Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916537A/9F817BB6276A11F1A891B17FC2833773/VqcyG_yMPsLpkWD6MztPVMGClGo.mft
File:                     VqcyG_yMPsLpkWD6MztPVMGClGo.mft (raw, json)
Hash identifier:          ZrY3wv3HMrSKEaTi3SuP1gMdPd1QtJLU3neKr4z5FCs=
Subject key identifier:   14:FE:D8:8F:54:D9:2B:F6:90:DD:91:FE:95:09:EB:BE:52:3E:CB:18
Authority key identifier: 56:A7:32:1B:FC:8C:3E:C2:E9:91:60:FA:33:3B:4F:54:C1:82:94:6A
Certificate issuer:       /CN=A916537A/serialNumber=56A7321BFC8C3EC2E99160FA333B4F54C182946A
Certificate serial:       75
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqcyG_yMPsLpkWD6MztPVMGClGo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916537A/9F817BB6276A11F1A891B17FC2833773/VqcyG_yMPsLpkWD6MztPVMGClGo.mft
Manifest number:          73
Signing time:             Tue 27 Oct 2026 08:14:00 +0000
Manifest this update:     Tue 27 Oct 2026 08:14:00 +0000
Manifest next update:     Tue 03 Nov 2026 08:14:00 +0000
Files and hashes:         1: VqcyG_yMPsLpkWD6MztPVMGClGo.crl (hash: G92PqGDRR4e+ySqnPSP1RiNGrfeYc+XajGr9uPwGrTA=)
                          2: 955C204027D911F183CCD80FA7833773.roa (hash: c6JUDw7tq3Ict9tWMfIj9zis/6zIdlmfIPXyLf2HU9E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916537A/9F817BB6276A11F1A891B17FC2833773/VqcyG_yMPsLpkWD6MztPVMGClGo.crl
                          rsync://rpki.apnic.net/member_repository/A916537A/9F817BB6276A11F1A891B17FC2833773/VqcyG_yMPsLpkWD6MztPVMGClGo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqcyG_yMPsLpkWD6MztPVMGClGo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 08:13:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117 (0x75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916537A, serialNumber=56A7321BFC8C3EC2E99160FA333B4F54C182946A
        Validity
            Not Before: Oct 27 08:14:00 2026 GMT
            Not After : Nov  3 08:14:00 2026 GMT
        Subject: CN=6ae05d48-daa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:df:7e:30:fa:76:ed:4c:f5:15:01:30:cb:ac:
                    da:e6:79:59:56:41:6c:cc:5d:8a:d7:f3:6e:b0:f5:
                    9e:17:34:88:6c:20:b5:8c:40:17:c3:81:31:40:63:
                    16:cc:d5:a5:4b:59:98:cd:bd:fe:c9:94:9b:3b:71:
                    09:3b:6c:11:16:bc:bd:6f:84:3e:4c:98:b6:9e:19:
                    da:96:50:6e:42:4d:c1:33:e4:90:2c:27:93:15:85:
                    09:21:c6:10:d0:ab:50:05:46:0e:ae:ef:18:af:15:
                    35:35:8a:e4:39:e6:29:26:e3:f2:14:57:a9:dc:51:
                    a7:bb:39:04:e5:51:3f:ea:1c:88:e2:28:c2:ea:33:
                    39:98:b4:f7:5a:1b:fe:f5:e0:95:d0:ab:f8:4d:0a:
                    ea:2e:6f:ba:8b:fe:35:77:a2:da:95:59:c9:33:a0:
                    d1:87:07:f5:07:a1:3b:9c:3b:00:86:d7:dd:b8:cf:
                    71:bf:da:3b:f4:c2:a6:23:f1:7a:93:cf:87:d4:a2:
                    f3:e4:23:85:bc:14:14:a0:0f:fa:45:af:1d:ee:ff:
                    57:0b:e3:7c:90:60:df:46:64:85:27:7c:f9:7d:ea:
                    ec:45:01:33:7a:70:23:05:3a:dc:68:68:de:9c:5a:
                    45:ff:12:02:c8:d1:e9:4b:f6:33:15:73:37:5c:32:
                    33:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:FE:D8:8F:54:D9:2B:F6:90:DD:91:FE:95:09:EB:BE:52:3E:CB:18
            X509v3 Authority Key Identifier:
                keyid:56:A7:32:1B:FC:8C:3E:C2:E9:91:60:FA:33:3B:4F:54:C1:82:94:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916537A/9F817BB6276A11F1A891B17FC2833773/VqcyG_yMPsLpkWD6MztPVMGClGo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqcyG_yMPsLpkWD6MztPVMGClGo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916537A/9F817BB6276A11F1A891B17FC2833773/VqcyG_yMPsLpkWD6MztPVMGClGo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:17:8a:fb:77:f4:d3:f2:dc:cc:37:45:12:fe:cc:58:a1:51:
         df:de:b5:1b:bd:00:2f:b9:3a:71:68:2b:91:92:22:2d:0c:95:
         77:c3:c0:b6:b2:91:6b:ce:ae:7b:54:cf:57:31:ef:54:4a:f0:
         cd:ee:b2:ce:6d:37:29:c6:a9:d9:87:e0:0c:4b:62:a7:70:65:
         35:68:c3:e6:cc:a0:fa:db:ba:b3:44:5e:05:0a:87:ff:ee:9e:
         be:cc:7c:81:f6:bb:cc:31:08:a4:f7:f6:d1:0c:38:af:00:94:
         09:3e:14:c1:94:4c:2d:a5:a1:fd:bd:ae:f1:17:99:93:00:6d:
         62:79:f9:b5:90:03:50:ba:da:9e:42:9e:a6:7f:2b:b8:04:89:
         b2:02:d9:29:d5:1d:4c:ce:f1:5a:af:2b:0b:26:d5:47:0a:78:
         f5:de:a5:10:96:26:78:da:cb:51:0a:7f:59:cf:81:42:11:eb:
         61:fb:a2:31:98:13:59:16:0a:a9:5d:dc:2b:18:62:ff:9e:3e:
         05:0c:0f:9d:a0:eb:2a:a3:69:30:83:b4:49:1a:d9:a7:c0:d4:
         53:e8:46:8e:59:5c:b8:63:04:08:b2:51:d0:19:5c:5e:03:1b:
         5c:ef:95:d7:95:50:fd:08:20:2f:d1:ea:a3:db:26:02:d9:28:
         88:61:9f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 10:56:54 2026 by rpki-client