Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.mft
File:                     VJnONj3wXJSTIjSIKXmbEO_x05I.mft (raw, json)
Hash identifier:          hHz1QEsaRdjm1YsaUCTdG+dZTd+2nDXRrLDgtayjPVI=
Subject key identifier:   D0:3C:DD:43:35:3C:9A:87:AB:42:4B:A4:FB:2E:9C:22:E1:17:57:56
Authority key identifier: 54:99:CE:36:3D:F0:5C:94:93:22:34:88:29:79:9B:10:EF:F1:D3:92
Certificate issuer:       /CN=A912DB83/serialNumber=5499CE363DF05C949322348829799B10EFF1D392
Certificate serial:       03BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJnONj3wXJSTIjSIKXmbEO_x05I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.mft
Manifest number:          03AE
Signing time:             Fri 25 Sep 2026 00:28:09 +0000
Manifest this update:     Fri 25 Sep 2026 00:28:08 +0000
Manifest next update:     Fri 02 Oct 2026 00:28:08 +0000
Files and hashes:         1: VJnONj3wXJSTIjSIKXmbEO_x05I.crl (hash: +PMkmTXkTF/qjQJiE4oWuzcg2zJl7DJzBlpD4MuqraM=)
                          2: 8698FF1E541811F0A468570BC4F9AE02.roa (hash: +znSTWAgyX7HjwqMn0JfRNXldDEy7xUyekSQb8gDlMU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.crl
                          rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJnONj3wXJSTIjSIKXmbEO_x05I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 00:28:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 959 (0x3bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912DB83, serialNumber=5499CE363DF05C949322348829799B10EFF1D392
        Validity
            Not Before: Sep 25 00:28:08 2026 GMT
            Not After : Oct  2 00:28:08 2026 GMT
        Subject: CN=6ab5c019-6cf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f6:2e:06:44:7c:45:ee:d5:58:c4:a9:9f:28:
                    17:92:79:cd:84:ca:47:22:da:b3:87:da:83:89:da:
                    c1:e8:cf:d0:16:9c:7c:cb:b1:f7:77:9d:16:4c:4f:
                    4b:cb:50:58:98:3e:2e:13:ef:68:c0:c3:29:16:c8:
                    56:a5:fc:dd:34:69:59:39:cd:4a:b4:7b:24:d1:63:
                    5e:69:0f:42:42:54:13:ed:96:14:8b:2c:24:0d:5d:
                    73:32:08:d5:d8:52:68:07:f9:8d:96:a9:df:3b:d6:
                    57:56:d2:05:64:64:88:af:47:30:c6:6e:91:ed:bf:
                    3e:b1:ea:b9:e2:fd:ed:e3:e8:b5:f0:37:1d:17:70:
                    34:aa:22:98:57:52:87:ba:dc:a3:81:e6:cc:b0:46:
                    f3:dd:14:dd:57:4d:41:34:b0:4a:9f:bd:32:48:a1:
                    cf:ba:1a:bd:bf:39:b7:fd:20:15:c3:19:4a:b5:1f:
                    6c:5a:d6:05:8e:ec:c7:88:e3:f9:71:fd:88:3a:12:
                    5a:ac:a0:82:a7:91:a7:61:78:8f:61:3d:ee:63:fe:
                    a4:2a:ab:50:5d:f1:7d:c2:42:51:04:61:64:dd:1d:
                    9b:c6:24:53:43:8b:49:d6:5d:b3:48:4c:88:38:fb:
                    ea:64:d9:20:26:29:39:09:49:4c:4e:43:78:f7:0a:
                    1d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:3C:DD:43:35:3C:9A:87:AB:42:4B:A4:FB:2E:9C:22:E1:17:57:56
