Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.mft
File:                     vsKCSG834xbxe1ILRVKHvDB_ieg.mft (raw, json)
Hash identifier:          6beM29E0mu3DzpgIYDPM2rGFPpAQza83AFDN7cYdl04=
Subject key identifier:   5F:22:8E:69:A0:BC:86:EC:8D:F5:3E:69:2C:A4:92:94:DE:CC:19:02
Authority key identifier: BE:C2:82:48:6F:37:E3:16:F1:7B:52:0B:45:52:87:BC:30:7F:89:E8
Certificate issuer:       /CN=A918A469/serialNumber=BEC282486F37E316F17B520B455287BC307F89E8
Certificate serial:       01D6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vsKCSG834xbxe1ILRVKHvDB_ieg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.mft
Manifest number:          01CC
Signing time:             Wed 23 Sep 2026 03:35:43 +0000
Manifest this update:     Wed 23 Sep 2026 03:35:43 +0000
Manifest next update:     Wed 30 Sep 2026 03:35:43 +0000
Files and hashes:         1: vsKCSG834xbxe1ILRVKHvDB_ieg.crl (hash: 8Bk0YP+p34mj+DO9VN1jzTn4y/UmxxqXciQuvr3eyNc=)
                          2: 71403B04F7E511EEBC67981CC4F9AE02.roa (hash: /m0o2RYXlVzJfDGAuvr1e/kZrSjtpAFdFgupCqbwiOo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.crl
                          rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vsKCSG834xbxe1ILRVKHvDB_ieg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 03:35:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 470 (0x1d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A469, serialNumber=BEC282486F37E316F17B520B455287BC307F89E8
        Validity
            Not Before: Sep 23 03:35:43 2026 GMT
            Not After : Sep 30 03:35:43 2026 GMT
        Subject: CN=6ab3490f-741b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:78:ab:62:82:91:f7:3b:83:22:bd:36:3c:b6:
                    ab:17:b3:71:81:f3:ec:0d:51:80:06:63:84:60:53:
                    da:d8:3d:77:81:ab:61:7a:7e:b7:1d:ea:f7:af:a5:
                    8f:4d:cc:18:f3:9b:00:f4:ae:83:45:d8:18:0a:85:
                    67:36:55:79:da:38:5e:ef:29:0c:4b:b4:be:0a:f8:
                    48:87:8c:f0:df:e6:de:24:f7:18:ef:14:be:97:e0:
                    6f:1b:64:53:15:5e:73:00:69:d6:0f:0a:c6:62:e6:
                    b2:fb:a9:58:74:87:6d:af:8c:eb:23:98:5b:c4:40:
                    ec:de:ef:92:3e:5f:4d:77:27:15:ba:a6:13:bb:28:
                    a0:17:87:0a:7c:6e:30:4d:f8:e3:dd:17:ee:e3:30:
                    71:20:a6:54:5b:07:dc:0c:60:36:bd:e1:91:99:ca:
                    53:27:97:94:f1:10:a2:cf:62:97:06:ff:f3:57:8b:
                    76:30:f5:3d:3a:84:16:ba:c2:7d:e8:f8:28:07:a9:
                    69:bb:dc:55:d7:5b:32:e1:3f:25:cd:57:ef:4b:dc:
                    49:8a:fc:1c:5b:2d:f6:76:61:b1:6f:8b:11:a6:c3:
                    f4:e9:a8:64:47:2c:ae:ae:b2:f0:12:60:44:20:66:
                    1c:1a:3b:98:8b:48:b6:58:50:54:f6:7b:5b:9a:88:
