Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.mft
File:                     vTfx1AdHvmxfXGujMH32Vgq2gaM.mft (raw, json)
Hash identifier:          /S/tTkY8vDrX4FJbIDW154H3bQC3ByOu2yZJQw9d+Q4=
Subject key identifier:   8C:2F:3E:C7:86:2C:3D:D9:D6:55:30:11:EA:07:28:0F:01:E6:24:93
Authority key identifier: BD:37:F1:D4:07:47:BE:6C:5F:5C:6B:A3:30:7D:F6:56:0A:B6:81:A3
Certificate issuer:       /CN=A91817E6/serialNumber=BD37F1D40747BE6C5F5C6BA3307DF6560AB681A3
Certificate serial:       015D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vTfx1AdHvmxfXGujMH32Vgq2gaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.mft
Manifest number:          0D31
Signing time:             Thu 24 Sep 2026 19:52:04 +0000
Manifest this update:     Thu 24 Sep 2026 19:52:03 +0000
Manifest next update:     Thu 01 Oct 2026 19:52:03 +0000
Files and hashes:         1: vTfx1AdHvmxfXGujMH32Vgq2gaM.crl (hash: vq/bn5nDpm4TB9asPvoiqYz+oCZKrq9p0yEu3f4QU4Q=)
                          2: 28C454FCB41211EF8D2EC946C4F9AE02.roa (hash: OVcfnxD6CMvVurhACrOK00amhdxUOIGPBugGO8sY/mg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.crl
                          rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vTfx1AdHvmxfXGujMH32Vgq2gaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 19:52:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 349 (0x15d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91817E6, serialNumber=BD37F1D40747BE6C5F5C6BA3307DF6560AB681A3
        Validity
            Not Before: Sep 24 19:52:03 2026 GMT
            Not After : Oct  1 19:52:03 2026 GMT
        Subject: CN=6ab57f64-d511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ca:4a:bf:7e:67:91:87:0c:b5:1f:92:53:9f:
                    b4:89:84:aa:3d:c0:01:70:2a:9e:e1:40:f0:eb:14:
                    82:f2:41:1f:1d:ae:31:8d:57:22:4b:b1:b5:97:bb:
                    0c:ac:af:59:5e:57:8f:c2:87:97:6b:fb:b6:eb:ed:
                    7f:37:fd:88:ee:d3:f0:c4:a4:68:65:cc:d7:b6:cd:
                    80:76:f8:69:ac:d4:ab:9e:2d:31:41:63:a6:af:9f:
                    da:de:06:37:c6:d0:9d:70:7b:d9:17:55:34:dc:16:
                    84:85:85:a2:9f:e5:dd:3f:19:f8:d0:40:44:e0:ad:
                    cf:e9:b0:f1:07:d3:7f:de:c6:9e:31:4e:73:3f:39:
                    a9:40:66:96:c7:bb:36:c9:f1:74:6d:41:49:80:8a:
                    77:64:bc:ef:40:28:d9:4d:84:2a:26:ec:4d:c5:21:
                    e4:ff:34:38:b9:e9:26:98:bd:6a:3b:1f:1a:a1:22:
                    7a:92:8f:1b:5d:a1:9e:ec:b4:80:99:ae:9b:07:2d:
                    fe:95:00:68:76:3b:89:25:d4:e6:22:fc:e0:70:ee:
                    60:15:a9:18:0f:70:b1:64:10:0e:67:f2:38:fc:66:
                    65:60:24:15:86:77:85:99:c0:4e:36:0a:1d:19:ff:
                    93:57:0d:7b:f1:0e:83:c6:58:df:f7:ec:16:37:bf:
                    2d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:2F:3E:C7:86:2C:3D:D9:D6:55:30:11:EA:07:28:0F:01:E6:24:93
            X509v3 Authority Key Identifier:
                keyid:BD:37:F1:D4:07:47:BE:6C:5F:5C:6B:A3:30:7D:F6:56:0A:B6:81:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vTfx1AdHvmxfXGujMH32Vgq2gaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:02:bd:7d:aa:60:f7:83:cd:7a:db:89:11:11:ce:90:c6:cf:
         fa:9e:2e:14:6d:06:67:41:13:b0:f1:65:be:27:1e:79:d3:ae:
         d3:1c:78:8a:f8:e5:67:12:8e:9e:e2:df:6c:bd:5a:0d:0d:5a:
         b1:b7:0c:1b:e9:54:9b:3c:de:8b:a6:40:a6:70:f3:37:e4:ab:
         f8:5c:e7:75:f7:cd:0b:c8:c0:db:2d:36:3f:7b:70:d1:e7:fe:
         65:a3:df:d2:87:52:7a:db:7c:fa:6b:fb:76:aa:8c:4e:53:13:
         c4:22:f7:8a:5f:8c:29:e8:67:68:2b:9a:50:ea:ef:5c:8d:41:
         2f:92:91:8f:0b:df:f7:61:b4:fd:ae:34:22:4a:98:c4:40:c0:
         60:dd:89:94:e2:72:d6:ac:bf:a6:28:22:dd:d5:d6:69:aa:e6:
         36:e6:ce:6f:21:51:d2:1a:f2:d2:b3:dc:5f:a7:6b:6c:86:fe:
         39:b9:73:0c:1b:eb:e3:53:ec:11:00:10:a7:88:f1:96:27:62:
         7f:46:31:fe:44:dc:c4:f3:6f:31:5c:b6:fe:fc:73:37:b1:53:
         35:18:f1:99:b5:48:48:eb:d7:c6:ac:03:70:3f:88:7e:79:55:
         1e:64:a1:7d:c1:c3:6b:04:3b:bb:9f:46:3f:8a:b7:6f:4e:b0:
         01:b6:7e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:13:08 2026 by rpki-client