Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916537A/9F817BB6276A11F1A891B17FC2833773/VqcyG_yMPsLpkWD6MztPVMGClGo.mft
File:                     VqcyG_yMPsLpkWD6MztPVMGClGo.mft (raw, json)
Hash identifier:          R3s4SnEPhl8mrRxKqVnTCjFB+ypJy6uB9JM3DeMwWwM=
Subject key identifier:   D5:8A:EC:92:A5:9B:A2:73:76:9E:5B:E0:67:03:A0:B8:CE:21:10:AD
Authority key identifier: 56:A7:32:1B:FC:8C:3E:C2:E9:91:60:FA:33:3B:4F:54:C1:82:94:6A
Certificate issuer:       /CN=A916537A/serialNumber=56A7321BFC8C3EC2E99160FA333B4F54C182946A
Certificate serial:       65
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqcyG_yMPsLpkWD6MztPVMGClGo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916537A/9F817BB6276A11F1A891B17FC2833773/VqcyG_yMPsLpkWD6MztPVMGClGo.mft
Manifest number:          63
Signing time:             Fri 25 Sep 2026 08:14:26 +0000
Manifest this update:     Fri 25 Sep 2026 08:14:26 +0000
Manifest next update:     Fri 02 Oct 2026 08:14:26 +0000
Files and hashes:         1: VqcyG_yMPsLpkWD6MztPVMGClGo.crl (hash: YCfmaLEEb4/Ie+9LKLrrY17Imn0pl0cSL+cgkV6fmbQ=)
                          2: 955C204027D911F183CCD80FA7833773.roa (hash: c6JUDw7tq3Ict9tWMfIj9zis/6zIdlmfIPXyLf2HU9E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916537A/9F817BB6276A11F1A891B17FC2833773/VqcyG_yMPsLpkWD6MztPVMGClGo.crl
                          rsync://rpki.apnic.net/member_repository/A916537A/9F817BB6276A11F1A891B17FC2833773/VqcyG_yMPsLpkWD6MztPVMGClGo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqcyG_yMPsLpkWD6MztPVMGClGo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 08:14:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101 (0x65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916537A, serialNumber=56A7321BFC8C3EC2E99160FA333B4F54C182946A
        Validity
            Not Before: Sep 25 08:14:26 2026 GMT
            Not After : Oct  2 08:14:26 2026 GMT
        Subject: CN=6ab62d62-a1e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e1:75:05:09:66:ed:e2:36:1f:ee:4c:d4:f9:
                    45:b9:e2:07:17:44:db:31:ce:e1:a2:21:0e:25:83:
                    3d:97:4c:bf:fe:d1:f7:dc:1d:65:a1:b5:38:a5:d7:
                    ee:5f:90:d4:ae:17:79:b8:c0:5c:ba:df:81:5d:ac:
                    a9:14:1b:42:b4:7c:5b:cb:12:e9:1e:35:71:60:94:
                    af:60:ff:e3:4b:b7:6a:97:4a:52:f8:7b:5d:c3:f8:
                    3d:02:a1:f4:b5:87:2e:b1:2c:61:ea:82:d2:4c:d1:
                    b4:d4:a0:b4:e9:2b:23:b9:84:f7:6d:c4:e8:ba:34:
                    c1:5a:7b:17:de:15:aa:71:8b:f1:a0:6e:d2:80:c7:
                    1b:41:94:3d:46:20:e1:9e:6c:8a:f8:22:40:cd:77:
                    1a:df:2e:c8:ec:bb:6a:10:bd:0f:13:aa:41:f3:6a:
                    67:14:3e:48:35:d0:4a:20:71:23:a9:16:b1:3c:45:
                    32:82:75:4e:3a:cc:49:44:25:db:2e:c2:ab:52:84:
                    96:f3:dc:f7:aa:d4:6f:aa:53:e0:07:d6:14:3a:2a:
                    6e:ad:da:61:a9:0e:a7:4f:04:63:05:98:5a:7f:6c:
                    e8:67:d2:80:d8:27:b1:30:a5:0a:4d:fd:7b:55:d5:
                    92:07:00:83:89:ba:a5:e7:31:8a:56:b7:40:00:b3:
