Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft
File:                     VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft (raw, json)
Hash identifier:          ipPsP6azxhqllbCyb6uIKBVx7yFqR9zWB12prpfeMj4=
Subject key identifier:   5A:DF:6B:22:26:D2:FD:4F:6B:6B:9D:03:C3:BA:EB:D9:EA:9D:EF:E4
Authority key identifier: 55:F2:E4:87:40:05:8E:8F:CC:4F:90:1A:4A:33:E1:F4:17:62:00:F8
Certificate issuer:       /CN=A91C23DC/serialNumber=55F2E48740058E8FCC4F901A4A33E1F4176200F8
Certificate serial:       0D34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLkh0AFjo_MT5AaSjPh9BdiAPg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft
Manifest number:          0D1E
Signing time:             Fri 04 Sep 2026 18:13:46 +0000
Manifest this update:     Fri 04 Sep 2026 18:13:46 +0000
Manifest next update:     Fri 11 Sep 2026 18:13:46 +0000
Files and hashes:         1: VfLkh0AFjo_MT5AaSjPh9BdiAPg.crl (hash: V+8yQnxF+As37bOtpqP/TAIOW7Y8+5pS+prkhbCGZF8=)
                          2: 598BD2E268D111ED99477B87C4F9AE02.roa (hash: DCzIu7CILC93Y/AaTkM9+LUyGULYyH1ab9eTUGXE5NE=)
                          3: 5AA3FD0868D111ED99477B87C4F9AE02.roa (hash: CGowp4w2GBQ9qV/GHYQUjgIY+WC1P2t6NRtsfQxE+ag=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.crl
                          rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLkh0AFjo_MT5AaSjPh9BdiAPg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 18:13:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3380 (0xd34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C23DC, serialNumber=55F2E48740058E8FCC4F901A4A33E1F4176200F8
        Validity
            Not Before: Sep  4 18:13:46 2026 GMT
            Not After : Sep 11 18:13:46 2026 GMT
        Subject: CN=6a9b0a5a-413d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:87:e9:c2:d9:e9:4c:5b:26:c7:b5:b6:18:de:
                    db:8c:3d:03:a8:95:f9:ba:94:15:84:a3:be:e4:52:
                    5d:2d:62:d8:ab:7a:1e:d7:02:27:27:3f:cf:f1:64:
                    26:e2:8e:82:55:3c:d6:97:eb:a3:f5:2a:16:1d:3a:
                    a2:4d:d5:ce:7e:83:b5:1a:0e:28:a8:6d:19:ef:df:
                    35:35:d9:d8:a2:72:38:23:7e:ea:cc:d2:7f:bb:00:
                    bb:0a:30:84:6d:50:ea:b0:5f:1f:2e:86:4f:4c:40:
                    19:e1:9e:e9:40:62:79:4b:5b:b2:41:22:f7:d1:e9:
                    22:d6:7e:a0:15:75:ea:48:a6:6c:69:10:be:b8:e1:
                    31:a0:f4:00:12:ae:19:be:ba:92:80:04:15:4a:50:
                    ce:18:56:99:e4:49:1e:1b:3d:dd:c0:bc:fa:ef:57:
                    d4:4e:ca:c6:2a:43:ef:89:d7:46:13:67:80:04:8b:
                    b7:07:f9:62:4b:6f:fd:b0:49:ea:c8:b8:8b:99:69:
                    a1:49:42:f7:ce:47:03:17:5c:58:76:44:e0:6d:3f:
                    91:48:ab:fb:6a:e3:62:20:37:3c:92:30:18:5e:32:
                    c0:b1:8e:ef:1f:55:d7:50:93:a9:56:d2:bf:d8:9d:
                    d7:d5:60:8e:5a:75:19:0f:8d:26:70:4b:b0:1d:04:
