Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F1DA2/B8BA899A229411F1BD86858EAE833773/VVf9XdSgiVmupCqY3iBy7QUB204.mft
File:                     VVf9XdSgiVmupCqY3iBy7QUB204.mft (raw, json)
Hash identifier:          WIGbTL3g9nsRf5iflTHkm0DsyOwdWjtIX9CwWbcexSA=
Subject key identifier:   03:16:80:07:F2:9B:08:11:49:63:4C:39:1B:32:3E:45:4C:86:57:B5
Authority key identifier: 55:57:FD:5D:D4:A0:89:59:AE:A4:2A:98:DE:20:72:ED:05:01:DB:4E
Certificate issuer:       /CN=A91F1DA2/serialNumber=5557FD5DD4A08959AEA42A98DE2072ED0501DB4E
Certificate serial:       68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVf9XdSgiVmupCqY3iBy7QUB204.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1DA2/B8BA899A229411F1BD86858EAE833773/VVf9XdSgiVmupCqY3iBy7QUB204.mft
Manifest number:          67
Signing time:             Sat 03 Oct 2026 08:43:27 +0000
Manifest this update:     Sat 03 Oct 2026 08:43:26 +0000
Manifest next update:     Sat 10 Oct 2026 08:43:26 +0000
Files and hashes:         1: VVf9XdSgiVmupCqY3iBy7QUB204.crl (hash: 94iBeYmnQ+GBVE/BLk4Uli94OK+Ti/x5etDGJUxNGbE=)
                          2: 1CEBECEC229511F1916F29FEAE833773.roa (hash: m1cTe0sjbHKB5Ksm5p5JN7pFm5DtOLvmL4Q6d+C3sDY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1DA2/B8BA899A229411F1BD86858EAE833773/VVf9XdSgiVmupCqY3iBy7QUB204.crl
                          rsync://rpki.apnic.net/member_repository/A91F1DA2/B8BA899A229411F1BD86858EAE833773/VVf9XdSgiVmupCqY3iBy7QUB204.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVf9XdSgiVmupCqY3iBy7QUB204.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 08:43:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104 (0x68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1DA2, serialNumber=5557FD5DD4A08959AEA42A98DE2072ED0501DB4E
        Validity
            Not Before: Oct  3 08:43:26 2026 GMT
            Not After : Oct 10 08:43:26 2026 GMT
        Subject: CN=6ac0c02f-720b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:23:6c:53:a9:21:90:60:d8:dc:38:3b:e2:af:
                    82:ef:88:e6:aa:41:6d:1a:33:93:41:10:9a:69:43:
                    54:41:d2:b4:a3:d3:a2:46:96:06:5a:78:8e:3e:0a:
                    19:c2:13:d7:5d:26:7d:38:93:80:97:1b:fe:3e:ea:
                    37:40:51:2a:8a:9c:86:9e:9e:25:18:66:ab:fd:02:
                    a8:eb:a7:ba:96:91:8f:72:1e:05:86:ba:fc:b2:80:
                    c4:21:a4:9e:ce:43:fc:d0:c8:ae:dd:11:7a:0a:06:
                    09:cb:52:e1:be:da:66:24:f1:1f:4e:3d:3c:77:b3:
                    b0:97:cf:18:c2:83:79:5c:76:34:1f:6a:33:0e:9e:
                    52:86:51:1a:9c:d4:4c:cc:ab:45:9b:1b:1b:5d:ae:
                    da:07:12:af:76:58:19:eb:1e:63:8f:70:eb:4a:98:
                    4c:8d:78:cb:3d:1a:58:97:c9:0e:23:61:a1:0a:aa:
                    1f:51:c9:e0:43:18:5e:bf:75:ea:d6:a6:01:b1:2a:
                    2b:cc:e7:7f:6f:9d:65:c3:2d:6a:ba:3c:fe:52:82:
                    32:6b:c7:1b:8a:45:cf:44:f1:71:82:5a:b1:b3:ef:
                    16:7f:9b:1f:0e:c6:53:91:40:d3:27:b2:34:c6:c7:
                    61:7e:28:a0:aa:b4:a1:91:8a:f6:87:db:72:e6:d7:
                    0a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:16:80:07:F2:9B:08:11:49:63:4C:39:1B:32:3E:45:4C:86:57:B5
            X509v3 Authority Key Identifier:
                keyid:55:57:FD:5D:D4:A0:89:59:AE:A4:2A:98:DE:20:72:ED:05:01:DB:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1DA2/B8BA899A229411F1BD86858EAE833773/VVf9XdSgiVmupCqY3iBy7QUB204.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVf9XdSgiVmupCqY3iBy7QUB204.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1DA2/B8BA899A229411F1BD86858EAE833773/VVf9XdSgiVmupCqY3iBy7QUB204.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:a9:88:c4:c1:94:c5:af:89:4c:c6:d0:bc:0f:90:f0:44:65:
         d3:aa:1a:39:78:ab:5d:dc:cb:65:59:f8:bc:68:d8:d1:c6:cb:
         27:11:13:53:31:11:75:b7:22:8c:8f:74:be:d0:72:21:a1:e5:
         c6:06:4d:b0:a8:ae:0f:d3:01:0a:f1:b6:ca:04:6f:c2:36:90:
         2d:e8:00:5e:7a:68:09:21:f1:1a:eb:c8:3c:32:49:bc:58:77:
         ec:27:11:2e:9a:59:50:2d:b2:27:91:c9:dc:27:7a:22:52:92:
         03:c8:55:b4:db:2b:0a:a7:7e:38:10:77:c5:2b:5d:56:74:25:
         6a:89:a4:a7:8c:95:12:16:b2:d8:3f:70:2a:9f:b9:a8:16:7b:
         73:29:a8:44:f5:58:ae:9c:ba:90:3b:1e:c0:0b:36:bc:58:da:
         9a:03:ab:dc:2e:31:28:54:d5:d8:03:f5:84:75:50:4a:7b:50:
         82:86:bc:df:39:d4:0c:39:21:bd:3a:84:7c:d3:1b:72:d9:b8:
         45:c9:a5:c3:5e:0e:8e:fd:f3:05:0d:68:d4:48:bf:3a:ae:4b:
         5a:09:d8:cf:2b:67:18:ef:91:b6:40:04:99:95:57:aa:e1:49:
         21:90:b3:08:fd:f2:95:4b:6e:4a:67:f6:42:d9:3a:ae:12:49:
         63:a4:7b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:36:06 2026 by rpki-client