Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913CB06/8A4D76BE07E411F1A34718A5213D8C67/VC3eAu1c1aeKWFAwa556fpn8Jgs.mft
File:                     VC3eAu1c1aeKWFAwa556fpn8Jgs.mft (raw, json)
Hash identifier:          esdg714iZEK2nB+kw9ZBL3JNw1WcPpDZqoMqGDBQsXg=
Subject key identifier:   85:EA:C2:09:72:95:56:0F:C7:F5:46:6B:69:2E:88:73:2C:11:CA:02
Authority key identifier: 54:2D:DE:02:ED:5C:D5:A7:8A:58:50:30:6B:9E:7A:7E:99:FC:26:0B
Certificate issuer:       /CN=A913CB06/serialNumber=542DDE02ED5CD5A78A5850306B9E7A7E99FC260B
Certificate serial:       8A
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/VC3eAu1c1aeKWFAwa556fpn8Jgs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913CB06/8A4D76BE07E411F1A34718A5213D8C67/VC3eAu1c1aeKWFAwa556fpn8Jgs.mft
Manifest number:          88
Signing time:             Tue 27 Oct 2026 07:57:34 +0000
Manifest this update:     Tue 27 Oct 2026 07:57:33 +0000
Manifest next update:     Tue 03 Nov 2026 07:57:33 +0000
Files and hashes:         1: VC3eAu1c1aeKWFAwa556fpn8Jgs.crl (hash: /1iW6MBux+Suv/g+CPZw22Gwa/40U7dkDRiZG4uzELw=)
                          2: D111CFB407E411F1ADC4A5A5213D8C67.roa (hash: lUmpfgR/p5W8luIbaZ+1ADUqFYn/T6101vy4MSXsnuo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913CB06/8A4D76BE07E411F1A34718A5213D8C67/VC3eAu1c1aeKWFAwa556fpn8Jgs.crl
                          rsync://rpki.apnic.net/member_repository/A913CB06/8A4D76BE07E411F1A34718A5213D8C67/VC3eAu1c1aeKWFAwa556fpn8Jgs.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/VC3eAu1c1aeKWFAwa556fpn8Jgs.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 07:57:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 138 (0x8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913CB06, serialNumber=542DDE02ED5CD5A78A5850306B9E7A7E99FC260B
        Validity
            Not Before: Oct 27 07:57:33 2026 GMT
            Not After : Nov  3 07:57:33 2026 GMT
        Subject: CN=6ae0596e-19ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e3:58:06:45:ec:66:c0:fc:db:c3:d3:4a:72:
                    1f:12:96:65:5f:49:ed:95:9d:19:46:63:46:e3:23:
                    c8:40:9b:cd:dd:e7:bd:81:90:22:46:18:5a:3e:70:
                    69:e1:36:c2:fb:18:62:3e:b2:37:54:ca:37:6c:83:
                    33:47:2f:2c:d8:73:39:91:a7:65:8b:02:4c:2e:61:
                    4e:50:f6:f0:1a:88:27:81:fe:64:90:62:21:e2:ef:
                    f9:85:40:6a:e7:d0:fe:82:4b:6e:6c:e4:f6:52:8d:
                    c4:fc:dc:9c:f8:25:8a:f2:55:a9:6c:51:65:da:ab:
                    0f:3e:35:0f:b8:30:7a:69:b8:10:55:40:26:44:9e:
                    88:c1:30:0a:8a:5a:6b:d4:e8:f8:7d:57:63:ab:34:
                    6c:56:94:79:7c:f1:e4:bc:f1:b2:fc:15:4d:71:d2:
                    99:be:18:78:d9:97:6a:3e:0b:6c:5d:e3:b4:98:ee:
                    50:9e:d7:2e:18:e5:23:16:ce:7b:5b:ac:c3:51:c0:
                    bd:96:5c:94:50:0c:fe:5a:4b:0b:b6:5f:c2:65:ca:
                    d4:71:67:67:a0:27:23:f2:34:b5:7b:7f:80:2f:55:
                    20:07:5c:f6:f5:75:6a:93:af:ae:66:d4:44:67:47:
                    5f:b9:d5:d5:74:30:9c:21:bf:1b:72:f2:37:4f:d5:
                    d6:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:EA:C2:09:72:95:56:0F:C7:F5:46:6B:69:2E:88:73:2C:11:CA:02
            X509v3 Authority Key Identifier:
                keyid:54:2D:DE:02:ED:5C:D5:A7:8A:58:50:30:6B:9E:7A:7E:99:FC:26:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913CB06/8A4D76BE07E411F1A34718A5213D8C67/VC3eAu1c1aeKWFAwa556fpn8Jgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/VC3eAu1c1aeKWFAwa556fpn8Jgs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CB06/8A4D76BE07E411F1A34718A5213D8C67/VC3eAu1c1aeKWFAwa556fpn8Jgs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:38:10:8d:d1:8a:c0:76:db:19:1d:5c:69:3a:80:eb:5d:12:
         4f:26:2d:4d:7a:54:51:aa:da:20:bc:1b:08:7b:56:00:51:96:
         3f:b9:d5:a9:90:0e:f1:30:28:8f:18:f0:ef:c8:2b:f5:52:67:
         b1:b5:2e:cf:1e:e5:f5:df:5a:3f:b1:11:89:da:e5:33:1f:3e:
         fd:1e:e4:bf:6e:f3:5c:24:ff:16:85:f6:e6:b4:81:9c:2a:15:
         67:bc:a6:43:26:9d:57:63:02:36:e0:50:7c:dd:a9:4b:1f:12:
         87:1d:91:6d:2e:e3:31:e7:cd:83:24:e3:62:0a:ea:c4:71:e4:
         37:74:bc:03:ff:56:f2:a4:7e:8d:bb:da:03:bb:15:64:e1:f7:
         22:bb:af:23:f6:56:99:9c:92:ea:20:3a:89:b5:16:1c:60:d0:
         6b:d5:11:db:d0:ab:7f:4b:17:c6:e3:32:9f:2a:d9:5e:84:af:
         91:14:24:12:a6:9e:f0:d4:bd:cd:dc:92:8a:71:fd:22:74:e1:
         aa:eb:64:e3:ad:69:f6:08:e5:08:ed:3e:42:20:30:f7:5e:e8:
         55:e6:89:ee:8b:e6:12:36:c0:7c:77:ea:29:7a:c1:bc:57:bb:
         70:ca:52:02:34:f4:c0:42:bf:51:52:c9:20:41:7d:d2:27:ff:
         ef:b5:4c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:21:59 2026 by rpki-client