Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91288D9/BA59535E425711EA8F838A43C4F9AE02/VB4KZv5g86rAJQLO8eSOYnpi90E.mft
File:                     VB4KZv5g86rAJQLO8eSOYnpi90E.mft (raw, json)
Hash identifier:          Tu3xAhaMbg7H1tgHpJKMtptbzycU6DjmRSXmUkluYTM=
Subject key identifier:   77:CD:1F:43:E1:DA:C3:8C:1C:CE:E3:FA:D5:63:DB:E1:1C:8F:4A:40
Authority key identifier: 54:1E:0A:66:FE:60:F3:AA:C0:25:02:CE:F1:E4:8E:62:7A:62:F7:41
Certificate issuer:       /CN=A91288D9/serialNumber=541E0A66FE60F3AAC02502CEF1E48E627A62F741
Certificate serial:       0C11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB4KZv5g86rAJQLO8eSOYnpi90E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91288D9/BA59535E425711EA8F838A43C4F9AE02/VB4KZv5g86rAJQLO8eSOYnpi90E.mft
Manifest number:          0C07
Signing time:             Tue 06 Oct 2026 18:59:26 +0000
Manifest this update:     Tue 06 Oct 2026 18:59:25 +0000
Manifest next update:     Tue 13 Oct 2026 18:59:25 +0000
Files and hashes:         1: VB4KZv5g86rAJQLO8eSOYnpi90E.crl (hash: PQjjSL2dsUs2Dwk7URSg2Y1JnyM+h7S8hgSOYsOb0mU=)
                          2: E0FCE614425811EAADEA3B45C4F9AE02.roa (hash: Dzv6nVMCXTcvRGTb84ponvjAec2eMrXrX5QtK/V7kbk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91288D9/BA59535E425711EA8F838A43C4F9AE02/VB4KZv5g86rAJQLO8eSOYnpi90E.crl
                          rsync://rpki.apnic.net/member_repository/A91288D9/BA59535E425711EA8F838A43C4F9AE02/VB4KZv5g86rAJQLO8eSOYnpi90E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB4KZv5g86rAJQLO8eSOYnpi90E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 18:59:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3089 (0xc11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91288D9, serialNumber=541E0A66FE60F3AAC02502CEF1E48E627A62F741
        Validity
            Not Before: Oct  6 18:59:25 2026 GMT
            Not After : Oct 13 18:59:25 2026 GMT
        Subject: CN=6ac5450e-c0a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:71:61:15:2d:6c:e3:b0:8f:bf:44:f0:7c:c6:
                    cc:6b:c4:48:b1:f9:ae:b4:84:8e:5c:af:f3:b5:ea:
                    e0:ba:79:cd:f0:6c:ef:03:95:01:0a:5d:12:d0:72:
                    41:13:47:3c:cb:2f:fd:86:3f:30:f7:e9:9b:54:6d:
                    71:e1:ee:9f:9e:d7:50:7f:f4:a0:be:da:7c:41:73:
                    3f:78:32:a1:c0:70:72:c4:22:45:64:4e:f8:55:94:
                    3f:cc:99:ef:39:45:b1:5f:08:56:42:20:6c:52:80:
                    38:6f:4b:b9:27:eb:d5:2d:8d:62:ee:7c:63:55:6c:
                    1b:5e:49:05:65:f5:69:ac:74:42:80:dd:44:59:6e:
                    4c:52:e9:71:f0:48:ae:2d:e1:78:f7:b1:71:1e:2b:
                    b5:25:af:9f:01:74:bd:5c:be:c3:b7:8f:5c:9c:14:
                    ba:d5:8e:ae:f9:4c:13:87:e9:e6:4d:7d:02:cb:d5:
                    92:6e:40:96:b6:4d:d1:ee:80:0c:ed:f9:2b:41:eb:
                    87:b4:ff:55:41:02:f4:84:08:7b:f0:08:b3:23:73:
                    88:53:8d:34:50:71:80:ac:4b:a2:55:a1:22:bf:da:
                    f3:29:4e:03:58:4c:c5:51:d7:e2:8a:ba:78:72:22:
                    fa:a7:b8:30:e3:bc:58:ce:42:91:2c:0e:32:bb:ee:
                    13:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:CD:1F:43:E1:DA:C3:8C:1C:CE:E3:FA:D5:63:DB:E1:1C:8F:4A:40
            X509v3 Authority Key Identifier:
                keyid:54:1E:0A:66:FE:60:F3:AA:C0:25:02:CE:F1:E4:8E:62:7A:62:F7:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91288D9/BA59535E425711EA8F838A43C4F9AE02/VB4KZv5g86rAJQLO8eSOYnpi90E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB4KZv5g86rAJQLO8eSOYnpi90E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91288D9/BA59535E425711EA8F838A43C4F9AE02/VB4KZv5g86rAJQLO8eSOYnpi90E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:17:1a:fb:b6:c3:39:20:e5:0e:47:dc:38:bc:cd:3f:f6:3a:
         bd:51:22:54:56:cc:25:3b:76:b8:a0:d5:23:19:90:2b:18:82:
         e4:85:8b:dd:dd:bc:17:5d:c3:08:ae:b1:9a:da:24:cc:86:a9:
         8a:7b:bf:6c:fe:4d:e3:c7:00:57:69:24:13:f9:f1:be:5b:aa:
         51:47:6b:e8:ec:5a:e8:b9:e3:53:56:18:d3:cb:ea:13:2d:56:
         75:c0:20:bd:30:21:7e:d3:ff:20:19:15:21:7e:59:c1:46:14:
         97:73:d7:f4:5a:aa:7c:5d:04:1f:07:f2:7f:33:d0:10:38:55:
         87:47:0d:80:5a:64:06:6e:7d:9f:73:c3:bb:a1:14:47:de:4d:
         36:ed:cf:2b:e6:b7:08:9c:45:94:d2:84:50:f6:67:2a:41:87:
         d5:74:f5:e6:b2:84:28:58:dc:a1:38:07:83:47:8c:45:ff:3a:
         3a:1d:45:21:fa:ad:0d:40:d6:bc:a0:7b:a8:3d:fd:9c:4d:c2:
         bc:ff:1d:40:0b:c9:59:4c:48:80:8e:14:b0:a2:05:90:0c:3d:
         99:56:1e:5b:ef:bf:c7:7d:ab:e4:52:98:97:ee:23:fc:6a:5d:
         e9:2b:81:02:8f:f4:14:e6:ea:86:4d:43:f7:04:4c:16:7a:4a:
         43:22:41:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:24:35 2026 by rpki-client