Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.mft
File:                     VyN5TNgiazMfp2TbnkH16ZS9FJU.mft (raw, json)
Hash identifier:          NFREsbgKLbpCV6J6mTFix+cbFL87FTItgOncZt+0br4=
Subject key identifier:   B0:02:F1:81:88:3D:E9:EF:27:BA:77:19:4E:B2:CC:D8:04:4C:EB:B1
Authority key identifier: 57:23:79:4C:D8:22:6B:33:1F:A7:64:DB:9E:41:F5:E9:94:BD:14:95
Certificate issuer:       /CN=A919CAB5/serialNumber=5723794CD8226B331FA764DB9E41F5E994BD1495
Certificate serial:       0726
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VyN5TNgiazMfp2TbnkH16ZS9FJU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.mft
Manifest number:          0710
Signing time:             Sat 26 Sep 2026 22:14:33 +0000
Manifest this update:     Sat 26 Sep 2026 22:14:33 +0000
Manifest next update:     Sat 03 Oct 2026 22:14:33 +0000
Files and hashes:         1: VyN5TNgiazMfp2TbnkH16ZS9FJU.crl (hash: BCfDUS8PR8Nog6v+xz0QORUmJC1eChj0jyrrPTCwnSY=)
                          2: 5533E6AEBD3711EB8D76EF31C4F9AE02.roa (hash: S3V9nTmHpTk0R0/Tb93/TR2ixFVYiRqvkvzY7lnngOQ=)
                          3: CE84D1823BFF11EE80C18D54C4F9AE02.roa (hash: rKsX6OkVUam3F97sdJG9wWqd7tiKNAX7p6e7cKD03FU=)
                          4: E3DABCD6688911F1A3B02B4A6E47A888.roa (hash: S5E+n6kB32srflXYx0wq3g2lJzXHf4UJDuTgEav9epQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.crl
                          rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VyN5TNgiazMfp2TbnkH16ZS9FJU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 22:14:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1830 (0x726)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919CAB5, serialNumber=5723794CD8226B331FA764DB9E41F5E994BD1495
        Validity
            Not Before: Sep 26 22:14:33 2026 GMT
            Not After : Oct  3 22:14:33 2026 GMT
        Subject: CN=6ab843c9-75fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:5f:7d:c2:d7:7b:df:4f:4d:7c:42:cb:7b:8d:
                    5d:13:6a:d8:7b:cc:56:6f:26:3c:b3:a4:b4:02:42:
                    5b:20:d8:ab:51:ed:b4:5b:75:a3:ab:cc:23:2f:14:
                    bb:a0:fe:42:27:58:0f:ad:c1:0b:8a:e4:98:39:1b:
                    25:80:d3:9b:91:29:39:2a:b7:e9:cc:33:44:3f:3c:
                    6f:5a:00:2b:0d:99:e1:21:83:84:0a:b4:cc:41:6e:
                    54:4e:6b:cf:2d:75:b3:1d:b3:c7:ac:97:ad:8f:2e:
                    8b:28:b9:9c:69:87:89:a6:36:dc:ed:fe:2d:d9:b1:
                    e0:34:cb:e8:d7:e5:e7:12:10:de:ce:81:58:8e:78:
                    1d:f7:4a:dd:dc:11:46:fb:13:a9:99:52:a5:e4:c6:
                    dd:11:40:20:d1:e5:c1:57:db:b6:cf:e6:75:f8:71:
                    a9:50:62:3a:76:63:7e:01:c4:25:18:c4:8d:8e:b8:
                    28:7e:61:95:c6:aa:a1:c8:2d:80:58:5d:1d:81:99:
                    a1:01:12:d8:57:17:86:99:33:c5:54:6e:ba:5d:26:
                    a2:1c:bc:0a:19:28:0b:ca:cd:4e:90:98:b8:a9:f5:
                    db:07:50:76:92:a9:0a:68:09:83:91:d5:43:a2:70:
