Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.mft
File:                     VIw8AL4pDBZz22aZmFINcjeERcs.mft (raw, json)
Hash identifier:          2oLJfinz7f3hl8o49k1J0eyvQX2cZdxhfRhl/+AHs5w=
Subject key identifier:   25:58:79:C3:3A:00:46:7B:2D:1E:76:EC:AD:20:E5:7E:54:81:31:80
Authority key identifier: 54:8C:3C:00:BE:29:0C:16:73:DB:66:99:98:52:0D:72:37:84:45:CB
Certificate issuer:       /CN=A914B089/serialNumber=548C3C00BE290C1673DB669998520D72378445CB
Certificate serial:       020C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIw8AL4pDBZz22aZmFINcjeERcs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.mft
Manifest number:          0203
Signing time:             Mon 05 Oct 2026 03:26:24 +0000
Manifest this update:     Mon 05 Oct 2026 03:26:23 +0000
Manifest next update:     Mon 12 Oct 2026 03:26:23 +0000
Files and hashes:         1: VIw8AL4pDBZz22aZmFINcjeERcs.crl (hash: mffWNCNxFQL10w/ZQy0+7/Nc0lTqmUoZvPRmY2Snqa0=)
                          2: 55F7C16CABDE11EEA9B44639C4F9AE02.roa (hash: +OOhEY2QYuVlJmHHeuO6Y/MNu74VTT7JnqNLcwMg9F4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.crl
                          rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIw8AL4pDBZz22aZmFINcjeERcs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 03:26:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 524 (0x20c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B089, serialNumber=548C3C00BE290C1673DB669998520D72378445CB
        Validity
            Not Before: Oct  5 03:26:23 2026 GMT
            Not After : Oct 12 03:26:23 2026 GMT
        Subject: CN=6ac318df-4428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0e:e8:62:4c:77:57:e4:e4:1d:e5:0d:d2:2e:
                    fb:dd:19:dd:43:f7:ca:ad:c1:ff:90:e6:2c:85:2c:
                    b5:83:31:f3:d7:c6:ee:6b:d3:1b:c3:91:e2:00:38:
                    b1:43:a1:62:cd:2a:9b:3d:b3:32:5b:0e:b6:50:e9:
                    ad:6e:84:de:0a:71:a6:eb:4b:10:ba:4d:50:ed:91:
                    a4:9c:1b:70:b6:1d:89:04:56:a1:a9:10:51:2f:09:
                    de:f7:cb:01:c5:68:11:ff:49:79:3b:2e:ab:1a:a8:
                    6b:19:bf:ec:54:e8:2b:aa:f1:6a:17:12:ea:7a:21:
                    09:22:54:21:7e:28:32:8a:54:fd:35:d9:d7:47:f6:
                    3b:74:76:a3:c0:9e:12:25:4a:8a:b7:6a:2e:1c:5f:
                    9f:32:8c:07:cc:b3:3b:77:f2:09:16:44:27:34:40:
                    c1:4c:43:f7:27:39:89:b3:f5:b5:ad:40:6c:18:d9:
                    11:35:e0:fd:e8:20:e0:83:c3:64:ac:8e:04:e3:4b:
                    6a:11:ef:c8:33:13:20:f1:60:df:3d:c4:b3:3a:d2:
                    a4:1f:36:49:85:f0:5f:e0:a4:c4:96:e4:ca:0f:39:
                    d2:18:32:58:93:6e:3e:2b:a8:8f:e2:bb:50:55:23:
                    9b:4b:50:ae:25:73:97:53:1c:8d:4c:49:76:a3:1c:
                    23:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:58:79:C3:3A:00:46:7B:2D:1E:76:EC:AD:20:E5:7E:54:81:31:80
            X509v3 Authority Key Identifier:
                keyid:54:8C:3C:00:BE:29:0C:16:73:DB:66:99:98:52:0D:72:37:84:45:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIw8AL4pDBZz22aZmFINcjeERcs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:ba:b7:55:5b:a2:0f:f2:6f:4a:6b:9d:7c:6d:20:de:3b:fb:
         d5:d4:ca:61:ae:46:41:53:f4:3a:de:0a:d9:f3:52:56:4a:6b:
         3e:0e:2b:b5:e7:c6:fa:8a:1a:ee:06:72:15:98:42:02:c0:bd:
         0b:ce:77:f9:58:eb:54:90:c7:70:7d:8d:d7:be:c9:ae:25:de:
         96:de:22:43:b3:96:03:62:35:c5:f6:c1:77:97:c8:d7:ad:85:
         08:4e:fb:2c:b1:56:13:d6:ab:f7:c4:41:d2:85:8c:1f:e3:29:
         4a:0a:62:b1:60:a2:df:ca:4a:0f:5d:1a:88:ce:aa:a3:b6:eb:
         88:de:b4:e3:77:d8:22:0b:7a:cb:19:0e:c3:5b:b9:a2:20:8a:
         11:e8:bc:cc:f4:98:c2:39:05:a6:b1:2a:63:4d:eb:b6:a6:86:
         1f:74:2f:d5:30:94:16:12:48:88:4d:b6:b3:9f:93:4f:b9:67:
         6e:b8:df:9f:bb:df:cb:2d:3e:18:2c:15:8d:fc:8e:a3:37:a4:
         64:a0:2f:4f:a4:31:72:43:81:11:e5:fc:29:59:66:31:7f:38:
         5e:d5:83:38:08:62:8f:1e:0d:73:77:4e:3b:7e:5e:1b:51:22:
         be:de:02:58:c1:ea:a0:82:a9:85:85:88:eb:a7:ae:16:3f:6b:
         86:d5:cf:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:53:50 2026 by rpki-client