Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9192CDA/25C6FBEA57D811F1802AC464CD833773/_VMcDzgnKUmdutFWDwSxVj0iG3U.mft
File:                     _VMcDzgnKUmdutFWDwSxVj0iG3U.mft (raw, json)
Hash identifier:          JshAJuXRN+Q6nhMJSnTNpfgzlxqOELIIfeq8+WeAGsA=
Subject key identifier:   53:10:85:E0:63:7A:A4:83:D1:E7:47:76:B2:E1:12:78:1B:0E:0A:72
Authority key identifier: FD:53:1C:0F:38:27:29:49:9D:BA:D1:56:0F:04:B1:56:3D:22:1B:75
Certificate issuer:       /CN=A9192CDA/serialNumber=FD531C0F382729499DBAD1560F04B1563D221B75
Certificate serial:       45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_VMcDzgnKUmdutFWDwSxVj0iG3U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192CDA/25C6FBEA57D811F1802AC464CD833773/_VMcDzgnKUmdutFWDwSxVj0iG3U.mft
Manifest number:          44
Signing time:             Mon 05 Oct 2026 08:54:06 +0000
Manifest this update:     Mon 05 Oct 2026 08:54:05 +0000
Manifest next update:     Mon 12 Oct 2026 08:54:05 +0000
Files and hashes:         1: _VMcDzgnKUmdutFWDwSxVj0iG3U.crl (hash: n3lPpq3VqLDjKM9BgWzSIji7pACSftgHIgKHvRk20+w=)
                          2: 679DC7EC57D811F1A68846A7CD833773.roa (hash: RrnydF7Ml11Kq2AHoYe4E1fAbAzw4MN2p6gokGYuA8I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192CDA/25C6FBEA57D811F1802AC464CD833773/_VMcDzgnKUmdutFWDwSxVj0iG3U.crl
                          rsync://rpki.apnic.net/member_repository/A9192CDA/25C6FBEA57D811F1802AC464CD833773/_VMcDzgnKUmdutFWDwSxVj0iG3U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_VMcDzgnKUmdutFWDwSxVj0iG3U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 08:54:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69 (0x45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192CDA, serialNumber=FD531C0F382729499DBAD1560F04B1563D221B75
        Validity
            Not Before: Oct  5 08:54:05 2026 GMT
            Not After : Oct 12 08:54:05 2026 GMT
        Subject: CN=6ac365ae-1a90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:44:6a:10:f0:95:4e:bd:43:d9:1c:ed:20:ca:
                    dc:42:c3:27:73:54:da:da:70:16:35:ef:94:0a:2e:
                    81:e0:33:c9:52:92:db:4a:89:69:b9:4e:21:3d:b7:
                    81:09:c8:de:8c:4f:67:42:5c:f5:51:9f:9b:ff:57:
                    c9:b2:bc:66:8a:96:72:ab:95:60:66:23:24:e5:1d:
                    f5:d2:5b:70:df:ea:56:72:03:71:27:4e:cc:27:96:
                    53:e3:3b:4f:96:73:c4:e8:eb:30:1a:f5:4e:85:b8:
                    6c:41:09:ce:39:72:62:c5:f9:9c:c9:b3:a6:0a:b9:
                    8f:90:ed:55:2e:84:64:93:da:c2:35:ea:86:76:08:
                    64:52:e3:06:e4:3c:0b:3a:3c:66:08:38:77:cd:0b:
                    ef:e7:16:ab:0e:7e:1a:43:17:26:0f:cd:90:cf:f5:
                    e4:59:1d:07:94:df:5e:35:d7:c1:b0:12:73:89:f8:
                    74:1f:17:71:66:8e:87:ac:ec:38:27:a1:98:56:12:
                    60:b6:d4:6f:d6:26:76:5f:7f:44:71:88:ef:d1:41:
                    f8:0f:e8:15:53:05:ee:95:37:d7:d9:63:de:45:99:
                    e8:c3:8c:9e:ac:72:cd:0d:9f:bb:59:7f:90:38:8f:
                    37:76:d1:d5:58:ca:9e:dd:9f:9b:95:34:ab:81:26:
