Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft
File:                     vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft (raw, json)
Hash identifier:          QLIyY3P6NnMWBNPtm6D1L+CIfXGsQ/5zHnZbmLEoOjE=
Subject key identifier:   44:B2:79:2D:7D:6E:D0:64:C8:5E:B7:67:51:D0:37:37:E5:CA:8A:19
Authority key identifier: BD:79:AC:76:40:C9:55:C4:35:C8:CF:55:C2:91:F1:22:B7:0E:2F:99
Certificate issuer:       /CN=A919F026/serialNumber=BD79AC7640C955C435C8CF55C291F122B70E2F99
Certificate serial:       0150
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft
Manifest number:          013B
Signing time:             Fri 25 Sep 2026 05:50:55 +0000
Manifest this update:     Fri 25 Sep 2026 05:50:55 +0000
Manifest next update:     Fri 02 Oct 2026 05:50:55 +0000
Files and hashes:         1: vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl (hash: 8b4ex0a5eK3emn/wfMSHL5hg5Mi4bA/ZjZqtqE7qVwE=)
                          2: 362EF79CFB2911EF8C103876C4F9AE02.roa (hash: 8z/uFEi8kY2kZUp/2Uo+wdZpbnZaPl9Z3nq0shxq+HU=)
                          3: 07E3560E707B11F08CCE202CC4F9AE02.roa (hash: qfuU9QdlAgNGEyETXyG5+zUSOsPh9QDRT3yT/b7upmM=)
                          4: 3FCB43D2FB2911EF8A116D76C4F9AE02.roa (hash: TuXiY2w3e6zPpHWMMfGIh2+FsQ77W0kNYmMVPhTnzXc=)
                          5: 563F3D581F3C11F09F3C7F40C4F9AE02.roa (hash: jqaS9O87XNAGjnOYKmiPW3sMHJfZOBNM9M+7d9FRgko=)
                          6: 6E68E3C8A05811F0B1978E4CC4F9AE02.roa (hash: xZAQVFBAuCRw9GeATu83PkDRuX+f5O+jwXu5MsByzpg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl
                          rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 05:50:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 336 (0x150)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F026, serialNumber=BD79AC7640C955C435C8CF55C291F122B70E2F99
        Validity
            Not Before: Sep 25 05:50:55 2026 GMT
            Not After : Oct  2 05:50:55 2026 GMT
        Subject: CN=6ab60bbf-24f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:95:02:13:59:b1:0c:61:a6:66:32:74:85:d6:
                    1f:90:0d:e6:91:c2:95:fa:34:b7:65:1c:09:a4:04:
                    ef:fa:80:89:12:ac:86:8c:e9:8a:c5:68:a3:00:7b:
                    2b:b2:53:1e:91:e0:46:74:09:1c:62:27:02:a4:1c:
                    1a:a9:2a:0d:34:68:a0:74:f5:20:22:f9:2f:22:dc:
                    39:e5:44:8a:d6:e2:f6:e5:88:ee:ca:89:c7:69:ff:
                    a2:11:83:2b:9c:17:0d:d5:68:64:8d:53:9b:9a:c6:
                    48:d0:ae:1b:a8:12:52:2e:0a:90:34:e3:9e:04:dd:
                    08:80:3a:1c:be:49:73:30:42:cf:46:85:52:2a:3b:
                    08:7d:c4:07:3d:0e:d6:b7:9b:ac:5b:85:0d:19:d4:
                    0f:00:5d:4a:23:59:a7:c1:2a:1b:73:65:58:56:e8:
                    7d:87:8b:9f:b2:a6:76:00:b0:3b:ee:ef:92:e7:de:
                    1e:90:6f:92:4a:24:53:e6:73:0c:9a:3c:ac:4c:71:
                    59:26:63:b1:cd:b8:e0:07:0d:47:55:cc:f1:b6:b3:
                    20:6f:a0:cb:26:85:75:1c:f6:5f:32:0b:1c:98:7e:
                    8b:5c:14:83:1b:3b:ed:77:06:7b:fa:29:04:f2:54:
                    bf:d4:e0:3e:4d:f1:04:92:62:be:4e:a0:62:82:dc:
                    27:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:B2:79:2D:7D:6E:D0:64:C8:5E:B7:67:51:D0:37:37:E5:CA:8A:19
            X509v3 Authority Key Identifier:
                keyid:BD:79:AC:76:40:C9:55:C4:35:C8:CF:55:C2:91:F1:22:B7:0E:2F:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:68:e2:23:5e:18:22:9a:7f:da:1e:4a:40:a1:b5:49:1c:34:
         42:ae:34:d5:f6:64:d6:bf:a9:97:73:22:c6:bd:b2:e2:b6:9e:
         49:25:b0:e2:81:ec:2e:c0:88:2a:e2:16:4a:e7:4f:9a:c6:7f:
         10:ef:f1:10:ae:77:06:29:6b:40:35:3f:44:74:cd:66:18:a0:
         07:2f:d3:0c:62:aa:ef:a8:6f:25:4b:2c:ff:32:63:45:52:74:
         50:c4:9d:8b:e4:24:ef:a6:cf:f4:40:de:99:29:70:50:f5:fc:
         bf:d9:24:34:19:1b:e9:42:58:f7:b2:57:0a:e1:8b:a5:cc:46:
         44:68:aa:e0:9a:54:a5:f9:75:e1:20:4e:22:3a:fb:85:0b:cd:
         42:c9:85:c7:07:fa:03:cc:3d:1a:c2:10:16:c9:ec:40:ef:4f:
         d1:d5:fe:06:94:15:92:cf:ef:8d:a0:f6:a3:17:84:7a:43:b9:
         a0:e2:20:07:c9:f2:5d:94:2d:9e:bf:d7:ba:25:17:6d:8e:b7:
         04:43:2a:28:b5:7b:44:62:f2:bb:97:3d:ea:71:d8:0e:8f:96:
         45:4e:f3:a0:f1:db:d5:4a:e9:28:ea:09:50:0b:08:16:34:27:
         8e:24:47:67:cf:45:33:28:a0:f9:06:ac:88:64:75:56:4c:46:
         14:82:2d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:42:36 2026 by rpki-client