Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9178EF3/9281034A4AAD11EB90637E57C4F9AE02/vjP21UgZuYkyL1Kj7LXzP98OFZY.mft
File:                     vjP21UgZuYkyL1Kj7LXzP98OFZY.mft (raw, json)
Hash identifier:          o232s3ZWlGg0xnWNzkPnfgTS+hVSzI3FLg8JZW6xJ0g=
Subject key identifier:   27:F5:36:08:CD:9D:57:16:97:42:DD:59:5A:C7:EC:74:29:E4:1A:6E
Authority key identifier: BE:33:F6:D5:48:19:B9:89:32:2F:52:A3:EC:B5:F3:3F:DF:0E:15:96
Certificate issuer:       /CN=A9178EF3/serialNumber=BE33F6D54819B989322F52A3ECB5F33FDF0E1596
Certificate serial:       07F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjP21UgZuYkyL1Kj7LXzP98OFZY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178EF3/9281034A4AAD11EB90637E57C4F9AE02/vjP21UgZuYkyL1Kj7LXzP98OFZY.mft
Manifest number:          07EF
Signing time:             Tue 22 Sep 2026 21:04:05 +0000
Manifest this update:     Tue 22 Sep 2026 21:04:04 +0000
Manifest next update:     Tue 29 Sep 2026 21:04:04 +0000
Files and hashes:         1: vjP21UgZuYkyL1Kj7LXzP98OFZY.crl (hash: jA7vzmpy1z7cdkBm6T4rAC9Q+OPxFnF90aGsOYB2dNk=)
                          2: 4BC1EE9A4AAF11EBBF031959C4F9AE02.roa (hash: G/qbh1sBBKI/Ew9UMPT/6f7IimRoEddnQQQmuUaDW9A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178EF3/9281034A4AAD11EB90637E57C4F9AE02/vjP21UgZuYkyL1Kj7LXzP98OFZY.crl
                          rsync://rpki.apnic.net/member_repository/A9178EF3/9281034A4AAD11EB90637E57C4F9AE02/vjP21UgZuYkyL1Kj7LXzP98OFZY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjP21UgZuYkyL1Kj7LXzP98OFZY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 21:04:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2041 (0x7f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178EF3, serialNumber=BE33F6D54819B989322F52A3ECB5F33FDF0E1596
        Validity
            Not Before: Sep 22 21:04:04 2026 GMT
            Not After : Sep 29 21:04:04 2026 GMT
        Subject: CN=6ab2ed44-b179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:67:e0:a3:af:50:51:18:41:6e:25:c6:99:de:
                    52:b6:2a:a1:88:76:b2:ab:ba:a1:7c:55:8a:27:9b:
                    7f:f3:70:4f:d7:03:5d:38:f7:30:52:be:d8:b0:14:
                    9f:fe:ff:54:6d:78:61:f9:c0:67:d8:da:f1:28:19:
                    43:77:0f:5e:dc:6e:2c:19:71:7a:6d:35:5a:3c:0f:
                    d5:6d:80:b2:2e:36:ee:a9:1f:16:92:68:72:81:a4:
                    d4:98:37:a2:22:91:6b:aa:f2:8f:c2:60:60:3e:24:
                    f9:ce:db:44:4c:cc:9b:b7:35:c5:d6:85:da:93:aa:
                    2e:2b:01:6c:a5:ed:a7:df:1a:a0:b5:1b:60:7a:7f:
                    b6:c3:93:8b:02:1e:fd:61:df:48:cc:33:4f:a0:91:
                    c9:76:ef:98:34:7d:4a:e8:20:05:83:5a:4f:61:2b:
                    69:97:a7:c9:ae:61:fa:9a:37:7f:e3:ac:4e:ea:62:
                    eb:1b:3b:35:62:de:a3:01:b4:bf:c4:a7:fb:d7:f1:
                    94:12:e1:5e:15:24:ac:c4:c7:69:a3:fa:ca:a9:bc:
                    03:bd:c1:74:eb:f9:10:ae:11:75:54:8b:be:9a:9c:
                    0d:cd:f7:38:4d:15:79:66:76:9f:e8:d9:8d:bf:ea:
                    20:1b:fd:b9:cf:89:70:bc:bc:aa:39:bc:28:fb:42:
