Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918C287/63027DF6184D11F1B2F9B42D283D8C67/vXIUPbev9hPoLqKQtMnCv_qIvCY.mft
File:                     vXIUPbev9hPoLqKQtMnCv_qIvCY.mft (raw, json)
Hash identifier:          pcuSel0Q93Q8QVDN9Du9c2KG6SrFf8LnWNt3ggqwth0=
Subject key identifier:   1F:6D:85:96:95:27:4E:25:DC:AE:CE:66:FA:6F:C3:19:3E:99:92:03
Authority key identifier: BD:72:14:3D:B7:AF:F6:13:E8:2E:A2:90:B4:C9:C2:BF:FA:88:BC:26
Certificate issuer:       /CN=A918C287/serialNumber=BD72143DB7AFF613E82EA290B4C9C2BFFA88BC26
Certificate serial:       C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXIUPbev9hPoLqKQtMnCv_qIvCY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C287/63027DF6184D11F1B2F9B42D283D8C67/vXIUPbev9hPoLqKQtMnCv_qIvCY.mft
Manifest number:          A2
Signing time:             Tue 29 Sep 2026 08:32:43 +0000
Manifest this update:     Tue 29 Sep 2026 08:32:42 +0000
Manifest next update:     Tue 06 Oct 2026 08:32:42 +0000
Files and hashes:         1: vXIUPbev9hPoLqKQtMnCv_qIvCY.crl (hash: lg37QT7UThoSS+urzwx8c1RiAARLG13jSgZDWgbQKkA=)
                          2: lZjASyab0c7RfvwUJDPxDC8JwgE.asa (hash: d5Q9Pgb4Ku9F5+/eRo1lWERyAtnuHKz175HDGv/aVNc=)
                          3: OYmENbQI99sfPFKWIvIamyjSh68.asa (hash: IBzo1q2zkiYyD79AM+NzePip/JPKHh9UNCtDgeKOIIo=)
                          4: 7B144F6CB57F11F1BC37C19F6711F970.roa (hash: kD/+SO70UYNXN3Kh7SDbkC5M5pbtQmhEj05NDxrZJIs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C287/63027DF6184D11F1B2F9B42D283D8C67/vXIUPbev9hPoLqKQtMnCv_qIvCY.crl
                          rsync://rpki.apnic.net/member_repository/A918C287/63027DF6184D11F1B2F9B42D283D8C67/vXIUPbev9hPoLqKQtMnCv_qIvCY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXIUPbev9hPoLqKQtMnCv_qIvCY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Oct 2026 08:32:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 201 (0xc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C287, serialNumber=BD72143DB7AFF613E82EA290B4C9C2BFFA88BC26
        Validity
            Not Before: Sep 29 08:32:42 2026 GMT
            Not After : Oct  6 08:32:42 2026 GMT
        Subject: CN=6abb77ab-2d37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a2:d3:1b:be:ee:58:45:0c:69:05:56:1c:a3:
                    bc:df:a6:5c:4f:85:62:6c:ec:54:63:f6:93:65:70:
                    66:b7:f4:ec:21:d7:98:48:13:c5:9a:b9:62:86:a5:
                    75:2e:17:e9:d2:5e:cc:c2:63:87:6b:6f:7c:51:27:
                    16:9d:69:32:54:07:76:aa:37:4e:4e:e9:60:2e:4c:
                    69:8b:db:72:e3:0e:6d:2b:23:ae:15:c3:fb:72:01:
                    a5:2f:80:32:dc:8f:8d:f4:65:3f:dc:48:96:dd:5b:
                    f9:9e:29:58:30:c3:d8:d1:37:50:cf:82:62:d9:2c:
                    69:a3:c5:8d:ca:d2:79:76:cf:26:79:8f:3f:7d:f3:
                    cb:46:fe:52:5f:58:75:86:9c:d6:91:26:f2:33:df:
                    d5:89:1a:33:6f:e1:2e:24:c5:18:26:34:1f:f5:8f:
                    b5:70:a6:eb:57:ee:a1:e1:5f:23:9d:a8:01:f4:90:
                    da:84:fa:7a:53:f3:bf:d4:fb:31:3e:c0:31:fb:d0:
                    f6:67:59:10:3d:fc:0d:b2:d3:44:4a:6f:48:36:fb:
                    d1:6f:80:d7:30:7c:6a:3c:5b:ed:f1:1c:9c:ec:02:
                    95:a1:00:44:a8:76:37:39:13:0b:9c:5e:c8:00:d6:
                    71:50:e3:0a:7c:57:71:1e:29:a8:75:d1:ad:3a:9e:
                    c5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:6D:85:96:95:27:4E:25:DC:AE:CE:66:FA:6F:C3:19:3E:99:92:03
            X509v3 Authority Key Identifier:
                keyid:BD:72:14:3D:B7:AF:F6:13:E8:2E:A2:90:B4:C9:C2:BF:FA:88:BC:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C287/63027DF6184D11F1B2F9B42D283D8C67/vXIUPbev9hPoLqKQtMnCv_qIvCY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXIUPbev9hPoLqKQtMnCv_qIvCY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C287/63027DF6184D11F1B2F9B42D283D8C67/vXIUPbev9hPoLqKQtMnCv_qIvCY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:2b:8a:43:a7:6d:fe:e3:49:47:ae:6d:71:d3:86:50:75:55:
         80:ac:6f:2b:e3:f0:3f:71:ff:2c:e3:c0:43:a7:f5:ec:a2:15:
         7e:cd:fc:67:09:e9:ce:3b:87:3c:07:1f:9d:b4:b7:4b:a2:b4:
         68:c9:26:1d:ad:f9:95:a5:b5:23:6c:0b:fd:d9:9d:11:fb:4b:
         41:0b:86:a3:a7:55:c2:f8:9e:6d:87:1b:13:fc:e0:8c:d5:60:
         72:20:40:ce:e2:3c:b2:77:61:27:c4:72:3a:78:da:e2:a5:fe:
         d2:6c:78:0e:4d:52:59:f1:0a:95:8f:ed:59:7e:0c:7e:03:84:
         5f:af:51:71:2d:7a:08:e8:c8:eb:9c:a8:f0:00:f6:9d:b3:eb:
         8a:3a:a7:7b:0c:31:f0:c2:2b:62:4d:80:36:8f:21:2f:79:06:
         15:31:94:a4:e9:9e:f9:59:8a:0a:65:0a:1f:4c:24:44:80:a9:
         13:07:23:e2:80:91:85:9a:cd:d1:ff:9b:80:4a:dc:ff:44:bb:
         ff:44:22:6e:64:ea:d0:18:b9:d5:09:a3:40:5a:78:f9:65:27:
         25:96:27:52:34:ec:60:8c:07:46:5c:f4:80:fb:9d:38:73:5c:
         86:a3:ee:af:38:5e:0b:ea:72:09:e9:58:6b:d5:f8:5f:1f:d9:
         7e:ac:5b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 23:56:44 2026 by rpki-client