Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft
File:                     vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft (raw, json)
Hash identifier:          3yb5O9setcxhoYrnC0A4LnwtAw92xKAMHHmlUIgpVNs=
Subject key identifier:   ED:E9:34:94:1F:06:D2:10:1B:C1:AF:8D:49:D7:DF:EC:55:45:3F:4B
Authority key identifier: BE:63:41:A7:CC:0C:A0:F6:C1:A1:5E:04:66:EC:71:55:B8:28:3C:9D
Certificate issuer:       /CN=A91862F9/serialNumber=BE6341A7CC0CA0F6C1A15E0466EC7155B8283C9D
Certificate serial:       026B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft
Manifest number:          0258
Signing time:             Mon 05 Oct 2026 02:40:29 +0000
Manifest this update:     Mon 05 Oct 2026 02:40:29 +0000
Manifest next update:     Mon 12 Oct 2026 02:40:29 +0000
Files and hashes:         1: vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl (hash: J92M95juCvFehdcmDc12DSBT4oqfzWksQhaTXU161jE=)
                          2: 46E49D1CE79811EEA89C5E56C4F9AE02.roa (hash: 6C6tZ6qc0bPd5cmdJS1cS5+JYR5Il5YOuLJVi+PmwiQ=)
                          3: EF15AC2A9EB611F09A08B07EC4F9AE02.roa (hash: B+Dy/j+kXETnaKbJEOrkqHVWzH2J3+s0YW/BU2w7Gvo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl
                          rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 02:40:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 619 (0x26b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862F9, serialNumber=BE6341A7CC0CA0F6C1A15E0466EC7155B8283C9D
        Validity
            Not Before: Oct  5 02:40:29 2026 GMT
            Not After : Oct 12 02:40:29 2026 GMT
        Subject: CN=6ac30e1d-a72e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:de:b6:97:78:2f:01:99:a3:01:38:2e:1a:a6:
                    71:75:56:5d:51:a5:cf:30:7d:15:81:ba:86:10:3c:
                    16:77:31:03:9b:d6:95:e6:5a:86:5d:38:65:65:1e:
                    dc:fd:2e:43:91:76:56:2c:89:1f:5c:6e:e0:fe:7e:
                    78:ee:63:23:e6:de:9f:81:24:5d:66:b7:09:ce:5e:
                    5a:bc:72:9e:e0:84:63:10:28:7e:7b:c7:e5:94:0b:
                    f9:15:6d:b6:c5:91:ef:3f:5a:4d:60:f8:41:ba:f8:
                    03:65:8c:f3:90:80:04:4e:dd:c6:27:6f:d1:54:07:
                    0e:23:1f:1f:0b:82:00:1d:2c:67:55:4b:dd:1a:09:
                    f8:c0:92:fb:7e:6b:30:18:ab:54:16:d4:9f:40:77:
                    33:84:5c:a8:cd:b5:39:4b:7d:d8:a7:cc:0a:f9:44:
                    06:3d:d8:1f:52:50:69:a9:e0:33:8d:ca:32:d0:0f:
                    53:52:5f:6a:29:e9:d2:d2:07:29:d9:52:30:ea:c2:
                    95:33:39:3a:aa:b2:55:af:d9:66:0e:26:25:72:6d:
                    86:1f:58:58:37:2d:77:83:d7:4d:85:09:db:2b:5d:
                    7c:d8:15:cd:a4:67:2f:9f:b7:84:c4:14:3f:1f:f0:
                    c2:a3:3d:25:e8:0f:8f:59:61:46:e0:37:9a:ff:3d:
                    96:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E9:34:94:1F:06:D2:10:1B:C1:AF:8D:49:D7:DF:EC:55:45:3F:4B
            X509v3 Authority Key Identifier:
                keyid:BE:63:41:A7:CC:0C:A0:F6:C1:A1:5E:04:66:EC:71:55:B8:28:3C:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:64:4a:9f:4b:fb:53:bc:fe:a5:4f:ae:88:db:0c:a0:69:51:
         1f:26:69:96:1b:7a:e7:8c:45:0c:18:48:40:24:8f:20:56:d8:
         ea:5b:99:79:f7:83:78:f4:96:97:ee:39:3a:c4:d1:6a:0f:3d:
         57:46:07:e1:fa:67:37:53:c9:49:1b:85:10:13:1b:04:23:de:
         f2:ad:57:7d:84:c1:14:74:95:d5:e6:2d:7e:7b:2e:ff:6a:0c:
         24:98:9f:fe:8d:cf:32:20:f5:cd:6c:2b:cc:b7:61:c1:c6:68:
         7c:34:f3:66:7c:72:17:62:d3:d3:02:28:17:5f:82:9a:0f:c7:
         6b:9f:0a:53:d0:ad:08:f4:77:83:70:e0:b3:e1:fd:d3:f8:d3:
         45:48:1b:16:26:2f:e8:15:9b:f5:ad:67:c0:d0:c5:af:f2:7b:
         71:51:36:3d:a4:4e:9d:83:0d:27:3f:e3:51:ef:40:dd:99:bf:
         2f:86:49:a1:7c:53:59:0c:09:ce:00:0f:e8:5c:d9:cf:84:e0:
         9f:4a:53:e3:97:f1:a2:c0:34:eb:4f:4f:e5:61:2c:23:c6:48:
         89:09:d4:f1:fb:0a:27:df:e6:3c:7a:83:35:c9:96:b0:0b:4b:
         26:d3:dd:d0:00:c0:6a:fc:76:20:ba:7d:87:ce:c9:b2:d5:12:
         e7:d4:aa:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 18:30:05 2026 by rpki-client