Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.mft
File:                     vhgzygFCXO9HWUXxmZieZUOzHmI.mft (raw, json)
Hash identifier:          4bMRtzWG9033vfp+vOcMn2FNm95NqwdRvp9KV3eTp4c=
Subject key identifier:   B4:36:2B:47:FE:A1:4E:94:D6:95:1B:2A:B1:D2:87:D4:4D:17:80:16
Authority key identifier: BE:18:33:CA:01:42:5C:EF:47:59:45:F1:99:98:9E:65:43:B3:1E:62
Certificate issuer:       /CN=A91382E4/serialNumber=BE1833CA01425CEF475945F199989E6543B31E62
Certificate serial:       041E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhgzygFCXO9HWUXxmZieZUOzHmI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.mft
Manifest number:          0412
Signing time:             Wed 23 Sep 2026 00:00:44 +0000
Manifest this update:     Wed 23 Sep 2026 00:00:44 +0000
Manifest next update:     Wed 30 Sep 2026 00:00:44 +0000
Files and hashes:         1: vhgzygFCXO9HWUXxmZieZUOzHmI.crl (hash: 9WPrOAeQmF5okozlzKED2/LIeSXczWoLeufU7Gqiaxg=)
                          2: A05195B4633011ED9122442CC4F9AE02.roa (hash: 3Rr4xhV/IE5GzJYBq3nqGCxveOMf64SI35CYsnefXng=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.crl
                          rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhgzygFCXO9HWUXxmZieZUOzHmI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 00:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1054 (0x41e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91382E4, serialNumber=BE1833CA01425CEF475945F199989E6543B31E62
        Validity
            Not Before: Sep 23 00:00:44 2026 GMT
            Not After : Sep 30 00:00:44 2026 GMT
        Subject: CN=6ab316ac-e32a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8c:69:54:90:4c:31:f3:40:f7:c4:a2:3a:ce:
                    c3:f7:be:25:51:54:f0:59:d8:38:f2:f4:61:59:87:
                    d8:ca:a4:cd:31:65:26:a5:84:2b:b0:ea:30:ea:33:
                    83:10:e5:4f:35:30:63:77:7f:e9:de:1d:c8:c6:84:
                    b9:5e:95:46:54:00:60:e5:06:5c:bb:38:f2:e8:ce:
                    0a:21:0c:34:b6:d1:a3:30:c8:6b:ce:9b:ca:61:c4:
                    3f:7d:db:61:73:1e:67:08:84:cb:1f:66:88:fb:41:
                    f5:28:d6:07:29:e2:32:07:f6:6a:4b:32:24:a2:1b:
                    8a:66:51:93:21:3d:c1:51:8e:7a:ee:d6:af:4c:b7:
                    c3:20:2f:f9:99:fe:7f:93:36:e1:7a:9c:b7:aa:81:
                    f4:7c:70:e3:1a:65:43:df:3f:06:00:39:c9:a5:d0:
                    52:f9:69:18:52:e6:8a:76:3e:b3:d4:7b:6f:dc:8a:
                    ea:42:48:67:ac:46:4c:c4:7e:a1:f2:9a:be:41:fb:
                    12:cb:aa:4f:2c:84:88:00:d4:24:f3:a5:8c:c9:79:
                    de:dd:c5:67:47:62:ae:18:af:24:65:c9:8d:71:65:
                    f3:c7:7e:ee:a6:f1:ca:0b:a6:09:bf:71:3f:89:23:
                    59:10:11:8e:89:98:53:a9:79:e9:cf:ac:c4:42:9b:
                    27:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:36:2B:47:FE:A1:4E:94:D6:95:1B:2A:B1:D2:87:D4:4D:17:80:16
            X509v3 Authority Key Identifier:
                keyid:BE:18:33:CA:01:42:5C:EF:47:59:45:F1:99:98:9E:65:43:B3:1E:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhgzygFCXO9HWUXxmZieZUOzHmI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:4a:7b:66:f8:b4:86:a7:78:55:98:49:03:9d:04:01:6e:0d:
         76:57:5d:35:c3:3a:6e:67:c3:0e:f9:f5:ca:1b:ca:21:e4:9f:
         20:97:44:6c:bb:07:73:67:07:cb:23:89:89:f8:1d:79:35:c4:
         90:1b:b9:7e:8f:08:82:0a:13:be:a4:2f:3c:10:90:25:80:a1:
         a0:01:46:11:1b:a4:35:1f:e8:52:36:a4:c6:08:c2:9c:50:56:
         49:43:e3:61:1d:a6:8c:97:5e:fb:e2:62:e5:30:3a:61:8e:b6:
         2d:09:71:13:46:75:7d:2c:8e:c3:74:94:9c:15:1a:6f:9d:bb:
         30:ff:56:71:37:56:8f:67:63:3f:d7:4e:48:e0:a5:2f:d7:5e:
         2e:cb:48:af:d3:29:74:f5:61:20:fa:da:62:f5:49:5e:83:d9:
         36:d6:4a:27:f5:ce:04:87:a0:bb:fb:4c:fd:d4:70:5c:a7:e9:
         b0:47:1c:0f:cc:f3:99:ae:5c:2b:4d:19:5d:a5:95:51:97:b5:
         6a:4a:70:26:44:c9:56:a6:b9:d6:00:88:ce:9f:8f:4e:a6:a9:
         ce:b3:8c:7d:24:0d:71:30:85:4f:82:59:f5:ac:74:1e:28:68:
         e3:77:33:a6:22:c9:f8:f6:16:f5:50:db:a2:55:bd:59:00:a8:
         a8:4c:e9:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:16:34 2026 by rpki-client