Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D2B4A/62165D9E868011F19D1E7A5F66A30FBC/4vp6LLwyeRiAQsNBPdniSXzUndI.mft
File:                     4vp6LLwyeRiAQsNBPdniSXzUndI.mft (raw, json)
Hash identifier:          o9XgQ8LFN1D4bZ1A9xf1wLdudCJ7lu9yAPeBD8xhBXg=
Subject key identifier:   CE:88:3C:FD:06:70:D0:67:1F:1F:B6:9A:29:70:6A:AE:DE:04:E6:3B
Authority key identifier: E2:FA:7A:2C:BC:32:79:18:80:42:C3:41:3D:D9:E2:49:7C:D4:9D:D2
Certificate issuer:       /CN=A91D2B4A/serialNumber=E2FA7A2CBC3279188042C3413DD9E2497CD49DD2
Certificate serial:       2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vp6LLwyeRiAQsNBPdniSXzUndI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D2B4A/62165D9E868011F19D1E7A5F66A30FBC/4vp6LLwyeRiAQsNBPdniSXzUndI.mft
Manifest number:          29
Signing time:             Wed 07 Oct 2026 09:23:21 +0000
Manifest this update:     Wed 07 Oct 2026 09:23:21 +0000
Manifest next update:     Wed 14 Oct 2026 09:23:21 +0000
Files and hashes:         1: 4vp6LLwyeRiAQsNBPdniSXzUndI.crl (hash: o47Bz8ZeLUggFkO2E4ToZMys+LQIde+V+puzxNDXi00=)
                          2: BD6C0B8A868011F1865E2E2167A30FBC.roa (hash: R++XQHgwrrHwUQ5zUbzG8m/3mR3SUeHymJ6MUMUg2fk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D2B4A/62165D9E868011F19D1E7A5F66A30FBC/4vp6LLwyeRiAQsNBPdniSXzUndI.crl
                          rsync://rpki.apnic.net/member_repository/A91D2B4A/62165D9E868011F19D1E7A5F66A30FBC/4vp6LLwyeRiAQsNBPdniSXzUndI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vp6LLwyeRiAQsNBPdniSXzUndI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 09:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D2B4A, serialNumber=E2FA7A2CBC3279188042C3413DD9E2497CD49DD2
        Validity
            Not Before: Oct  7 09:23:21 2026 GMT
            Not After : Oct 14 09:23:21 2026 GMT
        Subject: CN=6ac60f89-eace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:54:d0:1b:cf:ac:f5:33:82:4d:ba:14:63:3f:
                    7d:bf:00:07:7a:d3:39:66:06:ef:6b:7d:6f:0d:9b:
                    d6:c9:9b:b9:14:ea:8e:67:fa:7a:21:ed:70:b6:19:
                    06:37:26:05:a7:9a:96:81:c0:da:20:d2:de:62:77:
                    27:50:b6:33:d0:f7:12:a0:f4:18:00:ce:6a:4a:41:
                    06:42:61:53:e2:72:6d:4a:4d:bc:0d:10:f5:d9:09:
                    b7:53:07:66:9d:b3:67:d5:cc:60:46:c3:eb:87:12:
                    fa:26:81:82:12:39:53:f6:f3:b0:4b:b4:5c:83:a1:
                    ee:ef:45:da:61:17:0a:ab:14:b3:0f:35:70:4b:14:
                    ba:33:68:0f:f8:77:1a:f6:8f:5d:19:1b:df:65:4f:
                    96:7f:af:a5:09:b1:3e:7e:80:82:e9:76:07:ba:d1:
                    e4:9f:47:8d:81:2d:ff:50:53:48:de:7e:7d:b0:8a:
                    67:ff:08:e9:f2:45:ff:af:e3:f8:c1:9a:ee:01:83:
                    f5:38:58:24:8a:27:8c:60:ab:f7:b8:f8:d8:77:c3:
                    fb:c5:f5:c8:24:ed:27:44:81:35:ea:db:22:a6:3a:
                    4b:26:37:9a:32:4a:53:a7:6a:89:cc:19:c6:13:21:
                    35:33:b4:1b:a7:ad:03:aa:b7:66:5b:6d:1e:9d:2b:
                    fe:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:88:3C:FD:06:70:D0:67:1F:1F:B6:9A:29:70:6A:AE:DE:04:E6:3B
            X509v3 Authority Key Identifier:
                keyid:E2:FA:7A:2C:BC:32:79:18:80:42:C3:41:3D:D9:E2:49:7C:D4:9D:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D2B4A/62165D9E868011F19D1E7A5F66A30FBC/4vp6LLwyeRiAQsNBPdniSXzUndI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vp6LLwyeRiAQsNBPdniSXzUndI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2B4A/62165D9E868011F19D1E7A5F66A30FBC/4vp6LLwyeRiAQsNBPdniSXzUndI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:1b:df:a1:fb:19:88:c0:e1:f4:bd:93:05:11:a5:e1:2f:05:
         40:b7:30:7c:09:f2:83:92:0f:dd:80:c5:79:da:7a:d5:46:52:
         f0:b4:4c:05:75:44:75:b4:bb:c8:e2:aa:66:4b:44:b0:f0:6e:
         8b:c2:71:1c:3b:7f:de:c5:ff:9e:16:ac:cb:d0:d8:79:b5:f9:
         bb:41:76:f0:f8:e0:ec:2d:4d:09:ee:32:25:9b:61:d3:75:2d:
         78:ba:43:d2:6f:a8:77:f2:05:e4:b6:5c:2f:eb:ab:3c:e5:16:
         1e:65:c5:8d:04:4c:13:c6:8f:1b:a6:cd:bf:e4:c8:a2:cf:e5:
         72:ce:b0:1c:40:19:23:4e:99:3c:2f:dd:91:e7:89:75:7f:ee:
         27:f1:50:0b:d4:68:7f:fd:73:ec:43:8a:c0:52:4d:db:93:08:
         27:3d:6f:98:84:92:49:84:cb:1c:32:43:5d:f1:de:63:3f:4e:
         51:2f:6d:18:b8:e1:6d:17:1f:13:b1:34:01:4a:d0:5c:1b:f6:
         94:8f:39:e7:f0:b8:7b:07:a1:74:e0:5b:1b:ab:1c:04:20:9b:
         2b:86:fc:c0:d8:bb:b0:5c:d4:23:ab:dd:2c:97:82:b4:40:42:
         1b:8b:66:5f:bf:03:17:8a:bb:f4:48:7b:99:80:dc:50:ba:6c:
         f1:0a:31:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:38:39 2026 by rpki-client