Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.mft
File:                     vnZO_vU9hpxE9gcJlhE-ChgYQRs.mft (raw, json)
Hash identifier:          tvBchBgBg3JxcpcI3+kFTkBT949tsiodQqjyO7dCos4=
Subject key identifier:   A8:1C:A8:49:1A:0D:E2:EF:9A:D1:06:47:AA:85:ED:6F:5B:15:DA:B4
Authority key identifier: BE:76:4E:FE:F5:3D:86:9C:44:F6:07:09:96:11:3E:0A:18:18:41:1B
Certificate issuer:       /CN=A9113C02/serialNumber=BE764EFEF53D869C44F6070996113E0A1818411B
Certificate serial:       F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vnZO_vU9hpxE9gcJlhE-ChgYQRs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.mft
Manifest number:          2996
Signing time:             Sat 10 Oct 2026 16:16:13 +0000
Manifest this update:     Sat 10 Oct 2026 16:16:13 +0000
Manifest next update:     Sat 17 Oct 2026 16:16:13 +0000
Files and hashes:         1: vnZO_vU9hpxE9gcJlhE-ChgYQRs.crl (hash: 0HDfThSqu18po73VEMbscxCW8RekLi+4VSgSJ0CpWzU=)
                          2: 00CB73CC5B1011F08269C50FC4F9AE02.roa (hash: 29h4sav8XLlbEtuBhOtdUbdYfYw0of12Y7UKNdoTihA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.crl
                          rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vnZO_vU9hpxE9gcJlhE-ChgYQRs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 16:16:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 245 (0xf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113C02, serialNumber=BE764EFEF53D869C44F6070996113E0A1818411B
        Validity
            Not Before: Oct 10 16:16:13 2026 GMT
            Not After : Oct 17 16:16:13 2026 GMT
        Subject: CN=6aca64cd-1129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:7e:06:8a:5c:fd:37:68:9b:29:eb:03:3d:d0:
                    7c:4a:83:f6:fa:aa:52:d1:ac:51:1b:52:43:8e:77:
                    9f:9d:11:23:56:3b:ff:69:44:da:fc:9c:63:33:5d:
                    76:0c:cc:2f:72:72:a6:eb:b2:79:73:7a:e9:7e:62:
                    41:61:04:9b:53:2c:74:2f:6e:05:01:d6:3a:fb:dd:
                    b9:13:0c:43:25:9f:2e:07:87:70:15:61:a4:1a:c3:
                    97:d6:42:15:66:89:78:4e:0d:1e:d7:29:1d:07:40:
                    a6:b7:3b:ea:c1:28:56:53:6a:ec:29:ed:5a:55:20:
                    e4:66:34:3f:f2:31:66:2f:ea:32:cb:7c:3c:9a:f7:
                    3b:a6:e5:73:d9:47:e9:b2:62:fb:df:e3:66:68:fd:
                    8f:6c:f4:ff:e5:1f:5b:67:e8:ca:1f:16:bf:cd:25:
                    a9:86:d8:b3:8c:6c:61:7a:19:35:16:e4:71:2a:9d:
                    b2:20:fa:5a:1b:ce:ce:19:be:ee:5e:84:93:91:e5:
                    46:dd:87:64:b1:60:a4:de:7a:24:24:db:cd:f4:1c:
                    60:09:bc:1f:e5:47:49:0f:d9:ba:e3:0b:6f:27:d0:
                    cb:58:2e:a5:dd:8d:4a:45:a8:8e:83:8f:6c:ea:32:
                    67:ba:6e:1a:5f:34:e3:07:87:b1:99:b0:63:30:3d:
                    3e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:1C:A8:49:1A:0D:E2:EF:9A:D1:06:47:AA:85:ED:6F:5B:15:DA:B4
            X509v3 Authority Key Identifier:
                keyid:BE:76:4E:FE:F5:3D:86:9C:44:F6:07:09:96:11:3E:0A:18:18:41:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vnZO_vU9hpxE9gcJlhE-ChgYQRs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:cd:52:36:55:36:34:1a:cd:53:42:99:5d:fa:7c:52:f5:30:
         11:a2:82:07:8f:07:08:5d:2a:ae:65:9e:7d:0e:a8:0e:c7:bc:
         80:cd:31:43:84:eb:ac:b6:95:12:6b:6a:95:1f:79:7b:bc:13:
         10:ed:fe:87:57:dc:89:39:4d:25:21:ac:9a:4e:fa:9e:40:38:
         c2:37:c4:43:83:33:c7:36:ad:68:d8:c3:85:bc:c4:39:dd:fa:
         5c:1a:1c:90:61:5f:2f:13:41:70:cc:45:44:49:c9:f4:47:d0:
         bb:30:fb:3a:59:ae:f4:da:d2:e3:e0:be:3c:2b:28:40:32:f2:
         07:a6:6e:f0:77:2e:38:df:7f:13:f5:76:a9:00:79:a2:27:7c:
         f6:9f:d9:aa:7b:13:78:01:d0:0c:3f:aa:e1:87:86:5b:78:e8:
         d4:f1:5a:be:3e:04:0b:e4:a3:4c:8e:47:fa:c7:7d:92:21:81:
         36:c6:06:10:4b:e1:56:87:6c:13:63:6c:fb:d2:8b:02:bf:df:
         8e:11:78:54:ab:0a:f3:55:3d:98:20:ea:2d:92:27:8a:88:5a:
         70:30:b0:07:93:4a:77:25:ca:0b:2b:0e:8a:00:84:da:08:55:
         a4:29:ec:a5:1a:6d:f1:8f:41:15:1e:b6:3f:ec:72:40:f2:9c:
         e1:f4:2f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 13:47:16 2026 by rpki-client