Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E756/7591BEBE920011F18B018CA75D11F970/VCbPAAypXtlX-zh4RmES3qX5YzE.mft
File:                     VCbPAAypXtlX-zh4RmES3qX5YzE.mft (raw, json)
Hash identifier:          GEfRhnvJhfniABLq0cETipggN/m4TZ9bepuZPvUf2NU=
Subject key identifier:   62:6A:5C:14:F4:C1:03:9D:D3:09:F4:80:98:42:BE:EF:90:C1:4F:C7
Authority key identifier: 54:26:CF:00:0C:A9:5E:D9:57:FB:38:78:46:61:12:DE:A5:F9:63:31
Certificate issuer:       /CN=A918E756/serialNumber=5426CF000CA95ED957FB3878466112DEA5F96331
Certificate serial:       23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCbPAAypXtlX-zh4RmES3qX5YzE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E756/7591BEBE920011F18B018CA75D11F970/VCbPAAypXtlX-zh4RmES3qX5YzE.mft
Manifest number:          21
Signing time:             Sat 03 Oct 2026 09:38:26 +0000
Manifest this update:     Sat 03 Oct 2026 09:38:26 +0000
Manifest next update:     Sat 10 Oct 2026 09:38:26 +0000
Files and hashes:         1: VCbPAAypXtlX-zh4RmES3qX5YzE.crl (hash: AQijnic6efckSrmvmq7/Ys72pbfFR1T5STW4BsJrVl0=)
                          2: 8977E636920211F1A2698D205E11F970.roa (hash: 3eJTC2jfzPpwkH7VciNnlLOn+MVAn1jhTqs6n6Rzetk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E756/7591BEBE920011F18B018CA75D11F970/VCbPAAypXtlX-zh4RmES3qX5YzE.crl
                          rsync://rpki.apnic.net/member_repository/A918E756/7591BEBE920011F18B018CA75D11F970/VCbPAAypXtlX-zh4RmES3qX5YzE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCbPAAypXtlX-zh4RmES3qX5YzE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 09:38:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E756, serialNumber=5426CF000CA95ED957FB3878466112DEA5F96331
        Validity
            Not Before: Oct  3 09:38:26 2026 GMT
            Not After : Oct 10 09:38:26 2026 GMT
        Subject: CN=6ac0cd12-aefb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:40:18:b5:0f:e9:b1:a4:7d:ab:54:c2:3a:24:
                    bb:6d:a2:a8:12:49:38:8d:39:7a:62:ef:d0:5a:f2:
                    89:17:b0:f9:3a:7e:05:81:51:c0:95:12:55:86:a5:
                    b5:e0:79:8d:2c:e8:cf:77:62:0b:b1:48:e1:55:94:
                    2a:70:8a:95:dc:f7:21:2b:e5:a8:87:ae:63:57:1b:
                    ef:a6:3e:f8:2b:49:12:c1:ed:97:fd:fa:53:51:fc:
                    be:48:f6:57:22:45:bc:91:18:7e:2f:c6:a0:ec:db:
                    c5:f7:fc:5d:de:ea:44:44:f3:0f:96:8f:55:ef:2b:
                    32:f7:86:c4:8f:1e:98:d7:35:d9:b8:41:5a:4c:25:
                    a2:18:54:ff:48:8a:e6:68:33:bd:52:b1:67:64:c5:
                    7c:49:82:78:44:40:7d:f2:12:27:c6:69:06:04:5f:
                    c7:6c:4e:8a:65:8d:48:57:c0:6f:5e:4e:4a:14:14:
                    b8:d2:e9:5f:93:61:43:c6:ea:75:d0:90:f7:07:b1:
                    06:eb:d8:ac:88:1a:04:ff:0a:9c:fb:b0:ff:3a:e1:
                    5e:65:4c:0b:2f:ac:0a:7e:df:25:7e:10:fa:dd:16:
                    e2:b2:0a:55:5a:0f:ee:7c:3d:15:10:c2:a7:03:7a:
                    2b:19:a2:6c:c0:b0:20:66:25:1a:ab:50:d5:71:c7:
                    ed:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:6A:5C:14:F4:C1:03:9D:D3:09:F4:80:98:42:BE:EF:90:C1:4F:C7
            X509v3 Authority Key Identifier:
                keyid:54:26:CF:00:0C:A9:5E:D9:57:FB:38:78:46:61:12:DE:A5:F9:63:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E756/7591BEBE920011F18B018CA75D11F970/VCbPAAypXtlX-zh4RmES3qX5YzE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCbPAAypXtlX-zh4RmES3qX5YzE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E756/7591BEBE920011F18B018CA75D11F970/VCbPAAypXtlX-zh4RmES3qX5YzE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:dd:d4:25:17:ab:bc:c8:ad:b1:61:17:cf:99:cc:f6:97:26:
         28:d0:6e:54:47:81:f8:9a:c4:29:c4:7b:b0:48:e0:4b:96:0e:
         2a:95:6b:b1:1e:c5:12:e8:e7:4f:f0:ee:39:95:70:75:1a:a5:
         1e:c1:94:aa:c0:f0:34:4e:61:3b:b5:b5:29:f3:99:71:ca:32:
         d5:48:9b:a4:d3:dc:63:7e:4a:f6:d1:2e:30:c5:c4:4f:84:59:
         91:32:33:7b:e1:04:bf:af:e6:56:a1:77:0e:c5:60:bf:d6:1c:
         63:46:02:98:d5:c4:82:c1:a7:94:c5:01:75:78:d7:37:eb:3e:
         ca:23:ef:fb:c6:08:85:d4:85:25:b7:ee:79:e4:72:4d:8e:a0:
         7b:ca:99:4c:14:00:1f:e2:28:90:ac:6b:4e:fc:e1:21:e4:18:
         91:d6:a0:1b:d4:3d:c8:f8:d4:d7:6b:71:b4:e6:aa:fb:2e:aa:
         90:c4:32:a2:7a:bb:bb:9a:2e:ec:d5:4e:b5:d8:94:a4:62:04:
         f3:45:d2:d4:ad:66:ea:6f:82:df:cc:23:30:07:34:66:aa:d9:
         41:50:19:70:0a:02:8e:5f:a0:aa:b2:55:92:c1:c3:3e:d8:ae:
         1e:48:fe:ef:05:1f:24:4f:1f:2f:ee:0c:93:4a:b1:27:b1:1c:
         d9:d5:1f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 06:42:09 2026 by rpki-client