Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft
File:                     Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft (raw, json)
Hash identifier:          X6rGpJk1a2Tm2FQeHjICkz0wIJRnsTmRpp4vQL1q8bc=
Subject key identifier:   C5:53:79:EC:EB:9C:4F:BB:1A:A2:E9:D9:98:46:64:55:7A:99:C9:9B
Authority key identifier: 55:FB:7B:CC:A7:40:28:5F:C8:1A:A3:60:F0:2C:E3:2F:95:81:6D:B6
Certificate issuer:       /CN=A91127C1/serialNumber=55FB7BCCA740285FC81AA360F02CE32F95816DB6
Certificate serial:       02E2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vft7zKdAKF_IGqNg8CzjL5WBbbY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft
Manifest number:          02DA
Signing time:             Tue 22 Sep 2026 19:19:26 +0000
Manifest this update:     Tue 22 Sep 2026 19:19:25 +0000
Manifest next update:     Tue 29 Sep 2026 19:19:25 +0000
Files and hashes:         1: Vft7zKdAKF_IGqNg8CzjL5WBbbY.crl (hash: 287qr8pskv+cNiZYyPtxPXB88MMM8kxT6GgwGuefp4Y=)
                          2: 8ED301D0782011F0BDB6E683C4F9AE02.roa (hash: mlBrSrR3pgA04x8jSnmONOEEm/8z9vhlANdGKFaajRw=)
                          3: 96C1C6A0782111F0A5880F87C4F9AE02.roa (hash: Cpj2rnPMgYM5VqySWqHdCDB+CGxD+l6btMfOp3kgYVw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.crl
                          rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vft7zKdAKF_IGqNg8CzjL5WBbbY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 19:19:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 738 (0x2e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91127C1, serialNumber=55FB7BCCA740285FC81AA360F02CE32F95816DB6
        Validity
            Not Before: Sep 22 19:19:25 2026 GMT
            Not After : Sep 29 19:19:25 2026 GMT
        Subject: CN=6ab2d4be-fa3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:29:f5:ac:67:3c:74:4c:d9:39:05:f0:b9:8d:
                    02:84:ee:ac:eb:e7:07:89:2e:ac:b9:62:7d:92:7f:
                    cc:bd:27:0c:0b:68:3e:34:dc:7f:01:43:2d:e0:6b:
                    e9:14:9a:52:3f:8d:59:5f:8f:09:7a:d2:bf:9b:eb:
                    4b:43:7d:12:3f:b8:82:0a:47:b0:d1:79:2e:8a:6a:
                    ec:e5:c6:55:fa:22:c6:6d:05:5c:b5:83:56:c2:e7:
                    93:6b:9f:31:b7:4c:f5:ca:c2:be:93:95:c9:0e:e4:
                    07:50:ae:38:28:51:90:e3:80:7f:aa:7b:71:f0:c7:
                    d0:98:e1:a7:94:1e:94:2a:12:e5:20:12:c9:db:f9:
                    4c:91:ea:e3:f7:1c:48:2c:5c:8b:c2:4a:8f:47:0b:
                    b4:3c:55:fd:07:fe:b7:cf:6b:6a:eb:12:99:9d:25:
                    09:8b:7e:f5:e5:08:96:41:5b:5f:f4:ad:17:1c:4e:
                    a0:77:ea:51:a8:11:93:26:66:0d:14:c6:34:c2:a6:
                    f9:ed:7d:51:7f:7a:de:89:60:17:37:2f:5d:dc:80:
                    1a:ab:69:ad:06:27:c0:cd:d3:bd:b8:da:a4:ea:fc:
                    3d:ed:b2:cc:e3:87:c1:24:96:6c:77:ad:86:de:e3:
                    44:bf:a9:75:87:47:d9:8c:c8:7c:48:b8:e5:ae:73:
                    7d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:53:79:EC:EB:9C:4F:BB:1A:A2:E9:D9:98:46:64:55:7A:99:C9:9B
            X509v3 Authority Key Identifier:
                keyid:55:FB:7B:CC:A7:40:28:5F:C8:1A:A3:60:F0:2C:E3:2F:95:81:6D:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vft7zKdAKF_IGqNg8CzjL5WBbbY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:51:94:5e:15:cf:2f:24:ad:a4:62:d1:5a:f4:be:93:17:a6:
         49:00:fd:4d:59:4b:0d:65:8d:93:d2:56:b5:3e:75:97:b9:65:
         ab:75:a0:9f:72:53:80:39:ea:4c:b3:3d:87:bc:e5:9d:76:76:
         e7:b8:04:68:7b:e5:03:47:b6:eb:b4:8c:4a:3c:8c:00:94:75:
         3f:c3:c6:b9:15:3a:86:33:11:da:99:f1:83:a2:27:14:67:31:
         0c:36:58:9d:f2:6e:d8:cc:f6:92:06:5a:0c:64:c0:35:dc:21:
         b5:e2:8f:28:7e:f2:20:93:a9:6f:22:b5:f2:92:ac:2c:0a:76:
         be:55:15:fb:e0:e3:0e:0b:db:f4:2e:f5:93:dc:3a:a1:2a:1c:
         d6:14:fd:9b:3b:22:e1:3c:29:76:d1:5a:8c:12:3e:bb:44:ee:
         e8:00:48:60:8d:58:ec:37:10:94:9d:60:a8:07:8c:79:db:ae:
         cf:3d:62:a1:f8:4d:d1:f9:07:03:c4:9f:25:83:56:c8:8a:1a:
         e9:78:76:0d:2e:33:9b:fb:29:c4:18:99:49:53:1d:08:06:1a:
         2d:fd:1e:68:9a:14:5e:f7:bb:f7:cc:87:12:06:40:39:85:4c:
         4b:37:f7:e5:e4:19:ca:c5:04:7e:58:ed:23:d8:ca:45:d6:fb:
         6d:14:1b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:49:15 2026 by rpki-client