Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft
File:                     4VZP2lztXK5pQVMJftGUJVEgkiM.mft (raw, json)
Hash identifier:          1fGpaIsreKJwgfd9XOp61J75wch6+olBJaRE72GQRiU=
Subject key identifier:   3B:CE:4E:EC:3F:F9:7E:27:C8:1B:1A:AA:97:12:6A:00:2B:36:84:14
Authority key identifier: E1:56:4F:DA:5C:ED:5C:AE:69:41:53:09:7E:D1:94:25:51:20:92:23
Certificate issuer:       /CN=A915A300/serialNumber=E1564FDA5CED5CAE694153097ED1942551209223
Certificate serial:       36CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VZP2lztXK5pQVMJftGUJVEgkiM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft
Manifest number:          3637
Signing time:             Mon 14 Sep 2026 14:30:42 +0000
Manifest this update:     Mon 14 Sep 2026 14:30:41 +0000
Manifest next update:     Mon 21 Sep 2026 14:30:41 +0000
Files and hashes:         1: 4VZP2lztXK5pQVMJftGUJVEgkiM.crl (hash: GiaDpECuksKZ5qfvHzZXjavkFSE48WYrfQv3eSolkYI=)
                          2: 9A1C4928440511F1AA7E32FEB3833773.roa (hash: 0t6jIa9Isf5o+jCGXWqaZFVgOfCroBWBk2wiQo286KA=)
                          3: 165CEF66E60911EB950D930DC4F9AE02.roa (hash: xgnifQ1n0Nod3rsinrbUu48rMPS+NaTOxW2NBn8Hcnc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.crl
                          rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VZP2lztXK5pQVMJftGUJVEgkiM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 21 Sep 2026 14:30:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14028 (0x36cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A300, serialNumber=E1564FDA5CED5CAE694153097ED1942551209223
        Validity
            Not Before: Sep 14 14:30:41 2026 GMT
            Not After : Sep 21 14:30:41 2026 GMT
        Subject: CN=6aa80511-dc98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9f:79:1c:66:b9:e1:1e:bb:71:af:1b:2a:98:
                    b1:17:ae:03:35:fa:4a:91:26:f3:e3:ef:1b:45:08:
                    7a:3e:ec:5c:f1:1d:da:b6:f9:2b:be:b6:88:be:6c:
                    67:92:56:0c:53:80:5f:6e:b2:7a:fe:7b:62:31:7b:
                    4f:79:e4:56:c1:d1:f3:a0:b0:10:83:32:53:fa:ac:
                    f1:d2:9e:91:9c:23:15:bf:97:07:22:70:46:f7:4b:
                    5f:59:1c:47:9e:77:e6:f2:4d:22:9c:ce:54:f8:f8:
                    7f:7c:1d:d5:f8:10:a7:be:1a:99:f8:bd:15:1b:6d:
                    dc:d7:2b:67:f2:59:54:00:d2:58:28:d8:dd:75:32:
                    6a:98:6f:f0:36:17:ef:0f:32:ff:05:c7:96:d0:44:
                    5e:63:01:be:67:71:8e:ce:1b:47:23:a2:df:83:2f:
                    33:2e:59:a9:42:29:8a:77:be:cf:05:c7:9c:ce:af:
                    30:0c:74:fc:ac:f1:ba:d7:72:32:86:06:15:1f:c8:
                    e8:cc:a2:0a:b1:6f:82:23:cd:db:15:6f:02:21:39:
                    4e:1e:05:35:3a:4b:35:f2:96:6d:fc:62:3e:63:5e:
                    ef:c4:a3:ae:11:a2:20:fa:18:46:b1:3e:0a:88:54:
                    3c:98:ec:7c:9c:0f:32:8f:e2:5b:c3:85:f3:fa:aa:
                    58:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:CE:4E:EC:3F:F9:7E:27:C8:1B:1A:AA:97:12:6A:00:2B:36:84:14
            X509v3 Authority Key Identifier:
                keyid:E1:56:4F:DA:5C:ED:5C:AE:69:41:53:09:7E:D1:94:25:51:20:92:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VZP2lztXK5pQVMJftGUJVEgkiM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:85:99:58:64:92:bc:84:2f:81:80:b1:6f:b3:85:32:6b:5c:
         2b:29:20:48:76:43:d9:f1:52:b3:a6:ab:38:cf:38:9f:84:34:
         85:6f:ba:84:30:89:aa:39:ac:d3:4d:66:ca:f6:f4:7d:73:fc:
         49:a2:dc:8e:3f:2b:c8:6d:f5:a6:f6:05:74:53:16:e5:b0:5d:
         74:1c:b5:21:01:90:44:87:69:36:49:f4:87:f1:eb:ad:46:3b:
         38:be:22:8c:6b:3f:81:df:02:7a:7e:80:01:20:e3:90:56:a0:
         97:10:c3:cb:7d:4f:b0:97:37:68:38:83:25:c1:a3:55:f7:f8:
         ed:cd:c6:e9:de:31:cf:30:5f:4a:70:f8:10:72:ac:e6:3a:c7:
         23:cb:64:b7:cf:a7:02:d8:ba:0d:80:fe:26:85:71:17:20:4a:
         c9:60:5b:43:0b:5d:64:73:9d:ea:f2:f6:56:cf:3f:2a:a2:92:
         4f:74:25:16:db:97:0a:0a:a6:c6:7a:01:bc:41:a6:f5:2d:22:
         a0:82:1e:dc:ee:48:7c:d2:a3:ae:cf:52:bf:64:d3:8b:9b:23:
         e8:95:19:c2:55:f1:92:c9:f5:aa:b4:14:b4:91:ff:41:cf:f5:
         e0:2e:fc:dc:2f:3f:13:f2:cb:8d:7c:a3:b6:a7:f6:c9:64:e8:
         c7:63:16:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 10:48:43 2026 by rpki-client