Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft
File:                     vdXpp28axMjlF5fs6Z49zuzudJM.mft (raw, json)
Hash identifier:          DAqzUlJ6aaMDi2pQ2l4a017vrPlb/9qLhiArDYtnhcg=
Subject key identifier:   C5:26:BC:E2:D1:76:DF:3B:02:3B:9B:B2:72:A6:B3:AE:A3:45:9E:5A
Authority key identifier: BD:D5:E9:A7:6F:1A:C4:C8:E5:17:97:EC:E9:9E:3D:CE:EC:EE:74:93
Certificate issuer:       /CN=A9186E8A/serialNumber=BDD5E9A76F1AC4C8E51797ECE99E3DCEECEE7493
Certificate serial:       08E5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft
Manifest number:          0893
Signing time:             Thu 24 Sep 2026 21:00:27 +0000
Manifest this update:     Thu 24 Sep 2026 21:00:26 +0000
Manifest next update:     Thu 01 Oct 2026 21:00:26 +0000
Files and hashes:         1: vdXpp28axMjlF5fs6Z49zuzudJM.crl (hash: bqB2ftmD+1h+wUY1+sTowWwwx2E02swD85E5lMiJo30=)
                          2: B95187FC2FB811EBBF9A864BC4F9AE02.roa (hash: dNqNutT/nTGY7soYWesTr9kDIRasDZG/jPBBAFjkNwM=)
                          3: DF70A63C6BF111F0A9181236C4F9AE02.roa (hash: 9NjZ97yfcAcC59kufHt/CpdvnTx281jOzn4vAO45hOo=)
                          4: 9A2EC0AA6BF011F0A7327D86C4F9AE02.roa (hash: VUsT3WhLr2UUwr4UuxggYtOUr91kn2k/gbUtrN14jIM=)
                          5: 3DB1BB00867211F1A49B353F5EA30FBC.roa (hash: ciyJTYbsJu4EqjJPQTwPgA9seL8CchhfPXFNoQk7kF0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.crl
                          rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 21:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2277 (0x8e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186E8A, serialNumber=BDD5E9A76F1AC4C8E51797ECE99E3DCEECEE7493
        Validity
            Not Before: Sep 24 21:00:26 2026 GMT
            Not After : Oct  1 21:00:26 2026 GMT
        Subject: CN=6ab58f6b-d15c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:86:3c:d4:b7:98:7d:79:97:4f:ff:99:73:89:
                    18:a9:a3:19:53:82:b6:a4:a4:20:7c:73:8d:de:74:
                    bd:cf:70:16:39:14:a4:03:37:2b:6a:c3:3a:d5:12:
                    7a:9d:c8:00:ab:74:db:a8:12:be:c3:de:34:1c:95:
                    03:7f:a4:58:4a:44:cb:36:ca:14:f1:7f:fe:fd:28:
                    bd:31:78:3a:0a:e7:7e:27:d8:a5:56:08:74:64:2b:
                    f4:a7:20:50:e9:cd:c0:dc:c7:d3:74:6f:e7:47:98:
                    b3:b6:1c:6b:56:df:58:ad:80:c9:d6:4c:eb:08:00:
                    4e:13:71:b0:a7:02:13:26:25:ef:79:f7:8d:a0:f7:
                    3e:e1:09:ae:9b:d7:ac:73:3f:97:e3:ae:52:b8:e8:
                    1c:c0:4d:04:54:6f:04:83:bb:dd:d7:73:f5:5b:ee:
                    28:5c:6e:fc:72:ee:f6:08:3c:54:61:fc:df:5d:b8:
                    4c:7e:45:17:14:d0:1d:64:1a:96:94:04:f7:e9:d1:
                    04:49:8f:27:ac:fe:45:44:65:05:68:dd:9a:6f:70:
                    86:59:a1:f0:16:21:fa:6c:96:54:01:9a:6b:d9:f6:
                    7a:8d:2c:40:eb:c3:48:03:30:d9:bf:04:95:04:0d:
                    f2:14:22:d6:59:e0:8a:82:78:44:de:71:b2:7e:50:
                    d0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:26:BC:E2:D1:76:DF:3B:02:3B:9B:B2:72:A6:B3:AE:A3:45:9E:5A
            X509v3 Authority Key Identifier:
                keyid:BD:D5:E9:A7:6F:1A:C4:C8:E5:17:97:EC:E9:9E:3D:CE:EC:EE:74:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:74:18:e9:a8:2e:ac:cd:07:55:1b:df:da:f1:60:a7:87:c0:
         f5:a0:ac:4e:05:d3:6b:9d:1a:ad:0d:8b:6c:b5:15:bb:ea:3a:
         4d:50:25:00:52:0f:38:14:a0:18:7e:8c:11:82:61:73:31:b4:
         44:5f:9d:93:d9:38:45:6c:5f:29:10:7a:75:cf:5d:54:b7:e9:
         e2:53:f0:cb:b5:b9:2c:e1:48:50:05:e2:30:73:16:75:3f:89:
         01:58:38:24:57:ea:86:ac:c4:29:98:ea:b9:13:c4:3b:55:d8:
         dc:8e:30:cb:a6:4f:bc:f2:73:50:9b:d8:8d:cb:98:47:ba:aa:
         2d:56:2c:b0:a7:18:51:79:2f:ff:de:6c:8f:ee:f0:f6:c7:31:
         a2:cb:5d:1d:37:02:b0:73:48:2e:9d:f5:08:9e:9c:7e:77:95:
         d3:d1:8b:69:99:7c:3e:ed:c1:0f:b6:46:42:50:76:e3:13:a9:
         f3:46:1d:f8:f2:fe:7f:13:47:12:25:ff:10:18:e7:c4:ee:30:
         61:fd:b0:90:42:d9:3d:0f:46:f5:31:12:82:77:0c:a1:d7:d5:
         1c:6e:64:01:3b:50:84:59:17:ca:a0:11:64:4f:42:7a:e9:2b:
         93:14:3b:48:40:12:ec:6a:ac:a6:47:fe:c9:da:73:b1:8b:e8:
         93:fc:88:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:38:05 2026 by rpki-client