                    40:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:DF:6B:22:26:D2:FD:4F:6B:6B:9D:03:C3:BA:EB:D9:EA:9D:EF:E4
            X509v3 Authority Key Identifier:
                keyid:55:F2:E4:87:40:05:8E:8F:CC:4F:90:1A:4A:33:E1:F4:17:62:00:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLkh0AFjo_MT5AaSjPh9BdiAPg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:b9:05:d0:2e:79:e0:0c:50:d5:12:c1:cb:28:79:3f:07:a9:
         a3:79:ea:65:bb:ad:ec:03:a1:2f:32:f7:c4:66:3b:34:83:61:
         ea:b8:b9:d7:18:cb:d1:53:4b:8f:f1:84:fa:7b:1f:ae:ed:58:
         ed:5b:d9:3b:18:6e:01:93:31:0b:f1:28:41:2f:e5:12:dd:60:
         01:4b:30:01:4a:d4:a7:04:f8:92:e2:13:34:ea:81:20:6e:6a:
         cc:ee:a6:0a:50:b8:69:79:03:b3:d7:5b:80:32:9b:5b:b3:7a:
         74:a3:80:09:64:8d:5a:eb:ec:40:39:70:22:ae:bd:fe:a7:2c:
         17:2e:13:87:4d:92:4f:a9:09:a3:3e:6a:4b:9e:46:60:fb:39:
         e3:1a:b2:36:e1:86:86:20:48:c0:4f:67:d9:a5:04:9a:c1:36:
         8c:e1:5c:5b:5a:25:cc:30:98:f4:92:9c:32:42:64:1e:08:03:
         0c:ac:fe:1e:21:fc:e2:5c:05:8a:f4:ce:98:2b:dd:56:1d:5b:
         3c:b8:9c:20:41:44:93:8f:06:36:1a:55:af:b1:b2:05:c0:5d:
         33:33:e9:c1:02:07:27:ce:cd:38:d4:53:ea:81:34:be:02:54:
         7a:c7:bb:e7:19:00:a1:a7:e1:88:bb:3c:00:72:df:70:d9:6a:
         5e:0f:5a:6f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDTQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzIzREMxMTAvBgNVBAUTKDU1RjJFNDg3NDAwNThFOEZDQzRGOTAxQTRBMzNFMUY0
MTc2MjAwRjgwHhcNMjYwOTA0MTgxMzQ2WhcNMjYwOTExMTgxMzQ2WjAYMRYwFAYD
VQQDEw02YTliMGE1YS00MTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1ofpwtnpTFsmx7W2GN7bjD0DqJX5upQVhKO+5FJdLWLYq3oe1wInJz/P8WQm
4o6CVTzWl+uj9SoWHTqiTdXOfoO1Gg4oqG0Z7981NdnYonI4I37qzNJ/uwC7CjCE
bVDqsF8fLoZPTEAZ4Z7pQGJ5S1uyQSL30eki1n6gFXXqSKZsaRC+uOExoPQAEq4Z
vrqSgAQVSlDOGFaZ5EkeGz3dwLz671fUTsrGKkPviddGE2eABIu3B/liS2/9sEnq
yLiLmWmhSUL3zkcDF1xYdkTgbT+RSKv7auNiIDc8kjAYXjLAsY7vH1XXUJOpVtK/
2J3X1WCOWnUZD40mcEuwHQRAVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFrfayIm
0v1Pa2udA8O669nqne/kMB8GA1UdIwQYMBaAFFXy5IdABY6PzE+QGkoz4fQXYgD4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjNEQy8wNjYzOUY4NjBB
OTMxMUVBODVBRDg4NkFDNEY5QUUwMi9WZkxraDBBRmpvX01UNUFhU2pQaDlCZGlB
UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZmTGtoMEFGam9fTVQ1QWFTalBoOUJkaUFQZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MjNEQy8wNjYzOUY4NjBBOTMxMUVBODVBRDg4NkFDNEY5QUUwMi9WZkxraDBBRmpv
X01UNUFhU2pQaDlCZGlBUGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJ7kF0C554AxQ1RLByyh5Pwepo3nqZbut7AOhLzL3xGY7NINh6ri51xjL0VNL
j/GE+nsfru1Y7VvZOxhuAZMxC/EoQS/lEt1gAUswAUrUpwT4kuITNOqBIG5qzO6m
ClC4aXkDs9dbgDKbW7N6dKOACWSNWuvsQDlwIq69/qcsFy4Th02ST6kJoz5qS55G
YPs54xqyNuGGhiBIwE9n2aUEmsE2jOFcW1olzDCY9JKcMkJkHggDDKz+HiH84lwF
ivTOmCvdVh1bPLicIEFEk48GNhpVr7GyBcBdMzPpwQIHJ87NONRT6oE0vgJUese7
5xkAoafhiLs8AHLfcNlqXg9abw==
-----END CERTIFICATE-----
Generated at Sat Sep 5 09:36:27 2026 by rpki-client