Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.mft
File:                     vpKrpKAUQxnubUWrkJDYjV2vN_4.mft (raw, json)
Hash identifier:          FZkeMXkqVaN+p2RNtnIRgOb4sYkS0zUq+mfU+Ei8K7k=
Subject key identifier:   A6:87:81:7C:96:E7:B5:5B:E0:64:C1:68:D4:59:2C:56:82:C1:C4:7F
Authority key identifier: BE:92:AB:A4:A0:14:43:19:EE:6D:45:AB:90:90:D8:8D:5D:AF:37:FE
Certificate issuer:       /CN=A9151F3B/serialNumber=BE92ABA4A0144319EE6D45AB9090D88D5DAF37FE
Certificate serial:       0705
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpKrpKAUQxnubUWrkJDYjV2vN_4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.mft
Manifest number:          06ED
Signing time:             Tue 20 Oct 2026 22:21:54 +0000
Manifest this update:     Tue 20 Oct 2026 22:21:53 +0000
Manifest next update:     Tue 27 Oct 2026 22:21:53 +0000
Files and hashes:         1: vpKrpKAUQxnubUWrkJDYjV2vN_4.crl (hash: gWKs2Kf/ApPCIexCMQzrmumCu++5L2fyOpFW/ftI/ew=)
                          2: 21F42C4EFE5511EC9A3F6F31C4F9AE02.roa (hash: 9SWvU83uta5yQV6kASYfDhqApkdxCt/37HDqSjzPVj8=)
                          3: 76DDA85AFE5211EC8F4A4F16C4F9AE02.roa (hash: FsIfjE1hCId4WZSmCGZi8B4pcoqpgzCAhgnEUj6OePM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.crl
                          rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpKrpKAUQxnubUWrkJDYjV2vN_4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Oct 2026 22:21:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1797 (0x705)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9151F3B, serialNumber=BE92ABA4A0144319EE6D45AB9090D88D5DAF37FE
        Validity
            Not Before: Oct 20 22:21:53 2026 GMT
            Not After : Oct 27 22:21:53 2026 GMT
        Subject: CN=6ad7e982-300a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3d:d1:ca:fa:38:f5:27:61:cf:6c:9a:97:30:
                    a1:3f:bd:26:3a:d7:8a:44:97:73:5b:f6:3c:e0:7d:
                    8b:da:ce:61:64:52:e0:1e:b0:20:2e:f8:0c:0f:5f:
                    02:6d:d0:e1:fd:b2:ac:13:85:7d:34:1a:ec:c5:e7:
                    b2:ce:9f:7b:86:c2:95:1b:9c:5c:d2:d9:39:30:3d:
                    67:fd:ea:3e:79:09:ab:53:d3:cd:22:08:3a:4d:52:
                    f3:61:88:2f:96:bd:a8:a2:be:70:c6:58:4b:b6:80:
                    9c:16:b0:91:09:4a:a7:af:0f:ca:db:4e:1a:2e:92:
                    a3:92:06:96:3e:1c:51:da:dd:65:2c:c0:f0:21:a3:
                    64:d6:1e:d0:37:fa:d2:09:cb:24:b0:92:cf:6c:1d:
                    67:02:b1:43:25:5d:fc:15:41:72:66:93:57:e2:09:
                    dd:66:dc:db:5a:42:be:6f:22:da:e3:fd:c0:d2:e9:
                    6b:bb:c5:8b:47:b9:a1:44:14:9a:d3:9f:f3:53:14:
                    10:6c:30:92:60:2a:ea:38:31:39:54:27:66:98:0b:
                    3f:02:ac:b1:a5:2d:ed:ae:22:37:14:21:04:da:95:
                    7a:05:b8:f6:93:f4:2e:01:7d:57:8e:c7:90:85:fa:
                    99:a0:e0:4e:a4:fb:12:b3:c8:80:50:89:b9:38:86:
                    f8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:87:81:7C:96:E7:B5:5B:E0:64:C1:68:D4:59:2C:56:82:C1:C4:7F
            X509v3 Authority Key Identifier:
                keyid:BE:92:AB:A4:A0:14:43:19:EE:6D:45:AB:90:90:D8:8D:5D:AF:37:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpKrpKAUQxnubUWrkJDYjV2vN_4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:27:3e:c2:a9:f1:bf:b2:7e:9a:7e:22:c8:d5:8b:3f:4e:87:
         6f:39:c2:3f:ba:28:41:0e:ec:d5:a9:cc:90:31:1d:b1:6f:d7:
         c7:23:36:58:f3:10:78:1f:91:4a:5a:af:91:c8:73:2b:e9:73:
         68:59:71:53:e4:67:a2:a7:9c:62:ef:49:ca:64:1d:22:5e:f1:
         3c:c8:8f:93:a5:e6:07:30:90:50:93:ce:9c:71:04:7b:99:c6:
         e0:22:0c:d7:8f:e9:3e:98:40:2f:09:89:00:ff:05:24:c1:1f:
         e2:24:4e:16:ea:ec:67:17:9e:70:d2:fd:72:68:b5:84:a7:bd:
         53:69:2c:ca:13:3f:4a:bd:bc:f9:a8:28:8e:be:c9:15:8a:17:
         d6:95:2c:8c:4b:7c:54:ad:5a:12:99:82:fa:fe:b9:69:6d:d3:
         6f:fb:68:46:80:b7:d2:a8:43:8c:77:bb:fd:93:57:6f:f8:92:
         c3:1a:b2:bd:e2:52:26:79:db:b8:b6:fd:75:ba:fd:8a:4a:02:
         73:21:f7:0d:8c:ab:f4:dc:97:08:cb:5a:f0:72:11:df:3d:41:
         24:18:b5:64:7a:56:a5:a9:6e:62:2f:db:48:d2:8a:36:fa:f6:
         db:87:13:59:64:ee:f8:28:5f:3d:36:a8:0d:1d:16:8a:b5:fc:
         0a:92:74:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 02:42:34 2026 by rpki-client