Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.mft
File:                     VRT85Dhj9Rga80k4LThBTpYPCW8.mft (raw, json)
Hash identifier:          GZtmqbgJXiU6UEFe6hacMTEDAsRkj3BbSWuLYHoE0rA=
Subject key identifier:   3A:79:B8:ED:FF:20:F1:0B:CE:7D:52:D9:B5:2A:B4:F1:32:2D:16:D8
Authority key identifier: 55:14:FC:E4:38:63:F5:18:1A:F3:49:38:2D:38:41:4E:96:0F:09:6F
Certificate issuer:       /CN=A9195262/serialNumber=5514FCE43863F5181AF349382D38414E960F096F
Certificate serial:       09E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRT85Dhj9Rga80k4LThBTpYPCW8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.mft
Manifest number:          09D7
Signing time:             Tue 06 Oct 2026 19:59:31 +0000
Manifest this update:     Tue 06 Oct 2026 19:59:30 +0000
Manifest next update:     Tue 13 Oct 2026 19:59:30 +0000
Files and hashes:         1: VRT85Dhj9Rga80k4LThBTpYPCW8.crl (hash: RK9GZLq46wWBsYwEsOZVNo2h2ORRz0/ufYcADYqRdFo=)
                          2: DFC21CD8B1CF11EAA8732709C4F9AE02.roa (hash: bJrrgsYLHjV75zVLzQBs3qgGPoWpvtfZTp73HYIJWw4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.crl
                          rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRT85Dhj9Rga80k4LThBTpYPCW8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 19:59:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2530 (0x9e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9195262, serialNumber=5514FCE43863F5181AF349382D38414E960F096F
        Validity
            Not Before: Oct  6 19:59:30 2026 GMT
            Not After : Oct 13 19:59:30 2026 GMT
        Subject: CN=6ac55322-3092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0e:df:12:32:58:d9:d5:52:cc:f2:91:98:e0:
                    24:15:70:48:d6:66:3f:c5:82:5f:f0:9b:e1:f0:e5:
                    f7:fb:d4:fd:f0:c0:72:83:f8:9e:53:15:17:0a:df:
                    9a:86:c1:8d:69:26:8d:3c:e3:3f:13:d2:74:45:71:
                    69:63:c2:4a:3f:ac:0e:fc:7e:51:d9:d0:bd:0b:f2:
                    45:d4:03:64:77:53:b9:08:22:da:b9:cb:51:fe:3f:
                    b0:b3:52:4b:51:55:45:81:6b:27:0b:82:99:f6:04:
                    42:45:3b:99:05:b7:59:28:d6:ab:f3:07:8d:fd:28:
                    41:b3:38:6c:ef:57:b5:79:45:61:c1:d0:e4:7c:13:
                    45:4e:ef:ac:90:fc:3b:1d:ff:8e:72:ba:14:3d:55:
                    24:0c:79:0e:84:5e:76:b7:eb:44:32:16:8d:84:81:
                    5a:22:b5:8d:d0:28:2e:7f:7e:08:9c:e7:da:e4:f7:
                    39:cc:8a:4e:00:68:fe:8d:0a:23:a2:29:4c:0f:27:
                    66:19:6b:dc:ea:de:fc:8a:07:99:da:cf:f7:db:e2:
                    41:ee:37:73:c2:c1:14:ec:c3:61:b1:27:f0:34:08:
                    51:3c:44:c3:e0:1b:66:7f:8b:8d:53:7e:01:9c:7e:
                    c8:c6:ab:19:58:71:ab:6a:bb:58:86:51:45:6d:4c:
                    26:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:79:B8:ED:FF:20:F1:0B:CE:7D:52:D9:B5:2A:B4:F1:32:2D:16:D8
            X509v3 Authority Key Identifier:
                keyid:55:14:FC:E4:38:63:F5:18:1A:F3:49:38:2D:38:41:4E:96:0F:09:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRT85Dhj9Rga80k4LThBTpYPCW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:d5:72:5a:80:d3:a1:c3:99:67:6c:f1:02:f2:51:72:c3:7f:
         27:d1:90:31:30:34:2b:f6:92:96:c6:45:04:76:ce:d4:86:d5:
         09:88:cb:8e:c7:6c:b3:fe:39:cf:a8:f7:e3:ae:c6:7f:0f:fe:
         9e:1c:dc:42:3c:c9:30:d9:74:66:66:4d:46:00:7f:83:ff:69:
         10:c4:37:be:9c:c2:22:bc:e3:0e:0d:c7:36:47:32:46:bd:2b:
         65:1b:6f:15:20:b0:ff:19:dc:9c:bc:8f:4a:af:52:46:eb:07:
         a6:f6:b0:f2:a4:64:05:a5:89:d7:66:c4:bf:9f:0d:22:6a:94:
         8d:72:ff:4a:be:b5:b1:3a:43:1d:83:91:f2:ac:6d:85:2d:17:
         a9:0b:42:45:5a:13:ac:3e:3e:5a:cc:d1:eb:24:83:99:56:b6:
         f5:fb:19:1f:30:08:b2:29:26:4f:83:5e:04:c3:6c:a3:85:1e:
         d5:e6:10:70:fb:b0:05:71:4a:e4:69:2a:2d:c4:42:33:fb:ed:
         b4:8b:db:81:27:2f:00:15:ff:3f:ca:c0:ad:40:55:d3:53:02:
         a2:34:05:62:81:e7:eb:df:dd:65:f1:09:7f:f9:fe:0b:32:e4:
         68:de:8d:58:14:d3:fd:79:bb:93:cc:f1:68:9b:ec:87:b3:00:
         86:eb:4d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:36:53 2026 by rpki-client