                    cc:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:22:8E:69:A0:BC:86:EC:8D:F5:3E:69:2C:A4:92:94:DE:CC:19:02
            X509v3 Authority Key Identifier:
                keyid:BE:C2:82:48:6F:37:E3:16:F1:7B:52:0B:45:52:87:BC:30:7F:89:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vsKCSG834xbxe1ILRVKHvDB_ieg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:5d:26:5f:39:c5:a8:8e:9f:c8:5b:16:38:90:cd:86:ff:52:
         44:7d:69:2d:08:bc:df:26:49:1e:e8:9d:b9:72:16:d6:e6:a2:
         ff:95:e3:9c:0c:ad:b6:c4:b0:f5:e7:c2:14:0c:8e:cc:fa:6d:
         af:2a:1c:a6:8f:8b:14:75:c1:1f:49:f0:e4:cf:cf:8a:85:64:
         89:d4:bc:91:9f:1f:d7:0f:1a:e2:31:32:3e:b1:43:49:cc:66:
         5d:1f:fc:3a:17:7e:9e:0a:8b:b7:56:78:59:0f:2f:05:4a:77:
         d3:02:bd:97:8e:98:7f:34:43:5d:47:27:0a:96:a7:07:c6:99:
         2a:9d:8f:dd:06:ae:9b:6d:3a:2a:b2:e7:52:ef:1e:e9:f7:ac:
         ca:95:e3:2e:00:b2:56:9d:32:1f:4b:b4:f1:ac:3f:17:35:94:
         e9:1f:3a:cf:6a:d8:5d:f2:cc:9f:52:5e:e5:f3:bd:29:e6:f4:
         64:4d:55:85:ec:74:5b:b3:a1:9b:b3:a0:63:8d:a2:48:26:b4:
         25:f6:de:fb:3f:3c:fd:7f:b3:dd:45:1d:88:2b:82:51:aa:94:
         92:72:e7:0f:c3:96:65:9a:94:4e:aa:17:8f:9f:54:91:97:ba:
         80:7e:46:f6:39:10:d6:92:d4:b2:6e:84:97:d6:f1:23:2c:91:
         93:ed:db:ef
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEE0NjkxMTAvBgNVBAUTKEJFQzI4MjQ4NkYzN0UzMTZGMTdCNTIwQjQ1NTI4N0JD
MzA3Rjg5RTgwHhcNMjYwOTIzMDMzNTQzWhcNMjYwOTMwMDMzNTQzWjAYMRYwFAYD
VQQDEw02YWIzNDkwZi03NDFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvXirYoKR9zuDIr02PLarF7NxgfPsDVGABmOEYFPa2D13gathen63Her3r6WP
TcwY85sA9K6DRdgYCoVnNlV52jhe7ykMS7S+CvhIh4zw3+beJPcY7xS+l+BvG2RT
FV5zAGnWDwrGYuay+6lYdIdtr4zrI5hbxEDs3u+SPl9NdycVuqYTuyigF4cKfG4w
Tfjj3Rfu4zBxIKZUWwfcDGA2veGRmcpTJ5eU8RCiz2KXBv/zV4t2MPU9OoQWusJ9
6PgoB6lpu9xV11sy4T8lzVfvS9xJivwcWy32dmGxb4sRpsP06ahkRyyurrLwEmBE
IGYcGjuYi0i2WFBU9ntbmojM8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF8ijmmg
vIbsjfU+aSykkpTezBkCMB8GA1UdIwQYMBaAFL7CgkhvN+MW8XtSC0VSh7wwf4no
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTQ2OS9GNTg0MzhGRUY3
RTMxMUVFQjlBMTI5MUFDNEY5QUUwMi92c0tDU0c4MzR4YnhlMUlMUlZLSHZEQl9p
ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3ZzS0NTRzgzNHhieGUxSUxSVktIdkRCX2llZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QTQ2OS9GNTg0MzhGRUY3RTMxMUVFQjlBMTI5MUFDNEY5QUUwMi92c0tDU0c4MzR4
YnhlMUlMUlZLSHZEQl9pZWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAn10mXznFqI6fyFsWOJDNhv9SRH1pLQi83yZJHuiduXIW1uai/5XjnAyttsSw
9efCFAyOzPptryocpo+LFHXBH0nw5M/PioVkidS8kZ8f1w8a4jEyPrFDScxmXR/8
Ohd+ngqLt1Z4WQ8vBUp30wK9l46YfzRDXUcnCpanB8aZKp2P3Qaum206KrLnUu8e
6fesypXjLgCyVp0yH0u08aw/FzWU6R86z2rYXfLMn1Je5fO9Keb0ZE1Vhex0W7Oh
m7OgY42iSCa0Jfbe+z88/X+z3UUdiCuCUaqUknLnD8OWZZqUTqoXj59UkZe6gH5G
9jkQ1pLUsm6El9bxIyyRk+3b7w==
-----END CERTIFICATE-----
Generated at Wed Sep 23 21:49:54 2026 by rpki-client