            X509v3 Authority Key Identifier:
                keyid:54:99:CE:36:3D:F0:5C:94:93:22:34:88:29:79:9B:10:EF:F1:D3:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJnONj3wXJSTIjSIKXmbEO_x05I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:7e:37:48:42:81:81:99:09:42:12:71:8d:31:69:00:71:bc:
         9c:4c:83:34:75:bc:8c:04:00:dc:83:32:bf:83:c1:c1:ff:3a:
         26:e5:8c:5f:90:63:e3:6f:6a:c0:11:bd:3a:9b:28:49:f7:d9:
         da:cb:f0:f6:7f:96:53:de:92:63:62:d1:ae:61:f0:08:db:d2:
         3f:ad:fa:7e:8e:12:38:82:55:f0:28:3a:b1:f7:68:16:e2:50:
         45:6d:ee:5f:47:d8:df:1a:26:30:2a:ba:7d:e5:50:ae:df:ac:
         bd:72:7c:32:28:70:a3:a3:7f:a0:21:e2:a9:ce:d3:9e:e3:1e:
         4f:54:3e:9f:9c:a4:ca:c1:1d:5d:71:d9:88:9d:19:06:1c:1f:
         92:da:f7:d3:ae:e6:20:f0:c2:5e:54:00:ac:c1:0c:c0:78:05:
         77:ad:e0:ce:2c:b1:87:06:f3:3c:aa:2a:56:0b:e4:c2:53:08:
         9e:a6:75:6e:7d:b6:f8:7b:20:44:51:16:5f:d4:28:86:97:f3:
         67:36:9e:80:4a:d0:b9:de:1f:c6:6a:0b:d2:b4:d3:70:89:e1:
         bc:79:cb:9c:80:25:6f:c6:c2:0e:54:80:40:e8:01:e1:6b:b7:
         98:dc:03:cd:1c:c9:c2:15:9b:bf:91:27:03:d2:e0:02:98:27:
         db:f9:99:1f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA78wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkRCODMxMTAvBgNVBAUTKDU0OTlDRTM2M0RGMDVDOTQ5MzIyMzQ4ODI5Nzk5QjEw
RUZGMUQzOTIwHhcNMjYwOTI1MDAyODA4WhcNMjYxMDAyMDAyODA4WjAYMRYwFAYD
VQQDEw02YWI1YzAxOS02Y2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy/YuBkR8Re7VWMSpnygXknnNhMpHItqzh9qDidrB6M/QFpx8y7H3d50WTE9L
y1BYmD4uE+9owMMpFshWpfzdNGlZOc1KtHsk0WNeaQ9CQlQT7ZYUiywkDV1zMgjV
2FJoB/mNlqnfO9ZXVtIFZGSIr0cwxm6R7b8+seq54v3t4+i18DcdF3A0qiKYV1KH
utyjgebMsEbz3RTdV01BNLBKn70ySKHPuhq9vzm3/SAVwxlKtR9sWtYFjuzHiOP5
cf2IOhJarKCCp5GnYXiPYT3uY/6kKqtQXfF9wkJRBGFk3R2bxiRTQ4tJ1l2zSEyI
OPvqZNkgJik5CUlMTkN49wodWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNA83UM1
PJqHq0JLpPsunCLhF1dWMB8GA1UdIwQYMBaAFFSZzjY98FyUkyI0iCl5mxDv8dOS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREI4My8xRUZFMjkyQ0ZC
NUQxMUVDQkI2MTBDODVDNEY5QUUwMi9WSm5PTmozd1hKU1RJalNJS1htYkVPX3gw
NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZKbk9OajN3WEpTVElqU0lLWG1iRU9feDA1SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
REI4My8xRUZFMjkyQ0ZCNUQxMUVDQkI2MTBDODVDNEY5QUUwMi9WSm5PTmozd1hK
U1RJalNJS1htYkVPX3gwNUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAb343SEKBgZkJQhJxjTFpAHG8nEyDNHW8jAQA3IMyv4PBwf86JuWMX5Bj429q
wBG9OpsoSffZ2svw9n+WU96SY2LRrmHwCNvSP636fo4SOIJV8Cg6sfdoFuJQRW3u
X0fY3xomMCq6feVQrt+svXJ8Mihwo6N/oCHiqc7TnuMeT1Q+n5ykysEdXXHZiJ0Z
Bhwfktr3067mIPDCXlQArMEMwHgFd63gziyxhwbzPKoqVgvkwlMInqZ1bn22+Hsg
RFEWX9QohpfzZzaegErQud4fxmoL0rTTcInhvHnLnIAlb8bCDlSAQOgB4Wu3mNwD
zRzJwhWbv5EnA9LgApgn2/mZHw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 19:45:57 2026 by rpki-client