Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft
File:                     vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft (raw, json)
Hash identifier:          tj2LUkGlkZNKia1VnqObIjNs8XN4uPaf7B5xbXifQxc=
Subject key identifier:   20:E9:E3:15:A4:CA:94:86:B7:CA:96:BA:2D:EC:26:21:BB:01:EC:C1
Authority key identifier: BD:63:E0:DD:CB:5C:D4:1B:34:50:1D:F2:E8:1A:2A:72:CE:E3:6E:F2
Certificate issuer:       /CN=A917B503/serialNumber=BD63E0DDCB5CD41B34501DF2E81A2A72CEE36EF2
Certificate serial:       01AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft
Manifest number:          01A3
Signing time:             Sun 27 Sep 2026 04:40:19 +0000
Manifest this update:     Sun 27 Sep 2026 04:40:18 +0000
Manifest next update:     Sun 04 Oct 2026 04:40:18 +0000
Files and hashes:         1: vWPg3ctc1Bs0UB3y6Boqcs7jbvI.crl (hash: lry4JHvwb+LzQ0y6Og7wueMgAC8nBoN68O8L2oTqFTA=)
                          2: FF7048A08BB111EF8981B871C4F9AE02.roa (hash: Pf4vtsycRl7uQ7TRSuhW3ZPGeuFhV8pttTvvgiVqOIo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.crl
                          rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 04:40:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 426 (0x1aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B503, serialNumber=BD63E0DDCB5CD41B34501DF2E81A2A72CEE36EF2
        Validity
            Not Before: Sep 27 04:40:18 2026 GMT
            Not After : Oct  4 04:40:18 2026 GMT
        Subject: CN=6ab89e33-5fab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ca:f8:aa:13:06:f6:81:7f:70:90:26:0f:cb:
                    62:34:4d:c7:4e:da:8b:c9:e2:a6:1f:fc:a0:78:13:
                    bc:39:ee:9a:56:c4:e7:53:2f:0c:e0:18:ee:17:2f:
                    b5:da:d2:b3:0c:b8:f5:41:be:44:ff:c0:e6:31:84:
                    1b:35:62:56:5b:63:49:4c:73:64:5e:db:c8:ca:ec:
                    9b:d5:41:a8:5a:18:6c:d1:07:89:13:78:5e:9c:40:
                    fa:80:72:3a:47:86:c4:eb:0e:c0:b7:5e:e0:12:71:
                    0c:87:27:f2:9d:bd:30:72:00:c3:df:17:47:97:8e:
                    5e:ad:30:0f:2f:f7:aa:53:77:48:6a:7f:1d:35:0c:
                    3e:85:d1:aa:c9:a1:30:01:66:83:4a:3e:c1:f7:38:
                    7b:f5:e5:58:9f:08:85:28:13:6b:df:02:f6:a3:13:
                    e3:de:7d:77:5f:9b:09:22:b5:4c:97:dc:b4:4e:b1:
                    74:46:09:4c:87:d6:4c:23:c8:37:83:9b:c5:5b:7e:
                    a2:24:47:ba:c5:9f:4a:f3:c9:f2:18:f1:9f:1b:89:
                    f4:19:95:23:fd:a5:48:29:1e:01:a3:58:6e:b3:b8:
                    d4:82:79:d1:7d:5a:9c:86:87:8b:ad:11:9f:d3:99:
                    e8:e6:79:52:80:94:87:a0:b4:31:4c:88:c4:93:06:
                    da:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:E9:E3:15:A4:CA:94:86:B7:CA:96:BA:2D:EC:26:21:BB:01:EC:C1
            X509v3 Authority Key Identifier:
                keyid:BD:63:E0:DD:CB:5C:D4:1B:34:50:1D:F2:E8:1A:2A:72:CE:E3:6E:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:03:f2:39:77:4d:59:ee:dc:49:b2:3a:44:11:da:f4:cc:1a:
         6f:e6:65:ca:6a:ad:24:5a:79:bd:29:83:dc:47:2f:ac:88:82:
         20:87:04:45:ae:8c:19:b8:f7:8f:07:5f:80:6b:ca:7f:65:57:
         22:f9:3c:1d:35:de:e1:d5:51:d3:ab:a3:ee:f4:4e:5d:08:8e:
         c1:07:db:0a:04:af:a7:26:f8:36:37:d6:c0:f4:46:92:72:eb:
         72:c2:a3:ab:f1:37:56:1e:2a:fa:0b:08:36:26:79:18:96:3c:
         ff:80:c9:34:7d:f8:70:e6:70:8a:9f:5c:22:63:65:08:35:fd:
         4f:c4:48:14:45:f9:f0:be:e0:1b:ca:cb:f1:86:3d:9b:01:5f:
         75:3d:92:42:a1:75:f2:33:e5:01:42:65:ac:11:83:d6:8a:f0:
         e9:59:9e:04:46:54:5d:7a:11:23:61:85:e3:a6:a4:ba:2d:4c:
         d8:88:82:f3:3c:90:13:f7:06:30:a3:bb:1e:68:03:20:de:cf:
         49:ed:47:00:e7:d1:c3:d5:ed:ee:38:92:fe:cc:75:f5:60:0d:
         89:1a:80:1a:0f:a0:2a:cd:6c:c0:2f:ee:9e:8c:b1:b2:60:f4:
         b1:01:83:d5:91:07:15:ed:96:14:ec:3e:13:3e:25:bc:19:f1:
         28:38:a6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:13:49 2026 by rpki-client