Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft
File:                     vxobyMAsIDYtD9n5K8AGoolejIA.mft (raw, json)
Hash identifier:          gz7NBhsgD+DfFJ5dTGfKhiIF6daTFWrCAH2HEEVxCiI=
Subject key identifier:   78:E8:06:BB:50:CD:35:93:7D:C5:A6:CD:87:12:1D:E3:5F:F6:A1:90
Authority key identifier: BF:1A:1B:C8:C0:2C:20:36:2D:0F:D9:F9:2B:C0:06:A2:89:5E:8C:80
Certificate issuer:       /CN=A91A423B/serialNumber=BF1A1BC8C02C20362D0FD9F92BC006A2895E8C80
Certificate serial:       0892
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft
Manifest number:          088A
Signing time:             Tue 08 Sep 2026 20:48:00 +0000
Manifest this update:     Tue 08 Sep 2026 20:48:00 +0000
Manifest next update:     Tue 15 Sep 2026 20:48:00 +0000
Files and hashes:         1: vxobyMAsIDYtD9n5K8AGoolejIA.crl (hash: 0/1C5bJ50d4iXetIo8DRg5vtk/ZL6l34eUwuzTE2WKU=)
                          2: ABD5003E079C11EBA7C04832C4F9AE02.roa (hash: 778EGlGgVJG4KhFCrh96xdUIIB8BVjBB6yGmPip2Cyc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.crl
                          rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 15 Sep 2026 20:47:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2194 (0x892)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A423B, serialNumber=BF1A1BC8C02C20362D0FD9F92BC006A2895E8C80
        Validity
            Not Before: Sep  8 20:48:00 2026 GMT
            Not After : Sep 15 20:48:00 2026 GMT
        Subject: CN=6aa07480-e72b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:27:18:73:fa:b7:50:af:a8:dc:50:50:b4:37:
                    a6:b9:35:4f:a7:af:64:2e:77:df:d8:af:38:05:49:
                    bf:b1:98:4f:1f:42:01:6d:ca:f0:f2:05:92:e1:a3:
                    04:95:a8:88:05:18:b6:bb:b1:90:0f:10:14:b5:e0:
                    28:48:0c:79:2e:b0:fd:e2:bb:d4:25:74:92:51:c8:
                    1e:89:5b:75:17:0f:f8:8b:96:dd:31:de:31:74:44:
                    3b:0c:a0:30:c0:2a:ca:e5:3e:7f:7e:69:10:3f:fa:
                    fb:8e:40:99:70:e8:e3:2c:7b:30:4b:f7:cd:83:60:
                    02:d3:6e:67:13:4a:41:df:fe:fe:82:5f:cc:21:ee:
                    46:78:2d:ca:10:3e:73:2a:d6:05:70:78:17:9e:89:
                    97:ba:f9:49:fb:f5:6a:5c:e2:2d:73:d7:ae:71:f3:
                    a5:d4:e0:7d:5b:0f:54:1d:c0:00:c0:78:e8:69:97:
                    2f:cc:b3:30:83:00:f5:51:b3:5c:5e:e2:f8:c6:27:
                    2c:dc:05:43:ec:a3:b7:51:9c:c9:21:3f:de:c4:38:
                    31:10:19:68:84:e9:ef:be:80:59:4d:01:3b:01:23:
                    dd:37:cd:b5:fb:e4:2d:00:1a:2a:3b:3f:99:6c:81:
                    db:ca:5e:58:ef:b3:7a:cf:e8:27:58:6c:3a:bb:de:
                    49:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:E8:06:BB:50:CD:35:93:7D:C5:A6:CD:87:12:1D:E3:5F:F6:A1:90
            X509v3 Authority Key Identifier:
                keyid:BF:1A:1B:C8:C0:2C:20:36:2D:0F:D9:F9:2B:C0:06:A2:89:5E:8C:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:c4:22:87:ec:ef:cb:42:ec:54:a9:68:ca:eb:b1:d0:5f:d1:
         4b:59:55:bb:dd:b1:33:86:6e:e8:4b:66:07:24:30:2b:41:15:
         22:2f:79:a9:35:9e:4b:3a:6b:3e:cf:a4:71:70:fa:94:e7:22:
         2a:30:e9:44:a2:cf:79:dd:97:ce:47:8b:40:ee:cc:ad:9b:a7:
         74:ec:21:cb:dd:e3:05:4f:67:a3:cc:4f:d6:f7:a7:17:87:8d:
         1a:80:08:12:70:d0:38:95:55:45:31:f8:04:75:d0:cf:ec:62:
         cf:f7:90:6f:33:82:91:81:c1:52:5e:dd:c9:73:77:c7:2c:92:
         94:a0:6c:f3:be:45:03:6d:4f:ff:d0:6d:fe:e4:6c:21:30:98:
         5a:ce:55:fd:bf:3d:bd:04:15:7b:6d:41:17:62:1e:aa:68:f4:
         15:2c:cf:1c:72:56:04:da:35:6a:d8:b1:6e:a5:15:bb:8f:5b:
         04:ca:e9:db:4e:b5:d2:7f:35:44:e9:d6:b4:21:a7:2b:78:41:
         fd:89:51:65:dd:62:2b:df:ec:36:81:9d:6e:41:0e:9e:22:01:
         2b:0f:11:77:33:27:34:e2:15:ac:fb:63:79:fd:b5:c7:fb:77:
         5c:16:49:7e:92:e3:f8:77:97:48:d5:9a:42:1f:fc:2f:cd:3f:
         dc:ee:87:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:31:25 2026 by rpki-client