Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9171845/7B62C80820CA11ECB66C1452C4F9AE02/vJfyb7J4ln3TyjnFndCMaiwjBvk.mft
File:                     vJfyb7J4ln3TyjnFndCMaiwjBvk.mft (raw, json)
Hash identifier:          qt9KcjaMOd/kYiVulY7HnQodV5SETbMqb56iBfoTZpY=
Subject key identifier:   91:2B:7B:10:0E:46:87:A2:3B:00:50:8E:AD:42:FA:4F:40:A3:16:30
Authority key identifier: BC:97:F2:6F:B2:78:96:7D:D3:CA:39:C5:9D:D0:8C:6A:2C:23:06:F9
Certificate issuer:       /CN=A9171845/serialNumber=BC97F26FB278967DD3CA39C59DD08C6A2C2306F9
Certificate serial:       05F5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vJfyb7J4ln3TyjnFndCMaiwjBvk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171845/7B62C80820CA11ECB66C1452C4F9AE02/vJfyb7J4ln3TyjnFndCMaiwjBvk.mft
Manifest number:          05E5
Signing time:             Mon 26 Oct 2026 22:53:12 +0000
Manifest this update:     Mon 26 Oct 2026 22:53:11 +0000
Manifest next update:     Mon 02 Nov 2026 22:53:11 +0000
Files and hashes:         1: vJfyb7J4ln3TyjnFndCMaiwjBvk.crl (hash: hlwZHYPSwWbYkOjicsbuQcjswrvvQ6IIXGYd48SMUkk=)
                          2: 8B91EDB420CD11EC97292B78C4F9AE02.roa (hash: RjP1SjVYlpextmQWA6WLR//gniORCU8M6e6l6bHmv1w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171845/7B62C80820CA11ECB66C1452C4F9AE02/vJfyb7J4ln3TyjnFndCMaiwjBvk.crl
                          rsync://rpki.apnic.net/member_repository/A9171845/7B62C80820CA11ECB66C1452C4F9AE02/vJfyb7J4ln3TyjnFndCMaiwjBvk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vJfyb7J4ln3TyjnFndCMaiwjBvk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 22:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1525 (0x5f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171845, serialNumber=BC97F26FB278967DD3CA39C59DD08C6A2C2306F9
        Validity
            Not Before: Oct 26 22:53:11 2026 GMT
            Not After : Nov  2 22:53:11 2026 GMT
        Subject: CN=6adfd9d7-3e6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ac:99:4f:dd:65:03:b2:31:0d:ec:86:6c:f3:
                    d0:56:2c:29:cc:4d:d0:22:f2:ae:48:3f:aa:34:a3:
                    6d:2e:90:68:f4:74:3c:87:61:ae:98:0d:dd:dd:ba:
                    af:14:7e:70:c1:0b:c8:e6:ce:7a:0e:58:1e:34:a7:
                    24:ba:34:75:30:69:0c:f5:41:35:68:a6:67:93:d3:
                    bf:cc:e6:34:0a:51:cc:9e:de:04:ed:d8:86:16:ec:
                    c3:b1:29:da:09:13:e3:13:fb:7f:c5:d4:dc:6d:f4:
                    4d:f8:09:80:4b:45:dc:9c:b8:ba:ba:7b:72:18:61:
                    6d:87:ec:67:59:e6:bd:cb:9c:51:72:e0:68:55:ae:
                    bb:30:7e:44:1f:c6:9f:f0:b1:02:b4:3f:04:29:05:
                    35:43:66:bc:15:44:41:8a:eb:ed:df:4f:91:95:c4:
                    e2:52:c0:d5:2c:63:7e:b5:91:b0:db:28:03:c6:bc:
                    9e:3e:02:ff:7c:2c:89:c2:e3:39:09:d0:13:19:94:
                    b3:c8:dd:8d:ea:4a:62:be:78:69:d2:42:d8:e6:b8:
                    1a:bb:65:40:a1:85:f8:9f:91:71:f8:f4:d4:43:de:
                    6c:46:ba:9b:29:9a:27:cc:3f:d6:bd:05:9f:6e:a1:
                    8c:4d:71:b7:6d:f8:35:66:87:93:6f:65:9f:21:ba:
                    54:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:2B:7B:10:0E:46:87:A2:3B:00:50:8E:AD:42:FA:4F:40:A3:16:30
            X509v3 Authority Key Identifier:
                keyid:BC:97:F2:6F:B2:78:96:7D:D3:CA:39:C5:9D:D0:8C:6A:2C:23:06:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171845/7B62C80820CA11ECB66C1452C4F9AE02/vJfyb7J4ln3TyjnFndCMaiwjBvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vJfyb7J4ln3TyjnFndCMaiwjBvk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171845/7B62C80820CA11ECB66C1452C4F9AE02/vJfyb7J4ln3TyjnFndCMaiwjBvk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:35:a4:d1:ea:c7:12:f3:cc:15:99:cd:3a:62:c5:4c:35:28:
         71:da:30:b3:70:c8:79:53:76:59:5c:77:87:eb:76:4a:e0:66:
         3b:a8:17:2f:b5:bb:23:24:fd:87:3f:2c:0a:45:29:fa:b7:c3:
         c9:d3:b4:ee:c0:1a:dd:e0:32:69:8e:44:2b:fa:b7:e9:cb:72:
         8f:50:c3:4e:8e:fe:7c:a0:e3:14:e5:51:f9:f1:52:fa:a9:bb:
         2b:d1:e1:bd:7d:8b:4c:cb:4b:72:9c:78:14:07:c5:63:c7:13:
         a7:a2:83:64:c8:23:30:56:6e:a8:6c:fb:cb:34:08:8c:cd:c5:
         b8:71:e9:99:82:49:66:5d:da:b0:f7:e5:ec:e4:2a:43:53:a6:
         a1:bc:7e:2c:94:db:21:df:b6:89:0f:26:c8:c8:17:89:33:15:
         ef:cc:f0:79:30:b4:ce:52:fd:81:d4:4d:2b:31:3f:14:76:01:
         4b:3e:1c:07:d6:45:5d:6f:4b:d6:0d:de:a6:8d:85:b0:26:f3:
         57:3d:5b:5f:34:e0:d1:e7:04:8c:68:d3:74:f5:14:f4:db:bb:
         37:d0:62:93:9a:16:2b:2b:3b:b6:36:de:86:1a:35:b4:e6:04:
         df:36:06:f3:ba:c6:d1:7b:eb:2a:f3:3d:a2:b1:10:a0:f8:b4:
         90:02:e9:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:29:04 2026 by rpki-client