Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft
File:                     vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft (raw, json)
Hash identifier:          cNtvcYrkmkv+Q3Xfb/zv24moe02vjssuvbHFHIiI/ug=
Subject key identifier:   6A:D8:47:AD:10:E9:2D:E2:8E:29:AD:17:B0:D3:C3:15:93:5C:54:40
Authority key identifier: BD:63:E0:DD:CB:5C:D4:1B:34:50:1D:F2:E8:1A:2A:72:CE:E3:6E:F2
Certificate issuer:       /CN=A917B503/serialNumber=BD63E0DDCB5CD41B34501DF2E81A2A72CEE36EF2
Certificate serial:       01B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft
Manifest number:          01B2
Signing time:             Tue 27 Oct 2026 04:18:53 +0000
Manifest this update:     Tue 27 Oct 2026 04:18:53 +0000
Manifest next update:     Tue 03 Nov 2026 04:18:53 +0000
Files and hashes:         1: vWPg3ctc1Bs0UB3y6Boqcs7jbvI.crl (hash: 4E2PS+CYccayFifPvLoNrhBn432vw0CRHqVn7Def5LI=)
                          2: FF7048A08BB111EF8981B871C4F9AE02.roa (hash: Pf4vtsycRl7uQ7TRSuhW3ZPGeuFhV8pttTvvgiVqOIo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.crl
                          rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 04:18:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 441 (0x1b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B503, serialNumber=BD63E0DDCB5CD41B34501DF2E81A2A72CEE36EF2
        Validity
            Not Before: Oct 27 04:18:53 2026 GMT
            Not After : Nov  3 04:18:53 2026 GMT
        Subject: CN=6ae0262d-9254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ff:fc:26:67:26:e7:7c:dc:40:9c:6c:b4:e3:
                    31:84:9b:21:7d:e1:cf:fb:0b:5a:f9:17:c4:e8:0f:
                    17:b8:6f:1e:37:89:86:d3:6b:19:c7:c3:d7:8b:57:
                    9b:d5:a1:c1:bd:7c:f0:53:50:23:ed:ca:46:47:58:
                    5c:d6:7c:34:68:38:9d:52:22:e8:bb:34:c7:d2:db:
                    83:c9:32:bd:7d:06:9e:e0:8c:e9:dc:50:88:70:d7:
                    0f:43:1d:14:b9:13:58:f0:32:8b:6b:f6:4d:24:78:
                    27:d6:65:10:be:66:6b:d4:0a:c1:f4:a9:de:ac:19:
                    07:d5:cc:e0:55:1e:dc:32:88:f7:4e:32:6e:9f:ac:
                    be:06:70:a5:f1:d4:17:61:35:a0:a7:95:92:8b:e7:
                    cd:ea:a9:f8:ab:d7:0f:dc:3f:94:3c:9f:10:e4:91:
                    7f:db:fe:27:07:bd:7c:9f:ff:5c:f8:5e:81:a6:d5:
                    db:84:99:c0:70:90:40:57:66:d7:f0:85:21:23:b4:
                    a7:bb:3f:46:9e:b1:3a:1d:fc:a9:f8:7d:80:3f:8d:
                    90:42:74:d6:de:a7:3f:b1:e9:ae:04:6a:52:76:0d:
                    86:49:e9:64:4a:a7:ce:40:a8:66:5e:b1:d9:cd:56:
                    fb:84:67:db:df:3c:50:c0:19:e4:3d:de:21:de:4c:
                    f5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:D8:47:AD:10:E9:2D:E2:8E:29:AD:17:B0:D3:C3:15:93:5C:54:40
            X509v3 Authority Key Identifier:
                keyid:BD:63:E0:DD:CB:5C:D4:1B:34:50:1D:F2:E8:1A:2A:72:CE:E3:6E:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:e5:9d:56:c9:02:2d:00:14:cc:7f:5c:bd:3c:a4:45:3c:f4:
         9e:8a:68:69:ac:f7:40:b7:85:2b:39:d4:73:d0:8a:6b:19:53:
         13:f8:69:ae:30:61:23:dc:6b:7b:dc:86:cb:0c:29:e9:af:a2:
         98:5d:7e:8a:4c:b6:13:34:63:cf:66:d7:35:06:86:08:f6:96:
         a9:0a:bc:c6:fb:56:20:36:66:02:92:07:9a:44:1e:a4:00:f8:
         bb:f3:0e:4f:cc:aa:f1:96:57:ef:ff:bd:2b:6a:34:d5:84:20:
         c8:fd:2b:75:11:d7:8b:21:00:b8:f5:a0:80:78:0d:8e:23:c6:
         98:ba:c9:66:9b:47:ab:da:ef:4e:4b:d5:a0:c9:50:c3:2f:93:
         a7:51:40:6a:2a:80:46:a9:77:08:61:d9:df:84:58:bc:9b:94:
         ff:7f:fb:1e:28:cc:7a:8a:53:f0:e5:9e:18:08:75:e7:c3:de:
         2c:f0:6a:6a:54:42:d2:6b:0e:14:d0:1a:3b:41:9c:70:cc:f0:
         e0:01:a6:f4:b2:7b:7f:1a:24:48:83:ef:73:ea:d6:ae:26:f8:
         97:3e:a3:8e:b1:7d:8c:b5:5b:ec:8a:9e:ea:d3:05:c4:36:1c:
         df:57:5a:0d:9d:0a:23:51:a2:4c:38:2b:e4:58:c6:2f:2b:74:
         92:d2:d2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:24:05 2026 by rpki-client