Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.mft
File:                     VR9YpoyP5pILLvCsbpCi0_NYinY.mft (raw, json)
Hash identifier:          ieZEArUYW5eMXJckHvb2nofhnLsmElby0FBdBB7lq6w=
Subject key identifier:   92:13:8D:8A:D1:61:B6:51:63:69:9E:94:8E:E8:3D:01:B0:6B:42:E8
Authority key identifier: 55:1F:58:A6:8C:8F:E6:92:0B:2E:F0:AC:6E:90:A2:D3:F3:58:8A:76
Certificate issuer:       /CN=A9160856/serialNumber=551F58A68C8FE6920B2EF0AC6E90A2D3F3588A76
Certificate serial:       1154
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9YpoyP5pILLvCsbpCi0_NYinY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.mft
Manifest number:          1127
Signing time:             Wed 14 Oct 2026 17:22:58 +0000
Manifest this update:     Wed 14 Oct 2026 17:22:57 +0000
Manifest next update:     Wed 21 Oct 2026 17:22:57 +0000
Files and hashes:         1: VR9YpoyP5pILLvCsbpCi0_NYinY.crl (hash: WMT+F0uJ1iASPv7b6iayWSBNlBgHcfoBGUKIB719Fj4=)
                          2: E973A832656511EC85A7CA2CC4F9AE02.roa (hash: eWBcS/1bd0kbw5vsTBb9et502j0JKcQupVJEQdes+5c=)
                          3: 5318EFAC6BAE11EBA5B87E56C4F9AE02.roa (hash: fc5cYxwPB94MYxn4fZWTQz7urayb1Zdx7KGoj9sjVdY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.crl
                          rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9YpoyP5pILLvCsbpCi0_NYinY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Oct 2026 17:22:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4436 (0x1154)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160856, serialNumber=551F58A68C8FE6920B2EF0AC6E90A2D3F3588A76
        Validity
            Not Before: Oct 14 17:22:57 2026 GMT
            Not After : Oct 21 17:22:57 2026 GMT
        Subject: CN=6acfba71-7af1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e7:e6:72:7b:79:44:35:0c:35:be:44:86:83:
                    13:6a:a0:bb:f2:36:2f:be:39:13:13:33:e7:57:84:
                    73:2d:9f:47:0a:6a:1e:ae:a7:53:fa:64:d8:89:51:
                    41:9b:b9:cb:43:c7:57:29:2d:69:a7:61:f0:59:23:
                    6a:96:47:c0:36:8d:eb:6e:45:56:62:79:31:47:1b:
                    8c:6e:6a:f9:f0:0f:e2:14:25:6e:92:81:1b:2c:4f:
                    6d:ad:2f:07:f3:12:64:45:63:1d:5f:f5:3a:a4:15:
                    5c:05:80:38:9a:7e:e0:82:cf:93:f2:64:24:27:cd:
                    be:51:fc:3f:08:9c:5a:eb:c0:25:3a:cd:b3:bb:63:
                    0c:8e:0e:31:f0:4c:19:5e:52:3c:a6:c0:c2:36:65:
                    e3:ed:39:94:68:c7:ee:98:2a:93:04:09:8e:71:3c:
                    2d:2b:f2:c1:26:15:5f:1f:58:1c:7d:bf:f1:77:d2:
                    cc:32:9d:d0:bb:2e:73:56:05:7a:be:69:10:f5:fb:
                    b1:2b:6b:bb:ed:0a:ee:39:27:da:7e:2a:5c:9b:30:
                    91:74:25:bc:e2:0e:62:73:9a:39:76:b0:d9:db:66:
                    d0:fc:80:be:4d:b7:92:0b:5d:bb:11:0f:ef:4d:c1:
                    24:f8:63:1a:c0:5f:bd:da:5e:ea:aa:ea:8c:0f:21:
                    32:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:13:8D:8A:D1:61:B6:51:63:69:9E:94:8E:E8:3D:01:B0:6B:42:E8
            X509v3 Authority Key Identifier:
                keyid:55:1F:58:A6:8C:8F:E6:92:0B:2E:F0:AC:6E:90:A2:D3:F3:58:8A:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9YpoyP5pILLvCsbpCi0_NYinY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:3c:23:26:1f:ec:73:2b:23:1e:2e:e6:ca:90:29:15:fd:4f:
         01:d5:34:5c:27:70:70:ac:4d:25:d2:11:a0:e8:42:b9:8e:06:
         f6:92:03:d2:7e:68:f3:f2:6c:ad:cf:3c:e3:20:91:34:1c:6a:
         f2:9a:02:34:6f:bd:5f:65:0e:f0:a8:a7:d8:0f:c0:b6:4c:44:
         95:09:8e:7a:96:c3:b4:61:b9:47:46:b5:53:58:e8:6c:b5:a4:
         15:0b:59:34:99:33:68:0c:fb:37:75:a4:45:85:10:88:07:6a:
         61:8c:a9:c4:ed:c1:df:04:4b:38:06:7e:3d:b4:3a:9a:43:a0:
         e7:ee:a9:ff:7a:b5:4e:af:6d:3e:96:fe:30:8b:2c:3e:0c:b5:
         48:84:77:f2:cd:ca:30:fe:08:12:9b:66:0c:24:b3:20:2d:9a:
         3e:a7:bb:40:85:f9:62:17:a1:fa:5f:49:db:70:94:58:be:ff:
         44:a6:d5:06:54:f0:19:0b:7e:c6:2e:d7:3d:68:e9:f1:6e:38:
         5c:5f:55:86:e7:5b:34:16:65:c8:3a:c3:be:f3:42:10:88:09:
         b5:74:07:c4:a9:69:b6:d1:d8:2b:d6:44:1e:72:12:21:57:76:
         7d:dd:71:e1:e2:67:5a:76:15:ee:fe:e0:a0:9e:10:45:64:e7:
         a7:47:77:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:34:57 2026 by rpki-client