Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft
File:                     VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft (raw, json)
Hash identifier:          G0ykYCwSaJmWMBJ5vpUE9gIm5LwJBSre0Gaqea7oAfU=
Subject key identifier:   FD:CE:FD:F9:40:05:31:7C:9D:31:A9:4F:20:A7:E2:55:AD:65:27:2F
Authority key identifier: 56:5C:8E:C4:E8:34:47:EC:FF:A6:9E:1D:EE:16:37:C1:5F:45:A3:FE
Certificate issuer:       /CN=A9155001/serialNumber=565C8EC4E83447ECFFA69E1DEE1637C15F45A3FE
Certificate serial:       01B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft
Manifest number:          0196
Signing time:             Sat 03 Oct 2026 05:07:09 +0000
Manifest this update:     Sat 03 Oct 2026 05:07:09 +0000
Manifest next update:     Sat 10 Oct 2026 05:07:09 +0000
Files and hashes:         1: VlyOxOg0R-z_pp4d7hY3wV9Fo_4.crl (hash: KGmqIp3yvqOp6uPImPjjmlHz+vJQrS75x+HUNXghK2M=)
                          2: 18E15164604011EF82C9CE5FC4F9AE02.roa (hash: Gw0jFmA84rZ18sx/7QrnbJxTgZTCnUYn+soLzQH1wKk=)
                          3: B527A9C8604111EF97252962C4F9AE02.roa (hash: zljNGxAqLeUku4CTzDmhSDwisDsF8PGy5rmaV56Sx6w=)
                          4: 9FB99556604111EFB4652062C4F9AE02.roa (hash: k4xjdnoEdJ4ZINBwfRdnO6KbApSD649BXEVODGAn848=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.crl
                          rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 05:07:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 435 (0x1b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155001, serialNumber=565C8EC4E83447ECFFA69E1DEE1637C15F45A3FE
        Validity
            Not Before: Oct  3 05:07:09 2026 GMT
            Not After : Oct 10 05:07:09 2026 GMT
        Subject: CN=6ac08d7d-e877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:cd:4f:89:ba:cd:cd:82:d0:8f:be:c6:a9:19:
                    30:e4:52:b3:d1:d2:44:b7:ed:d1:16:13:3c:cc:0a:
                    bc:d7:68:d0:bf:70:bf:82:e6:5e:fb:cb:28:93:d8:
                    5d:1a:ec:7c:eb:51:f6:3a:20:20:d3:ff:88:c2:64:
                    2c:fd:c4:6a:fd:af:9a:59:74:3b:80:83:42:d1:d9:
                    f9:90:72:60:9a:54:b4:3c:34:d4:ea:8f:a9:59:29:
                    f9:d7:f2:be:f4:d2:85:a8:bf:a2:cb:d9:26:58:b2:
                    52:98:66:f5:82:8c:a3:87:c2:5f:7d:d4:c4:20:6a:
                    20:6c:61:c5:ed:03:48:11:5c:45:88:f6:b9:b0:be:
                    9d:c3:ab:05:00:a1:d1:f5:e9:e7:97:52:73:b2:1a:
                    ac:52:4a:b3:d3:da:a9:a1:4b:b3:4b:d0:0a:7d:22:
                    6f:6e:ae:e4:12:63:76:7b:69:55:8f:69:7c:40:fb:
                    fd:8a:06:e2:68:83:4c:4c:f2:dd:81:88:2e:9e:ac:
                    07:ad:f5:cf:cf:f8:76:ec:a0:47:86:78:ef:bf:0d:
                    52:cc:46:d2:33:b7:1f:33:1b:66:18:17:08:1f:88:
                    32:0a:4f:5a:48:c8:0a:f5:44:d1:3b:db:9f:44:c8:
                    a2:6a:bf:fd:8a:e9:fa:74:d0:d4:27:23:20:a0:ec:
                    b2:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:CE:FD:F9:40:05:31:7C:9D:31:A9:4F:20:A7:E2:55:AD:65:27:2F
            X509v3 Authority Key Identifier:
                keyid:56:5C:8E:C4:E8:34:47:EC:FF:A6:9E:1D:EE:16:37:C1:5F:45:A3:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:bf:d3:62:29:ce:98:bd:2f:7c:85:d9:94:24:d3:89:bd:eb:
         b4:a7:e7:47:08:8d:87:b0:37:65:5b:cd:8b:09:ee:07:58:d0:
         fa:9b:a8:97:1b:55:6b:e5:48:3f:af:42:a9:16:ce:df:c7:40:
         16:d8:91:5b:01:35:4d:3f:9a:92:e0:8f:29:48:a6:ad:27:87:
         85:60:70:4e:8d:04:f2:7e:43:e2:2b:57:42:ac:7e:f4:a1:38:
         21:74:2a:ab:5f:ff:0c:6e:b5:01:f0:04:c9:39:6f:69:20:91:
         91:cc:e0:8a:da:c0:8d:5c:39:09:da:7d:63:7f:da:18:fe:42:
         2f:49:47:8d:18:f1:e9:dc:33:fc:76:b9:c3:8c:7a:b7:fe:80:
         7f:c2:f3:5c:e6:b0:cf:d7:e4:a3:d3:74:46:6f:7c:c3:b2:89:
         ae:54:40:51:7f:29:2d:71:82:dd:cb:23:b1:a0:9c:40:58:55:
         56:66:e3:bd:0d:d7:c9:9f:54:0c:84:ec:17:20:04:9c:87:5a:
         3a:b7:09:11:66:27:c4:57:2e:9a:30:10:9a:d5:59:43:84:99:
         6a:af:28:0b:70:65:e6:0a:ce:d9:00:88:11:d4:dc:a0:ea:c9:
         f1:79:7a:f1:1e:be:a8:f6:9e:63:24:6c:b9:22:7d:90:c9:31:
         3e:15:43:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 17:41:38 2026 by rpki-client