Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft
File:                     Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft (raw, json)
Hash identifier:          95BWWdYoZdMIhCSame7F7mrtXmPAYbvjXC3e87NDjKY=
Subject key identifier:   CA:6D:82:37:1F:B6:CE:16:EB:05:D8:DD:C0:57:44:FC:50:E8:4E:C1
Authority key identifier: 56:46:E0:7A:0F:60:25:F1:E2:60:F1:C4:99:6F:9A:68:1B:29:20:71
Certificate issuer:       /CN=A91203DC/serialNumber=5646E07A0F6025F1E260F1C4996F9A681B292071
Certificate serial:       2287
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vkbgeg9gJfHiYPHEmW-aaBspIHE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft
Manifest number:          2274
Signing time:             Tue 22 Sep 2026 15:48:18 +0000
Manifest this update:     Tue 22 Sep 2026 15:48:18 +0000
Manifest next update:     Tue 29 Sep 2026 15:48:18 +0000
Files and hashes:         1: Vkbgeg9gJfHiYPHEmW-aaBspIHE.crl (hash: Y6Cf0H1RamgMiBJzA/gEB7tUQu20Dnfhe3UOtcjaqzw=)
                          2: 1D9DC82A652311EBA8CF3C4CC4F9AE02.roa (hash: HwypahBFkKbW/pB8Pd+gaE4/P/VRHrxmO2AZ+Ty59Ss=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.crl
                          rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vkbgeg9gJfHiYPHEmW-aaBspIHE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 15:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8839 (0x2287)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91203DC, serialNumber=5646E07A0F6025F1E260F1C4996F9A681B292071
        Validity
            Not Before: Sep 22 15:48:18 2026 GMT
            Not After : Sep 29 15:48:18 2026 GMT
        Subject: CN=6ab2a342-2a27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9a:fb:54:22:44:04:5c:52:4e:ac:67:67:7d:
                    e8:c8:39:86:a2:df:ce:e7:f4:8b:2f:14:19:16:a6:
                    5e:d1:a8:4d:55:ab:e6:8d:20:ee:8c:cf:a3:71:a5:
                    bc:79:67:42:cd:4e:58:b1:25:b2:03:bc:6d:9a:70:
                    2d:8a:09:dc:c5:18:1a:26:bd:f9:bb:33:56:6e:9a:
                    ff:5d:8a:eb:a8:be:d6:e2:72:4b:1d:52:15:79:18:
                    d3:dd:90:8c:ce:f0:2b:05:9d:67:f1:a4:93:cf:51:
                    87:12:3c:59:86:6a:4b:95:71:65:ee:f0:5a:20:9c:
                    0d:35:c8:25:97:23:f1:e3:c8:46:e0:81:ca:62:ec:
                    87:b9:1d:12:2a:32:06:7a:27:50:07:94:3c:51:65:
                    4f:5b:f4:98:b9:be:61:df:1f:ce:38:f9:5f:c9:f2:
                    d6:12:59:a4:53:a6:2d:50:f6:40:fc:05:11:d3:7a:
                    e7:7d:bb:25:a5:34:5f:e5:c9:ea:d6:84:93:38:9b:
                    1c:03:11:f8:72:39:36:92:17:34:ea:c4:e8:a5:4b:
                    a1:4d:7c:30:6c:9e:e5:99:f0:2b:ad:31:eb:03:48:
                    18:ee:9c:97:e6:f7:ce:ec:72:0c:8b:da:df:ba:d4:
                    77:1e:cc:41:9a:d0:50:4e:77:3a:87:19:3e:a8:ff:
                    cb:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:6D:82:37:1F:B6:CE:16:EB:05:D8:DD:C0:57:44:FC:50:E8:4E:C1
            X509v3 Authority Key Identifier:
                keyid:56:46:E0:7A:0F:60:25:F1:E2:60:F1:C4:99:6F:9A:68:1B:29:20:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vkbgeg9gJfHiYPHEmW-aaBspIHE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:f2:37:98:38:8d:e9:d5:9f:cb:8f:5f:71:e5:4d:01:99:f9:
         1a:63:7a:d8:80:aa:7d:f0:ff:35:61:ed:b1:0b:90:f5:5f:bc:
         c4:b1:f2:52:c9:99:1b:5b:d8:ac:7c:de:9c:51:e2:3f:30:b2:
         86:14:a9:12:b1:d8:d1:bf:d4:5c:65:32:ae:86:64:08:3a:a1:
         e0:39:28:a9:02:86:27:c4:60:6e:45:f8:c9:1f:ca:7e:f6:b6:
         9d:7a:d1:1d:fe:5b:ed:3e:7a:26:d0:b0:9d:74:32:31:71:bd:
         ff:0b:bd:55:e2:f7:a6:5a:fe:7e:c9:58:8d:1b:58:a1:af:9d:
         41:8f:7a:46:f1:e0:00:c1:ef:87:36:aa:54:57:a7:21:eb:1c:
         6b:dc:23:f8:d5:ed:df:83:36:0c:e5:ce:e9:7e:8b:f0:ea:93:
         2e:bb:11:ff:1e:4b:07:ef:3b:ef:0e:8b:1f:78:c4:22:43:8b:
         0b:39:9a:8c:b7:0a:5c:ee:ca:93:26:7a:80:ce:2c:2e:ff:c6:
         cf:26:87:da:df:7b:c9:8f:4c:2d:4d:aa:fd:40:79:22:d4:b1:
         eb:32:d8:b1:0e:d7:9c:c2:6d:4d:22:e9:3b:70:04:c4:e8:e8:
         fa:9b:8e:67:42:7b:59:aa:f0:05:79:b2:59:fc:01:36:cd:9d:
         42:fb:f0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:56:55 2026 by rpki-client