                    75:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:F5:36:08:CD:9D:57:16:97:42:DD:59:5A:C7:EC:74:29:E4:1A:6E
            X509v3 Authority Key Identifier:
                keyid:BE:33:F6:D5:48:19:B9:89:32:2F:52:A3:EC:B5:F3:3F:DF:0E:15:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178EF3/9281034A4AAD11EB90637E57C4F9AE02/vjP21UgZuYkyL1Kj7LXzP98OFZY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjP21UgZuYkyL1Kj7LXzP98OFZY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EF3/9281034A4AAD11EB90637E57C4F9AE02/vjP21UgZuYkyL1Kj7LXzP98OFZY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:73:70:4d:6c:6e:1f:ba:29:80:5b:27:c7:63:89:b4:96:65:
         95:76:7e:dc:e1:c1:f0:a3:44:6d:8a:bc:21:4d:f4:60:4e:8b:
         7c:28:c5:97:f6:18:c1:88:14:3c:c3:d1:c2:4c:e5:88:90:0a:
         7b:36:71:2e:5e:f7:bc:45:58:98:4f:da:69:a1:88:18:9a:46:
         bb:c3:9a:49:9c:d3:60:0a:64:70:97:da:dd:c4:68:51:b4:b3:
         83:f8:76:4b:8b:2d:2f:0d:48:d4:f3:27:d3:e8:be:78:4f:bd:
         00:7f:f0:39:67:8b:70:39:40:7f:3d:e1:27:36:f9:67:52:77:
         e4:f5:3b:57:17:5f:e5:89:78:6c:ea:5f:c9:83:72:b8:31:18:
         7b:28:99:db:3b:47:f0:b8:83:30:f9:3a:f2:db:66:e3:63:db:
         b6:1d:b3:69:85:47:e0:4a:d2:7c:63:93:2b:61:40:27:c4:db:
         21:11:5e:23:81:d2:4d:8b:1b:87:d4:10:88:96:51:ea:78:2c:
         0b:6b:c3:28:a4:a1:7a:d8:d4:1a:16:fd:ea:f3:79:77:2a:12:
         f7:9a:b3:b7:fa:63:16:7d:69:0b:6b:85:96:b4:d4:e8:a5:c1:
         54:03:78:76:34:b1:9b:da:d8:13:67:85:7a:1e:04:df:99:7a:
         90:54:d4:79
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB/kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzhFRjMxMTAvBgNVBAUTKEJFMzNGNkQ1NDgxOUI5ODkzMjJGNTJBM0VDQjVGMzNG
REYwRTE1OTYwHhcNMjYwOTIyMjEwNDA0WhcNMjYwOTI5MjEwNDA0WjAYMRYwFAYD
VQQDEw02YWIyZWQ0NC1iMTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3mfgo69QURhBbiXGmd5StiqhiHayq7qhfFWKJ5t/83BP1wNdOPcwUr7YsBSf
/v9UbXhh+cBn2NrxKBlDdw9e3G4sGXF6bTVaPA/VbYCyLjbuqR8WkmhygaTUmDei
IpFrqvKPwmBgPiT5zttETMybtzXF1oXak6ouKwFspe2n3xqgtRtgen+2w5OLAh79
Yd9IzDNPoJHJdu+YNH1K6CAFg1pPYStpl6fJrmH6mjd/46xO6mLrGzs1Yt6jAbS/
xKf71/GUEuFeFSSsxMdpo/rKqbwDvcF06/kQrhF1VIu+mpwNzfc4TRV5Znaf6NmN
v+ogG/25z4lwvLyqObwo+0J1BwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCf1NgjN
nVcWl0LdWVrH7HQp5BpuMB8GA1UdIwQYMBaAFL4z9tVIGbmJMi9So+y18z/fDhWW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEVGMy85MjgxMDM0QTRB
QUQxMUVCOTA2MzdFNTdDNEY5QUUwMi92alAyMVVnWnVZa3lMMUtqN0xYelA5OE9G
WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZqUDIxVWdadVlreUwxS2o3TFh6UDk4T0ZaWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
OEVGMy85MjgxMDM0QTRBQUQxMUVCOTA2MzdFNTdDNEY5QUUwMi92alAyMVVnWnVZ
a3lMMUtqN0xYelA5OE9GWlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATHNwTWxuH7opgFsnx2OJtJZllXZ+3OHB8KNEbYq8IU30YE6LfCjFl/YYwYgU
PMPRwkzliJAKezZxLl73vEVYmE/aaaGIGJpGu8OaSZzTYApkcJfa3cRoUbSzg/h2
S4stLw1I1PMn0+i+eE+9AH/wOWeLcDlAfz3hJzb5Z1J35PU7Vxdf5Yl4bOpfyYNy
uDEYeyiZ2ztH8LiDMPk68ttm42Pbth2zaYVH4ErSfGOTK2FAJ8TbIRFeI4HSTYsb
h9QQiJZR6ngsC2vDKKShetjUGhb96vN5dyoS95qzt/pjFn1pC2uFlrTU6KXBVAN4
djSxm9rYE2eFeh4E35l6kFTUeQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 21:51:02 2026 by rpki-client