                    88:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:10:85:E0:63:7A:A4:83:D1:E7:47:76:B2:E1:12:78:1B:0E:0A:72
            X509v3 Authority Key Identifier:
                keyid:FD:53:1C:0F:38:27:29:49:9D:BA:D1:56:0F:04:B1:56:3D:22:1B:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192CDA/25C6FBEA57D811F1802AC464CD833773/_VMcDzgnKUmdutFWDwSxVj0iG3U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_VMcDzgnKUmdutFWDwSxVj0iG3U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192CDA/25C6FBEA57D811F1802AC464CD833773/_VMcDzgnKUmdutFWDwSxVj0iG3U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:f1:e1:4b:50:d5:3d:b3:bc:a8:69:9c:44:ce:24:a5:67:e7:
         dd:87:55:fd:07:4e:73:1f:ab:92:b2:bb:da:30:91:a0:4b:34:
         6d:31:d0:dd:f8:3c:85:df:23:ba:45:5f:5d:09:5e:1c:89:33:
         a4:d0:ad:f7:8c:85:bf:c1:2d:b6:26:c0:00:16:d3:f0:79:a2:
         77:92:0c:93:8b:60:75:96:b7:94:2f:c6:10:83:e9:ff:14:a2:
         25:bb:31:2a:a3:02:5d:4f:bc:31:c8:e1:85:8a:8d:62:e2:f9:
         ac:cf:91:39:4c:4e:a3:63:09:3c:64:f7:bc:f0:cd:a7:32:30:
         2f:50:bb:7e:13:63:e5:f3:d3:ff:73:85:ca:a3:21:7f:8e:fc:
         be:b1:2d:2e:fc:84:52:94:ae:92:3a:af:78:b5:2d:91:b5:25:
         cf:7f:18:ed:96:ab:2a:a0:53:87:12:62:d5:93:ac:04:c2:ff:
         df:30:8a:01:c3:44:14:8b:ab:a6:f7:43:3d:00:40:61:7c:33:
         60:97:77:57:8d:d7:fd:98:bf:7b:83:56:37:72:f4:f0:1e:c9:
         c1:6b:47:ae:5d:03:ff:c8:71:28:85:93:d5:22:82:14:62:a9:
         4e:a4:e1:c2:23:f7:e1:85:24:f9:d1:d6:6e:99:01:81:c5:19:
         1e:60:2a:e3
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
MkNEQTExMC8GA1UEBRMoRkQ1MzFDMEYzODI3Mjk0OTlEQkFEMTU2MEYwNEIxNTYz
RDIyMUI3NTAeFw0yNjEwMDUwODU0MDVaFw0yNjEwMTIwODU0MDVaMBgxFjAUBgNV
BAMTDTZhYzM2NWFlLTFhOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCeRGoQ8JVOvUPZHO0gytxCwydzVNracBY175QKLoHgM8lSkttKiWm5TiE9t4EJ
yN6MT2dCXPVRn5v/V8myvGaKlnKrlWBmIyTlHfXSW3Df6lZyA3EnTswnllPjO0+W
c8To6zAa9U6FuGxBCc45cmLF+ZzJs6YKuY+Q7VUuhGST2sI16oZ2CGRS4wbkPAs6
PGYIOHfNC+/nFqsOfhpDFyYPzZDP9eRZHQeU314118GwEnOJ+HQfF3Fmjoes7Dgn
oZhWEmC21G/WJnZff0RxiO/RQfgP6BVTBe6VN9fZY95FmejDjJ6scs0Nn7tZf5A4
jzd20dVYyp7dn5uVNKuBJog5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUUxCF4GN6
pIPR50d2suESeBsOCnIwHwYDVR0jBBgwFoAU/VMcDzgnKUmdutFWDwSxVj0iG3Uw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkyQ0RBLzI1QzZGQkVBNTdE
ODExRjE4MDJBQzQ2NENEODMzNzczL19WTWNEemduS1VtZHV0RldEd1N4VmowaUcz
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvX1ZNY0R6Z25LVW1kdXRGV0R3U3hWajBpRzNVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTky
Q0RBLzI1QzZGQkVBNTdEODExRjE4MDJBQzQ2NENEODMzNzczL19WTWNEemduS1Vt
ZHV0RldEd1N4VmowaUczVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBK8eFLUNU9s7yoaZxEziSlZ+fdh1X9B05zH6uSsrvaMJGgSzRtMdDd+DyF3yO6
RV9dCV4ciTOk0K33jIW/wS22JsAAFtPweaJ3kgyTi2B1lreUL8YQg+n/FKIluzEq
owJdT7wxyOGFio1i4vmsz5E5TE6jYwk8ZPe88M2nMjAvULt+E2Pl89P/c4XKoyF/
jvy+sS0u/IRSlK6SOq94tS2RtSXPfxjtlqsqoFOHEmLVk6wEwv/fMIoBw0QUi6um
90M9AEBhfDNgl3dXjdf9mL97g1Y3cvTwHsnBa0euXQP/yHEohZPVIoIUYqlOpOHC
I/fhhST50dZumQGBxRkeYCrj
-----END CERTIFICATE-----
Generated at Tue Oct 6 18:10:28 2026 by rpki-client