                    70:7c:dd:39:c7:59:ab:07:ce:1c:d2:72:0b:3a:f5:
                    b7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:02:F1:81:88:3D:E9:EF:27:BA:77:19:4E:B2:CC:D8:04:4C:EB:B1
            X509v3 Authority Key Identifier:
                keyid:57:23:79:4C:D8:22:6B:33:1F:A7:64:DB:9E:41:F5:E9:94:BD:14:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VyN5TNgiazMfp2TbnkH16ZS9FJU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:3f:45:03:a0:f3:ae:67:51:59:35:a6:bf:6e:9a:ac:32:92:
         00:62:94:0b:1d:b7:7b:70:ea:8f:99:ad:f5:6e:12:f4:34:a4:
         01:ff:6c:bf:7a:5b:64:3a:33:dd:3e:86:c3:51:24:4c:15:9a:
         9c:14:82:27:e2:56:2b:65:a3:62:67:ba:ec:a5:5b:aa:d1:8b:
         cc:bd:4d:f5:a1:9e:a2:38:46:b2:4d:16:30:9c:2e:2a:f3:ea:
         c5:e9:79:43:c3:c2:b8:3c:4b:cf:2c:b8:b2:9c:34:20:5b:2b:
         50:d8:9e:39:5a:6b:b1:62:00:24:ba:6d:13:94:b9:b7:7d:c9:
         5b:7e:53:39:c2:d4:a2:0f:3f:15:0b:ff:91:2c:53:c1:ea:da:
         9d:35:10:b4:88:30:46:3f:d9:c5:86:c6:c3:aa:c8:6a:1f:29:
         4e:04:eb:38:84:52:a2:19:33:1f:4f:84:ee:7f:a1:87:7b:95:
         10:68:a7:f5:08:1d:fb:52:05:67:d6:2d:b8:c4:e8:a5:cc:31:
         7a:c2:1c:55:46:77:ce:27:ed:80:16:ea:b3:41:a7:32:d4:36:
         cb:5c:de:99:90:40:1f:08:78:9c:bc:63:fe:de:cd:2d:c1:fb:
         ff:4a:27:d0:4d:1c:6a:3f:0e:28:3a:d3:99:6a:01:72:f7:39:
         a3:f3:f3:48
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICByYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUNBQjUxMTAvBgNVBAUTKDU3MjM3OTRDRDgyMjZCMzMxRkE3NjREQjlFNDFGNUU5
OTRCRDE0OTUwHhcNMjYwOTI2MjIxNDMzWhcNMjYxMDAzMjIxNDMzWjAYMRYwFAYD
VQQDEw02YWI4NDNjOS03NWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlF99wtd7309NfELLe41dE2rYe8xWbyY8s6S0AkJbINirUe20W3Wjq8wjLxS7
oP5CJ1gPrcELiuSYORslgNObkSk5KrfpzDNEPzxvWgArDZnhIYOECrTMQW5UTmvP
LXWzHbPHrJetjy6LKLmcaYeJpjbc7f4t2bHgNMvo1+XnEhDezoFYjngd90rd3BFG
+xOpmVKl5MbdEUAg0eXBV9u2z+Z1+HGpUGI6dmN+AcQlGMSNjrgofmGVxqqhyC2A
WF0dgZmhARLYVxeGmTPFVG66XSaiHLwKGSgLys1OkJi4qfXbB1B2kqkKaAmDkdVD
onBwfN05x1mrB84c0nILOvW3KQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLAC8YGI
PenvJ7p3GU6yzNgETOuxMB8GA1UdIwQYMBaAFFcjeUzYImszH6dk255B9emUvRSV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0FCNS83MkZCQUQ4OEE3
RDAxMUVCQkE1MTE1MjJDNEY5QUUwMi9WeU41VE5naWF6TWZwMlRibmtIMTZaUzlG
SlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Z5TjVUTmdpYXpNZnAyVGJua0gxNlpTOUZKVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
Q0FCNS83MkZCQUQ4OEE3RDAxMUVCQkE1MTE1MjJDNEY5QUUwMi9WeU41VE5naWF6
TWZwMlRibmtIMTZaUzlGSlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXT9FA6DzrmdRWTWmv26arDKSAGKUCx23e3Dqj5mt9W4S9DSkAf9sv3pbZDoz
3T6Gw1EkTBWanBSCJ+JWK2WjYme67KVbqtGLzL1N9aGeojhGsk0WMJwuKvPqxel5
Q8PCuDxLzyy4spw0IFsrUNieOVprsWIAJLptE5S5t33JW35TOcLUog8/FQv/kSxT
weranTUQtIgwRj/ZxYbGw6rIah8pTgTrOIRSohkzH0+E7n+hh3uVEGin9Qgd+1IF
Z9YtuMTopcwxesIcVUZ3ziftgBbqs0GnMtQ2y1zemZBAHwh4nLxj/t7NLcH7/0on
0E0caj8OKDrTmWoBcvc5o/PzSA==
-----END CERTIFICATE-----
Generated at Sun Sep 27 21:15:15 2026 by rpki-client