Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft
File:                     0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft (raw, json)
Hash identifier:          LA8hxHH3l2zS+slBqnT5BXOq9PtykzeP/3+D5oAW4fQ=
Subject key identifier:   B7:83:7D:02:73:EA:95:64:27:99:8B:A1:CB:94:6D:37:8A:B2:31:AC
Authority key identifier: D1:53:F7:58:5F:62:E9:C3:15:12:D2:86:88:84:01:C1:A6:8D:DE:16
Certificate issuer:       /CN=A9143684/serialNumber=D153F7585F62E9C31512D286888401C1A68DDE16
Certificate serial:       0275
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0VP3WF9i6cMVEtKGiIQBwaaN3hY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft
Manifest number:          0275
Signing time:             Mon 26 Oct 2026 15:09:59 +0000
Manifest this update:     Mon 26 Oct 2026 15:09:58 +0000
Manifest next update:     Mon 02 Nov 2026 15:09:58 +0000
Files and hashes:         1: 0VP3WF9i6cMVEtKGiIQBwaaN3hY.crl (hash: kn5HQSjygdT+HZf7z4Szi6M8uoy62Nb38h7xgAUagX0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.crl
                          rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0VP3WF9i6cMVEtKGiIQBwaaN3hY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 629 (0x275)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143684, serialNumber=D153F7585F62E9C31512D286888401C1A68DDE16
        Validity
            Not Before: Oct 26 15:09:58 2026 GMT
            Not After : Nov  2 15:09:58 2026 GMT
        Subject: CN=6adf6d47-e6e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0a:f9:71:6a:d0:a7:3b:b0:9f:72:02:0e:9c:
                    86:92:d8:96:1a:d9:32:09:8e:6c:f1:5f:e8:17:03:
                    bb:fb:2f:0a:7a:df:83:e8:b1:36:ce:40:b3:e1:ce:
                    04:db:fe:1c:c2:20:a8:4a:ba:7d:b2:b7:f4:3e:79:
                    cd:b6:32:df:20:10:a4:b6:a4:14:1b:4d:65:77:d5:
                    3e:3f:cf:91:6e:fd:14:e6:ac:78:30:5e:ea:5f:b6:
                    9f:51:33:c5:9a:ce:ac:59:68:3f:8e:4f:b0:e6:ca:
                    c6:c2:1b:5f:ec:53:85:07:ac:d2:ab:07:b5:03:fc:
                    03:21:0c:3b:e3:a9:de:ad:ad:40:c7:38:82:5e:eb:
                    48:88:d6:f8:0c:d4:30:6d:24:b4:5a:18:c5:45:7e:
                    8a:30:d7:1b:58:b0:9b:39:ee:f0:9b:f9:67:b7:d9:
                    76:a4:61:1f:4f:53:97:09:e6:72:3f:bd:b5:ee:18:
                    d0:8c:1e:68:94:02:b1:13:de:dd:16:2f:ed:ac:1b:
                    4e:f1:49:2f:46:ae:ac:e4:2b:b0:1c:0f:f9:18:71:
                    98:6f:45:10:35:59:19:29:64:1e:e3:c6:a3:00:6c:
                    ea:9f:22:df:64:fc:c5:d7:bc:fc:63:60:48:fe:f5:
                    ae:f1:d6:bb:33:14:4c:3c:c9:76:0b:1b:b8:67:d5:
                    9c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:83:7D:02:73:EA:95:64:27:99:8B:A1:CB:94:6D:37:8A:B2:31:AC
            X509v3 Authority Key Identifier:
                keyid:D1:53:F7:58:5F:62:E9:C3:15:12:D2:86:88:84:01:C1:A6:8D:DE:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0VP3WF9i6cMVEtKGiIQBwaaN3hY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:30:cd:bb:5e:a7:5b:be:37:b9:b0:1e:a8:ae:f2:45:8c:5c:
         bb:bd:0f:29:74:fe:7f:08:76:4f:87:79:5f:d5:e7:fe:e8:a3:
         94:65:79:db:0a:e5:48:d6:35:0d:2c:7b:a6:6b:0d:5b:23:a6:
         f7:55:17:ab:df:46:f2:03:ed:6e:15:85:32:7f:e8:62:7f:a8:
         24:db:66:86:ba:68:12:fb:dc:21:47:cb:1d:42:09:fe:3e:31:
         6f:67:1d:c8:68:d1:b7:53:4b:74:e1:dc:0a:8b:63:14:d7:32:
         92:03:f8:11:34:eb:94:4c:a1:28:60:ca:82:83:73:97:ef:65:
         70:24:6d:1a:62:0c:27:eb:b0:de:11:5b:fa:4f:25:d8:d1:58:
         98:cc:a6:25:53:51:1a:a3:39:c4:c6:9c:4e:94:4d:0e:2f:92:
         53:21:6b:9a:f4:fd:9b:94:05:1b:63:aa:02:4c:46:a9:f5:18:
         92:b4:79:94:cf:14:3f:d4:8f:a7:2b:22:f7:b5:30:65:c6:71:
         e2:db:0f:59:fb:05:d1:f3:46:e4:22:fd:b1:18:87:bd:56:b8:
         1e:1a:96:a8:32:d8:06:b9:bb:92:0a:18:35:0f:90:70:f3:23:
         67:1c:c8:3b:f7:2a:12:36:43:19:7e:ad:02:5a:41:2b:1a:82:
         84:aa:a7:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:56:36 2026 by rpki-client