Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft
File:                     _vkUOxYWzaEVm1ns1eOZPpgmVP4.mft (raw, json)
Hash identifier:          VLE2aztNieBiOe52sxhZv4n1KZJFB8lkVx7GD31PoE4=
Subject key identifier:   2A:20:51:7B:D6:59:24:02:6B:F3:70:5A:43:63:EB:91:F8:8B:B1:3D
Authority key identifier: FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE
Certificate issuer:       /CN=A911FDBA/serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE
Certificate serial:       360B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft
Manifest number:          35D0
Signing time:             Sat 10 Oct 2026 14:57:45 +0000
Manifest this update:     Sat 10 Oct 2026 14:57:44 +0000
Manifest next update:     Sat 17 Oct 2026 14:57:44 +0000
Files and hashes:         1: _vkUOxYWzaEVm1ns1eOZPpgmVP4.crl (hash: Gna6AnmACMBwweofNkFWkfRcr0lUG0aY4qxi+HNNtys=)
                          2: CD692AAEF65311EAA7E5A684C4F9AE02.roa (hash: id2mRaIy2h7nVg/sc/ikSWNLePF2FrfpCr04A5Jbft8=)
                          3: 931C5524175011EB8585CA60C4F9AE02.roa (hash: 5byMek5etqwTehUajH8Mj1zzTDL9e01ueYvXYYpN/aA=)
                          4: 800275E63FF911EB9BC3F51FC4F9AE02.roa (hash: CtU0kY5KWSLSlfwZkRorGoa4e7JgtnQg/6zuGIRKoKM=)
                          5: 57CA5DB02E2811EBB76B1E75C4F9AE02.roa (hash: CRBjNrDay0fKPUZhB/X7qmKie82SAt30Rk3lcvLRM5s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.crl
                          rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 14:57:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13835 (0x360b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911FDBA, serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE
        Validity
            Not Before: Oct 10 14:57:44 2026 GMT
            Not After : Oct 17 14:57:44 2026 GMT
        Subject: CN=6aca5269-5044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7b:d6:fd:0f:d9:ff:5b:fd:d4:00:67:94:72:
                    04:dd:23:e1:81:66:4c:27:c3:88:e4:41:0a:fe:31:
                    a4:d8:4d:66:b1:dc:2a:23:be:8b:69:6f:4d:41:bd:
                    73:5b:31:11:13:9c:68:57:8b:65:95:30:a4:6c:48:
                    7a:d1:0b:bf:c9:98:6b:06:16:87:f3:9d:f9:2f:83:
                    ac:b2:5d:81:dc:18:99:f1:a4:66:70:83:21:42:ec:
                    cf:e5:6f:6b:df:8a:96:65:f4:1a:e5:a6:cc:d3:39:
                    7d:4f:f6:66:9a:a5:ea:38:db:27:f6:9d:da:66:bc:
                    98:ec:a1:18:3c:44:13:78:bf:5c:9b:5d:ca:4e:c2:
                    2a:3a:46:1c:af:5c:c1:89:0f:06:1e:57:69:e2:a3:
                    77:8b:9d:91:1e:6e:f8:bc:8b:e7:d1:63:7e:71:82:
                    9f:63:36:2c:52:3b:3e:b8:81:db:6f:7e:8c:a3:f5:
                    a1:40:6b:18:22:f4:c1:8a:a7:42:df:da:a8:84:9e:
                    b9:fd:05:b0:f0:c2:12:f9:da:89:46:de:ad:b8:18:
                    4f:d2:1c:ff:ef:b6:8b:a4:1a:b3:ed:db:ef:d6:cb:
                    57:c4:b2:ba:4a:69:f4:2e:66:5b:93:0a:b4:58:84:
                    bf:a0:e4:d1:7e:53:a1:2f:39:13:fd:75:da:50:ea:
                    0a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:20:51:7B:D6:59:24:02:6B:F3:70:5A:43:63:EB:91:F8:8B:B1:3D
            X509v3 Authority Key Identifier:
                keyid:FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:36:26:3a:82:a5:54:72:12:97:1c:ad:9e:f2:a9:fd:64:3f:
         59:e9:dc:b8:bf:8c:34:48:a9:2a:fb:81:cf:68:3b:0b:03:41:
         01:e1:39:7f:3a:8f:25:61:83:5b:85:34:e6:53:b0:e6:2b:da:
         73:e7:34:c3:e6:02:21:28:e1:10:de:92:81:04:e8:0b:10:85:
         cb:11:29:f8:bb:34:15:00:12:3e:51:66:10:43:d4:14:3a:c5:
         5a:97:22:24:69:25:e8:ea:05:61:47:7c:d8:e6:67:b7:84:6b:
         34:ce:04:27:98:d0:b6:03:7c:e5:87:91:dc:2e:92:30:d5:da:
         19:19:64:cc:9f:75:ca:92:e3:cc:07:20:47:07:64:08:74:6d:
         2d:a3:ec:a5:64:b1:0a:03:41:1e:3d:72:7c:40:ce:ff:a1:c8:
         40:ce:d7:c4:14:c0:55:6d:9b:40:e9:f2:3b:99:47:a1:13:a4:
         d0:53:f1:8b:a1:17:7b:8e:fc:5f:ef:76:f3:21:a3:58:7b:b9:
         dd:0b:62:81:b8:a7:cd:52:c1:be:71:cf:7e:14:ca:cb:95:19:
         60:5d:51:de:b7:6e:d8:c9:76:b8:41:4b:87:ee:ee:f2:48:e4:
         b5:7c:2f:c9:7d:60:54:92:a5:1c:ce:a2:bb:6b:45:47:72:92:
         f9:8c:d3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:11:40 2026 by rpki-client