Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft
File:                     VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft (raw, json)
Hash identifier:          VKpsQq3vGksg7uG3WX/nTgionZHsjKkqEbJUbcZ9KnY=
Subject key identifier:   90:75:4B:D2:79:8B:29:57:85:DC:B7:D4:99:46:2A:C1:66:42:81:24
Authority key identifier: 56:BB:6F:31:37:D8:DD:9E:B9:7E:38:3B:C7:F4:61:D9:0F:85:DD:FE
Certificate issuer:       /CN=A91433B3/serialNumber=56BB6F3137D8DD9EB97E383BC7F461D90F85DDFE
Certificate serial:       02AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft
Manifest number:          02A5
Signing time:             Fri 09 Oct 2026 01:59:39 +0000
Manifest this update:     Fri 09 Oct 2026 01:59:38 +0000
Manifest next update:     Fri 16 Oct 2026 01:59:38 +0000
Files and hashes:         1: VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.crl (hash: KSq7dPElNlaTGk+jnv5fjzIEUrSsSFbHlVrRIxAqiqw=)
                          2: AB6C302EB5F311EDA0148B2DC4F9AE02.roa (hash: bR0oOLC6N9iYPyxoInRh6y+czJ5j13C0mZMU7jGh1QE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.crl
                          rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 01:59:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 683 (0x2ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91433B3, serialNumber=56BB6F3137D8DD9EB97E383BC7F461D90F85DDFE
        Validity
            Not Before: Oct  9 01:59:38 2026 GMT
            Not After : Oct 16 01:59:38 2026 GMT
        Subject: CN=6ac84a8b-1bc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b5:70:4a:2b:fd:38:25:29:e4:12:c6:34:e1:
                    a2:13:85:39:ee:d7:ac:5a:64:ba:48:17:55:bf:fa:
                    42:a5:ff:32:d3:43:10:60:87:da:ef:51:99:4a:da:
                    65:ad:52:a9:82:7a:9c:75:02:14:bd:36:59:d8:10:
                    b0:bf:bd:f3:28:76:46:f6:1d:77:1a:eb:5e:15:a8:
                    12:da:53:ec:9b:75:fd:9d:b3:fe:27:76:f1:f1:70:
                    8c:de:d8:57:38:bc:65:26:bd:9d:9c:10:cc:12:e4:
                    3f:88:7b:28:8a:51:4e:85:16:2f:70:10:75:3d:b4:
                    7f:d9:12:7a:87:4a:4e:78:56:e3:cb:6e:d8:1c:68:
                    4f:1f:5b:3a:0b:1c:bd:5f:28:3e:59:df:08:4e:c0:
                    33:72:58:47:f0:87:7e:a2:df:ae:8c:3e:59:44:55:
                    30:bf:39:fa:bc:b7:0a:9c:59:f4:df:52:49:0c:15:
                    46:98:00:de:9f:47:3b:b4:4d:3e:e4:5b:bb:8f:04:
                    0b:a5:46:73:f8:00:48:ea:01:3f:d6:cf:72:2f:a4:
                    54:78:c2:e1:59:a6:fb:cb:af:0d:f6:88:6b:49:52:
                    f4:21:b1:e4:5e:6e:d0:62:3a:ec:da:83:f2:c6:dc:
                    cb:bf:41:05:13:9b:28:16:a9:4a:70:f3:29:3f:ca:
                    ff:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:75:4B:D2:79:8B:29:57:85:DC:B7:D4:99:46:2A:C1:66:42:81:24
            X509v3 Authority Key Identifier:
                keyid:56:BB:6F:31:37:D8:DD:9E:B9:7E:38:3B:C7:F4:61:D9:0F:85:DD:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:a2:12:e3:bc:be:92:c0:fc:b9:01:77:d8:d1:0a:a6:89:6e:
         a0:81:dd:cb:8b:c1:e8:93:91:6d:15:4e:3f:0b:38:f6:2a:4e:
         f3:48:2b:2b:8d:63:0b:2c:04:75:19:54:6f:e0:1e:90:ea:a0:
         be:22:fe:ee:fc:54:60:aa:d6:60:b1:78:f8:99:b1:58:b1:9f:
         ee:3c:c4:5f:5e:fb:14:76:b2:e1:0c:10:7e:bb:2b:c4:df:e8:
         0b:a3:51:5d:4c:97:14:e0:66:d8:b3:a9:a4:80:cc:90:26:61:
         1e:fb:91:66:83:25:4a:e2:d9:29:c8:d6:8a:d6:00:20:08:c4:
         3b:34:b8:32:f6:f0:ff:3d:82:f0:a9:4a:46:96:05:b3:36:ac:
         02:53:0b:f3:ee:44:b3:3a:66:4c:ce:a5:4e:c5:ea:fd:71:01:
         34:e4:ff:e1:e4:12:41:7a:c5:89:80:a5:1b:25:96:8c:2f:cd:
         a4:57:97:7a:27:27:ab:1c:b9:58:a1:9c:cf:1b:78:dc:bd:1d:
         18:35:97:42:da:be:2c:f4:b4:5f:ee:cc:18:19:df:df:4c:6b:
         14:65:21:ce:6e:b7:be:2d:0e:7b:07:e0:a1:8d:a3:1a:e6:03:
         1a:c7:0d:dd:e9:f6:bc:cc:98:05:b5:a2:5b:7e:0a:79:25:4a:
         97:96:fb:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 00:41:20 2026 by rpki-client