                    15:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:8A:EC:92:A5:9B:A2:73:76:9E:5B:E0:67:03:A0:B8:CE:21:10:AD
            X509v3 Authority Key Identifier:
                keyid:56:A7:32:1B:FC:8C:3E:C2:E9:91:60:FA:33:3B:4F:54:C1:82:94:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916537A/9F817BB6276A11F1A891B17FC2833773/VqcyG_yMPsLpkWD6MztPVMGClGo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqcyG_yMPsLpkWD6MztPVMGClGo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916537A/9F817BB6276A11F1A891B17FC2833773/VqcyG_yMPsLpkWD6MztPVMGClGo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:72:c7:72:b4:c0:62:fb:ea:bd:2b:d9:ed:69:5b:4d:96:88:
         fa:de:04:92:8b:d5:cb:8d:19:da:16:63:a8:fe:9b:03:1e:18:
         c7:ad:ba:9a:ff:2e:b8:c2:f5:7c:27:0a:99:dc:25:b1:3b:dd:
         c6:b3:5d:8c:e5:ec:39:db:12:4c:31:91:27:b7:c9:c4:c5:11:
         d4:83:12:af:46:a6:b4:1b:a3:a3:09:ba:e5:65:ec:19:54:ca:
         9f:87:ce:84:03:f5:3b:72:0a:51:db:54:d6:52:74:27:48:26:
         e2:b4:4f:5b:ad:64:8f:8d:11:99:fc:f1:ec:fe:c4:c0:ba:8b:
         1e:8d:68:ae:81:ab:5f:38:f0:eb:c9:07:68:b7:e9:96:ad:e1:
         61:7c:0a:3f:62:69:46:fa:fd:30:33:d4:b9:c6:6a:17:3d:0a:
         42:4d:22:83:e5:46:1b:37:d4:2b:5f:36:6a:fd:13:3c:b3:f0:
         78:f3:bb:5f:20:0a:64:fc:4a:21:6b:42:25:e4:c4:e7:bf:01:
         52:75:48:4d:d6:85:9a:89:ff:e2:83:f2:67:cf:a2:9e:ce:db:
         54:54:43:64:01:08:b5:8d:96:41:02:9d:a2:c9:e3:32:d0:48:
         c6:66:ce:1f:da:21:45:cd:3c:c5:6e:55:be:54:ac:8a:26:81:
         64:d2:d9:fc
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
NTM3QTExMC8GA1UEBRMoNTZBNzMyMUJGQzhDM0VDMkU5OTE2MEZBMzMzQjRGNTRD
MTgyOTQ2QTAeFw0yNjA5MjUwODE0MjZaFw0yNjEwMDIwODE0MjZaMBgxFjAUBgNV
BAMTDTZhYjYyZDYyLWExZTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDX4XUFCWbt4jYf7kzU+UW54gcXRNsxzuGiIQ4lgz2XTL/+0ffcHWWhtTil1+5f
kNSuF3m4wFy634FdrKkUG0K0fFvLEukeNXFglK9g/+NLt2qXSlL4e13D+D0CofS1
hy6xLGHqgtJM0bTUoLTpKyO5hPdtxOi6NMFaexfeFapxi/GgbtKAxxtBlD1GIOGe
bIr4IkDNdxrfLsjsu2oQvQ8TqkHzamcUPkg10EogcSOpFrE8RTKCdU46zElEJdsu
wqtShJbz3Peq1G+qU+AH1hQ6Km6t2mGpDqdPBGMFmFp/bOhn0oDYJ7EwpQpN/XtV
1ZIHAIOJuqXnMYpWt0AAsxVvAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU1YrskqWb
onN2nlvgZwOguM4hEK0wHwYDVR0jBBgwFoAUVqcyG/yMPsLpkWD6MztPVMGClGow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1MzdBLzlGODE3QkI2Mjc2
QTExRjFBODkxQjE3RkMyODMzNzczL1ZxY3lHX3lNUHNMcGtXRDZNenRQVk1HQ2xH
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvVnFjeUdfeU1Qc0xwa1dENk16dFBWTUdDbEdvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1
MzdBLzlGODE3QkI2Mjc2QTExRjFBODkxQjE3RkMyODMzNzczL1ZxY3lHX3lNUHNM
cGtXRDZNenRQVk1HQ2xHby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCIcsdytMBi++q9K9ntaVtNloj63gSSi9XLjRnaFmOo/psDHhjHrbqa/y64wvV8
JwqZ3CWxO93Gs12M5ew52xJMMZEnt8nExRHUgxKvRqa0G6OjCbrlZewZVMqfh86E
A/U7cgpR21TWUnQnSCbitE9brWSPjRGZ/PHs/sTAuosejWiugatfOPDryQdot+mW
reFhfAo/YmlG+v0wM9S5xmoXPQpCTSKD5UYbN9QrXzZq/RM8s/B487tfIApk/Eoh
a0Il5MTnvwFSdUhN1oWaif/ig/Jnz6KezttUVENkAQi1jZZBAp2iyeMy0EjGZs4f
2iFFzTzFblW+VKyKJoFk0tn8
-----END CERTIFICATE-----
Generated at Sat Sep 26 07:11:41 2026 by rpki-client