9:19:cd:b1:86:df:dd:05:c7:d3:04:5a:85:aa:26:47:fd:
         d4:47:cb:8b:91:49:e3:6c:a5:3c:27:30:33:21:cb:9b:98:cc:
         e7:59:4f:74:e6:32:8d:a4:0a:24:01:18:af:b6:30:eb:3d:e2:
         f1:0b:52:e0:b2:9d:15:f5:03:28:cc:1a:5c:00:1a:bd:19:d3:
         cf:88:1f:60:ee:7e:20:0a:96:ba:58:73:30:60:fa:3b:17:1c:
         76:fb:cc:26:27:d1:60:c9:43:1d:c1:23:41:86:0c:2a:2d:87:
         65:78:82:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:46:07 2026 by rpki-client