Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft
File:                     _vLBxOoJZEd1FMGqlG5sQXeNBr8.mft (raw, json)
Hash identifier:          Wt9eWuTfPJ0GF4TDZKXF2xncCidm2h+RsMX2Y71WVbc=
Subject key identifier:   2C:BB:44:0F:BD:95:E6:B6:2C:6C:ED:88:99:FE:E0:0A:AB:F6:F7:F9
Authority key identifier: FE:F2:C1:C4:EA:09:64:47:75:14:C1:AA:94:6E:6C:41:77:8D:06:BF
Certificate issuer:       /CN=A91D298D/serialNumber=FEF2C1C4EA0964477514C1AA946E6C41778D06BF
Certificate serial:       0991
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vLBxOoJZEd1FMGqlG5sQXeNBr8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft
Manifest number:          0942
Signing time:             Sun 04 Oct 2026 20:29:31 +0000
Manifest this update:     Sun 04 Oct 2026 20:29:31 +0000
Manifest next update:     Sun 11 Oct 2026 20:29:31 +0000
Files and hashes:         1: _vLBxOoJZEd1FMGqlG5sQXeNBr8.crl (hash: 4ePzfL5NsZ56uAJpe5dkekri8nkCDl0Q8ZtuhtD5O3s=)
                          2: 01BB1B8E7C0411EFB0D29158C4F9AE02.roa (hash: Bo7KfSmgopE09z8Ii/6iDq4ZBQOfTMw5H36AojNCI5M=)
                          3: 65519ACC506C11EC99354984C4F9AE02.roa (hash: +giwTMwqmDi92nyh2W//WCrh8pfdmutnmr2rqJ6v09s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.crl
                          rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vLBxOoJZEd1FMGqlG5sQXeNBr8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 20:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2449 (0x991)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D298D, serialNumber=FEF2C1C4EA0964477514C1AA946E6C41778D06BF
        Validity
            Not Before: Oct  4 20:29:31 2026 GMT
            Not After : Oct 11 20:29:31 2026 GMT
        Subject: CN=6ac2b72b-c43b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:1a:da:2c:e0:4e:a8:da:93:52:3d:dc:e9:2f:
                    a4:a7:47:73:3c:04:5e:fa:6a:35:32:c7:b2:1d:af:
                    39:0f:7f:47:e1:69:d8:a8:73:73:77:53:eb:89:8d:
                    ab:b7:d3:e7:9c:f9:90:b2:b4:55:ba:89:64:57:b7:
                    bf:93:b9:cc:b4:90:fd:53:54:25:b4:05:2e:7c:61:
                    db:af:5b:1c:10:9d:26:d1:58:ff:58:9b:16:da:d7:
                    a6:b2:be:32:ec:f3:7b:bb:8c:55:b4:4d:79:ee:d2:
                    ba:2f:ad:47:b4:c1:13:27:1a:d1:90:dc:b1:3f:b5:
                    0d:bc:ff:bb:4c:fd:71:0c:a6:e7:c1:85:0c:08:31:
                    3f:73:61:9c:fd:9b:6b:73:fc:28:89:13:d7:e9:cd:
                    a9:30:79:26:ab:bf:b8:cf:54:88:a3:a4:06:61:e6:
                    b5:92:2d:31:e5:c5:bd:7b:5f:e3:20:48:ec:24:43:
                    ea:f4:e3:88:44:e6:0d:dc:22:44:38:42:b5:74:2f:
                    76:89:67:46:fd:08:ba:0f:28:f3:09:74:5e:1b:6a:
                    bf:4a:19:44:14:df:f5:37:19:4c:4b:2c:54:da:92:
                    f0:88:b1:43:77:ae:c9:b6:a5:26:10:c5:fc:73:16:
                    a1:02:07:61:b7:ff:34:7a:01:18:b6:e9:a9:63:96:
                    d6:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:BB:44:0F:BD:95:E6:B6:2C:6C:ED:88:99:FE:E0:0A:AB:F6:F7:F9
            X509v3 Authority Key Identifier:
                keyid:FE:F2:C1:C4:EA:09:64:47:75:14:C1:AA:94:6E:6C:41:77:8D:06:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vLBxOoJZEd1FMGqlG5sQXeNBr8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:c1:85:f9:3b:2c:9b:ef:f5:57:ed:59:9c:78:ad:35:7f:ec:
         81:b3:a1:4e:91:ea:ae:3d:0a:1d:68:d6:2a:66:a7:31:a4:51:
         d4:36:1b:6d:85:69:32:c7:97:9b:54:83:d0:af:7f:f1:d5:a4:
         85:e7:4a:1c:08:89:e4:d8:56:dc:45:a7:58:54:44:53:96:2e:
         59:6a:c0:33:ae:12:14:52:5e:b2:43:7a:d6:36:a2:8a:a5:c0:
         94:d5:11:6b:64:64:36:e7:32:47:ab:54:44:45:0d:27:28:90:
         d3:1d:1a:13:51:ce:d5:5a:c6:36:9b:c3:69:9a:3e:7e:d1:8c:
         5f:1a:d5:bd:9a:1e:02:91:97:b4:a4:dc:78:66:14:46:e3:3e:
         14:6c:17:be:34:10:0c:18:5e:27:3c:be:9e:be:7f:76:d1:f8:
         8a:20:22:fc:f9:e4:1d:e0:e5:7e:e5:aa:40:e6:13:94:93:96:
         cc:c8:9d:e4:8a:32:29:3d:89:d1:7f:d3:55:f4:be:18:eb:0d:
         41:98:ff:cc:60:3b:73:64:d2:24:59:a4:ed:d8:f6:ea:ce:e0:
         5e:0b:e1:3e:cf:a5:c9:36:13:62:b6:4e:f8:db:1a:77:69:f5:
         af:d3:16:ae:b6:a4:5b:ee:c6:d0:8a:c5:3f:cb:33:d5:48:cd:
         95:36:d3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 09:20:13 2026 by rpki-client