Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft
File:                     VTOnxXv02x5Tj5534LSGi4-QxYI.mft (raw, json)
Hash identifier:          SCNVlnzbXnfNXItIpwyU3bOrcvADdUOZNCVDnLbY1qk=
Subject key identifier:   53:CC:DE:9F:BB:FA:DF:02:4A:16:F1:9A:BB:08:73:39:28:37:83:F5
Authority key identifier: 55:33:A7:C5:7B:F4:DB:1E:53:8F:9E:77:E0:B4:86:8B:8F:90:C5:82
Certificate issuer:       /CN=A91276FA/serialNumber=5533A7C57BF4DB1E538F9E77E0B4868B8F90C582
Certificate serial:       018B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft
Manifest number:          0177
Signing time:             Fri 25 Sep 2026 04:50:22 +0000
Manifest this update:     Fri 25 Sep 2026 04:50:21 +0000
Manifest next update:     Fri 02 Oct 2026 04:50:21 +0000
Files and hashes:         1: VTOnxXv02x5Tj5534LSGi4-QxYI.crl (hash: hFGP/F/FxYq+nmkZULtuMrYwNxUO0m9EyFgggcb+JjU=)
                          2: 5D8DFB5684CA11EF9F92574DC4F9AE02.roa (hash: ui+QIvOSSm4JsqVWIgvAnE+tPuj6skIC4z/Y5KBBL/w=)
                          3: 7EC9705C84CA11EFA41F8D4DC4F9AE02.roa (hash: VkfTGGoNVUsbEcJxM7s1vcrxda5Fy3LpRVjxl0XTbMI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.crl
                          rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 04:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 395 (0x18b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91276FA, serialNumber=5533A7C57BF4DB1E538F9E77E0B4868B8F90C582
        Validity
            Not Before: Sep 25 04:50:21 2026 GMT
            Not After : Oct  2 04:50:21 2026 GMT
        Subject: CN=6ab5fd8e-ccf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e5:f5:d1:dc:c0:d0:5d:b1:38:8b:5b:be:cf:
                    25:01:45:9b:53:28:b2:a7:14:a7:c5:8a:b2:16:28:
                    b1:41:3a:08:14:bd:2d:b2:fc:12:aa:c6:7b:b0:19:
                    f1:28:43:bf:31:bc:91:7d:36:ab:af:02:ac:b1:b9:
                    b1:79:41:eb:13:c9:dd:a5:23:92:ba:cd:e1:50:41:
                    96:12:fb:c8:de:55:40:ff:7e:9c:9a:77:4c:86:c2:
                    e9:10:59:41:1b:ad:ed:85:ae:f2:7f:84:b7:de:bb:
                    b0:58:be:ba:e2:f3:d8:d5:fa:01:66:cc:60:9b:78:
                    8d:d7:ee:79:af:a7:10:66:1e:8d:76:d3:a5:00:21:
                    5c:10:7e:9b:77:bc:cb:36:eb:7c:3a:ac:93:09:60:
                    85:ba:1b:86:ac:6f:f4:2b:3f:37:6f:d5:8f:e1:fa:
                    c0:77:90:4e:5e:13:8a:12:b2:68:cd:34:0a:87:ac:
                    a4:40:97:f5:fc:8e:8c:eb:a4:7d:a1:a5:a7:0b:0e:
                    59:0e:15:3e:8f:ed:c5:49:1c:e8:25:34:93:69:7e:
                    2f:37:7d:1a:e4:b6:e6:0c:37:3d:cf:9d:3d:2e:8c:
                    ee:a8:2b:17:d8:b4:4d:1b:9b:bf:4f:b1:ff:16:b9:
                    9d:63:4f:96:bf:98:02:20:5a:e9:17:d9:13:c5:82:
                    cb:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:CC:DE:9F:BB:FA:DF:02:4A:16:F1:9A:BB:08:73:39:28:37:83:F5
            X509v3 Authority Key Identifier:
                keyid:55:33:A7:C5:7B:F4:DB:1E:53:8F:9E:77:E0:B4:86:8B:8F:90:C5:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:f4:8d:41:f8:92:48:27:ce:25:b7:94:c4:16:5a:25:06:ba:
         8f:03:ae:9c:38:8c:b5:7f:b9:49:01:b3:21:63:a3:0b:95:c5:
         07:24:9a:79:f2:ee:a8:11:ef:b9:de:db:2a:d7:e1:bc:97:34:
         a9:29:c3:46:d9:28:1f:ff:87:e6:41:96:83:63:b9:80:e6:9a:
         48:58:81:c0:cf:fc:9b:bb:c4:98:f6:46:fd:f0:3f:d0:2b:ff:
         4b:0a:0f:3f:00:ec:9e:d5:79:d6:2d:c5:7c:b5:3c:fe:80:2a:
         a3:5f:3d:a4:54:d3:69:fa:dd:49:3d:4b:03:24:df:fc:98:1c:
         8e:f9:e1:0d:6f:0e:78:32:92:6d:6a:b1:92:1f:61:4a:eb:79:
         81:a4:93:e6:f0:20:b4:b1:33:9a:f5:77:f2:9d:e6:34:63:de:
         20:2c:26:58:31:ab:2e:ba:8f:7c:26:c2:d1:6a:c0:d5:f0:ff:
         91:db:11:fd:7a:52:ef:7c:60:97:30:c2:d2:02:5e:b1:78:1a:
         98:16:e9:d0:5f:1b:bc:de:78:0b:ec:bc:d6:2d:eb:1c:60:7e:
         20:7d:ff:a8:f8:08:27:ca:fe:d5:8d:40:97:89:c3:6d:83:28:
         18:92:16:8f:cb:42:15:50:07:8a:15:f8:d9:b7:6d:bf:88:6b:
         f1:d2:52:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:28:08 2026 by rpki-client