Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913E614/2FD900E0C3A111F09B1BC339C4F9AE02/VXPFaK4BSBTRtN6vaPpGT0lSNmE.mft
File:                     VXPFaK4BSBTRtN6vaPpGT0lSNmE.mft (raw, json)
Hash identifier:          ClaySrd4xRnngIOYv7LDft+h87SJ2pE8cjyGqTQsnUs=
Subject key identifier:   0D:71:E7:6E:44:8C:00:68:9A:B4:58:C6:97:08:13:69:33:99:F9:21
Authority key identifier: 55:73:C5:68:AE:01:48:14:D1:B4:DE:AF:68:FA:46:4F:49:52:36:61
Certificate issuer:       /CN=A913E614/serialNumber=5573C568AE014814D1B4DEAF68FA464F49523661
Certificate serial:       B4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXPFaK4BSBTRtN6vaPpGT0lSNmE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E614/2FD900E0C3A111F09B1BC339C4F9AE02/VXPFaK4BSBTRtN6vaPpGT0lSNmE.mft
Manifest number:          AE
Signing time:             Wed 07 Oct 2026 07:39:13 +0000
Manifest this update:     Wed 07 Oct 2026 07:39:12 +0000
Manifest next update:     Wed 14 Oct 2026 07:39:12 +0000
Files and hashes:         1: VXPFaK4BSBTRtN6vaPpGT0lSNmE.crl (hash: 0fRIR4rGyNHTGOdekaTbU6+QyoWnENYiLanPdKEgOeA=)
                          2: 390B7BFAC62311F092B8183CC4F9AE02.roa (hash: OdFik9QbQwbDNwBO8NmeHTSCxxItyVwP3BUltpegtXI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E614/2FD900E0C3A111F09B1BC339C4F9AE02/VXPFaK4BSBTRtN6vaPpGT0lSNmE.crl
                          rsync://rpki.apnic.net/member_repository/A913E614/2FD900E0C3A111F09B1BC339C4F9AE02/VXPFaK4BSBTRtN6vaPpGT0lSNmE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXPFaK4BSBTRtN6vaPpGT0lSNmE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 07:39:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 180 (0xb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E614, serialNumber=5573C568AE014814D1B4DEAF68FA464F49523661
        Validity
            Not Before: Oct  7 07:39:12 2026 GMT
            Not After : Oct 14 07:39:12 2026 GMT
        Subject: CN=6ac5f721-fcff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:fc:c2:c4:23:46:c2:2d:b8:1e:e9:8c:24:ed:
                    c1:1a:fe:76:93:dc:6a:3a:34:99:da:20:65:be:66:
                    9f:7a:4b:83:25:42:28:aa:79:f4:6a:3e:e4:e0:30:
                    e1:69:ed:d5:c8:a6:99:32:43:bd:92:65:a0:f4:d3:
                    72:fe:0f:54:a6:59:ef:5e:50:9b:3a:d3:6a:6a:64:
                    f8:0f:50:79:0a:77:58:43:53:95:30:3a:b0:6f:8a:
                    e5:c7:01:18:d5:01:9c:d8:41:e1:ab:2b:0f:9f:a8:
                    81:e6:cc:33:5f:c8:06:f3:e7:39:e1:ca:a0:2f:28:
                    5c:56:c6:29:66:93:a0:d8:3c:18:cc:f9:99:01:13:
                    f4:08:36:ac:5f:f4:76:2a:b4:e0:23:76:ab:29:d9:
                    73:86:c6:25:2d:62:83:84:2d:9a:41:22:27:d0:d6:
                    f0:61:32:1a:4a:73:b4:a9:0b:c0:96:f8:4c:e8:c8:
                    5d:36:26:33:ff:41:5a:6a:1a:eb:54:f0:56:75:a1:
                    8e:6a:ef:05:af:c5:ce:12:45:df:41:f9:37:24:c0:
                    28:c8:a9:14:e3:b6:5f:a9:f7:3e:5b:6f:b2:3f:de:
                    65:9d:67:93:2e:a1:d2:a7:d6:9e:f9:81:d6:19:b3:
                    2a:2b:d7:b0:0b:9e:9b:aa:8a:81:60:e3:8c:85:63:
                    50:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:71:E7:6E:44:8C:00:68:9A:B4:58:C6:97:08:13:69:33:99:F9:21
            X509v3 Authority Key Identifier:
                keyid:55:73:C5:68:AE:01:48:14:D1:B4:DE:AF:68:FA:46:4F:49:52:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E614/2FD900E0C3A111F09B1BC339C4F9AE02/VXPFaK4BSBTRtN6vaPpGT0lSNmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXPFaK4BSBTRtN6vaPpGT0lSNmE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E614/2FD900E0C3A111F09B1BC339C4F9AE02/VXPFaK4BSBTRtN6vaPpGT0lSNmE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:05:5c:cb:7f:65:f5:a1:f5:5d:c0:b4:3d:a3:54:92:6c:c2:
         67:07:58:95:d5:ef:d2:17:72:de:2e:b0:5d:60:d1:47:fb:af:
         6a:3d:1b:3e:6d:36:2c:f2:14:ca:a9:c0:60:25:c5:53:35:7a:
         e3:92:75:da:42:71:fa:89:43:f6:0d:7b:fb:8d:89:f2:49:20:
         b2:96:8f:48:2a:89:d8:7f:5b:00:b5:3c:31:b2:3e:e5:76:d4:
         da:05:f0:4d:e9:3a:8a:f9:1e:ac:ff:90:3c:35:29:28:49:e5:
         8e:56:74:9c:d0:39:7d:08:54:9d:e6:50:2e:50:1e:70:68:8d:
         68:04:06:93:4e:96:4e:9c:ec:d0:e9:3a:60:47:19:9b:89:16:
         94:df:ab:e2:18:60:90:0e:0d:0e:b4:9f:f9:9c:1d:45:49:c7:
         5c:42:de:af:c4:b8:eb:15:49:0e:60:b7:f2:33:be:a0:5b:ad:
         bb:86:a0:1c:9b:25:aa:f5:a5:7d:7d:d5:67:b3:92:e1:c0:fd:
         a2:95:ac:e5:32:06:37:48:7f:57:3b:fc:d8:ca:44:69:2a:89:
         8f:9c:75:c3:1f:2a:d4:8c:68:d4:2c:74:22:3c:6a:44:0e:42:
         74:51:47:f3:c7:54:7d:10:67:3e:08:c8:b7:b8:8a:ca:f6:d0:
         db:4d:a9:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:35:23 2026 by rpki-client