Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft
File:                     vm13JvnXOebsmvk0fs7LQhevej8.mft (raw, json)
Hash identifier:          RPl0jdcwnn3Mw1iwhQ+jU4h1eTyChXeCh5D9viSleF0=
Subject key identifier:   DD:F6:3E:17:FB:09:1E:51:AC:A8:57:2D:73:CF:5C:A8:F1:DC:05:FF
Authority key identifier: BE:6D:77:26:F9:D7:39:E6:EC:9A:F9:34:7E:CE:CB:42:17:AF:7A:3F
Certificate issuer:       /CN=A91ED35E/serialNumber=BE6D7726F9D739E6EC9AF9347ECECB4217AF7A3F
Certificate serial:       0218
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vm13JvnXOebsmvk0fs7LQhevej8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft
Manifest number:          0212
Signing time:             Tue 27 Oct 2026 03:13:20 +0000
Manifest this update:     Tue 27 Oct 2026 03:13:20 +0000
Manifest next update:     Tue 03 Nov 2026 03:13:20 +0000
Files and hashes:         1: vm13JvnXOebsmvk0fs7LQhevej8.crl (hash: h/gbZcvQ92kIVsBM69MK/RRFzttvBUKxAqZBAN9zJK4=)
                          2: 3AE10060B0F111EE9727201AC4F9AE02.roa (hash: C6Cummg9Sl6RCDS2LtUiMc8wWWKvQYCjdXXfFdueSWs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.crl
                          rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vm13JvnXOebsmvk0fs7LQhevej8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 03:13:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 536 (0x218)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED35E, serialNumber=BE6D7726F9D739E6EC9AF9347ECECB4217AF7A3F
        Validity
            Not Before: Oct 27 03:13:20 2026 GMT
            Not After : Nov  3 03:13:20 2026 GMT
        Subject: CN=6ae016d0-aeba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:01:b8:5e:9f:17:12:0d:b0:ec:eb:da:08:9d:
                    cc:65:42:9d:4c:98:c1:34:97:37:c4:64:79:cb:37:
                    4c:93:da:8d:40:25:31:99:2e:b1:11:e5:6a:25:46:
                    bb:5c:89:60:3e:57:0c:59:27:38:7d:50:e2:7c:4c:
                    30:df:6c:fb:99:0d:d8:59:47:48:12:0f:33:17:68:
                    9d:8d:ea:ed:cb:4d:41:fc:74:14:d9:13:bd:06:a8:
                    f3:ad:6f:da:cc:3e:64:0e:15:3c:88:33:27:a4:ff:
                    f9:2f:00:28:43:4f:f2:58:c7:dd:46:7f:4d:f1:7f:
                    cc:6a:e9:b5:60:b6:ad:24:bb:14:13:45:53:44:f0:
                    4f:72:74:16:55:5f:67:4f:c4:6d:81:46:72:8e:10:
                    52:ee:c9:13:f9:b0:74:35:ce:a5:63:86:f1:13:89:
                    ca:04:dd:51:d3:1c:d1:6d:8a:d2:61:5e:08:91:65:
                    31:e2:e2:96:83:81:0c:50:d4:fb:19:97:90:65:d0:
                    8a:31:e8:58:75:f8:b8:5f:3a:7c:fe:73:af:a0:54:
                    4a:89:5d:c6:76:14:f7:45:c6:58:73:1a:7d:95:7d:
                    26:9d:37:b3:19:5b:18:ec:3f:98:c0:b0:ec:aa:32:
                    55:d5:78:2c:cf:3f:eb:09:ea:c7:b3:d1:14:ef:94:
                    a9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:F6:3E:17:FB:09:1E:51:AC:A8:57:2D:73:CF:5C:A8:F1:DC:05:FF
            X509v3 Authority Key Identifier:
                keyid:BE:6D:77:26:F9:D7:39:E6:EC:9A:F9:34:7E:CE:CB:42:17:AF:7A:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vm13JvnXOebsmvk0fs7LQhevej8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:6c:30:e7:72:b4:03:ae:13:18:bc:6b:a3:75:0b:64:f0:ce:
         28:af:cb:79:c2:68:c5:39:81:22:55:ca:04:20:d0:56:71:c1:
         b2:68:3b:18:df:14:12:a2:18:c6:3c:fc:51:01:71:4a:1e:ee:
         ae:bb:b3:29:b0:07:92:77:18:db:f7:f1:26:43:c8:3f:d9:41:
         50:89:8c:45:43:fb:44:b9:25:fd:bf:33:aa:45:02:4b:40:c2:
         52:a4:ad:e0:48:64:c9:51:16:31:2f:16:8e:2c:21:e0:85:1c:
         99:98:53:ff:4b:87:e6:9a:52:74:05:1e:1b:51:a3:07:fb:d7:
         17:58:83:6d:2f:6e:d6:c5:9a:5e:c8:61:83:7f:37:f4:fd:65:
         43:1e:9e:53:a8:6f:00:0b:fd:4f:ad:6b:ac:df:d2:dc:67:1b:
         d6:be:80:18:f3:29:2e:56:07:63:16:f4:6b:95:d1:f0:40:95:
         16:9d:f7:2f:d5:6c:10:c7:74:87:f7:78:52:6f:fc:e1:d9:2b:
         36:84:f2:c9:a2:dc:aa:fb:82:b8:92:7d:69:2b:9e:85:c3:21:
         7d:94:0e:c6:f6:b4:9f:d4:bf:3e:ff:a2:b5:af:54:62:d3:a4:
         b7:9c:de:d3:ac:5f:bb:df:71:c1:62:20:f5:08:ac:26:3d:65:
         bd:d4:17:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:11:57 2026 by rpki-client