Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft
File:                     VktpF48mnvuWt2kW94FwdU6PDIc.mft (raw, json)
Hash identifier:          ndJFybk8vEzzLCRW1W04MI4YCKocIRMTThf0Ff5JABs=
Subject key identifier:   9D:82:96:5F:B7:DD:C2:81:55:19:D6:78:D3:71:68:EF:6E:1E:03:4D
Authority key identifier: 56:4B:69:17:8F:26:9E:FB:96:B7:69:16:F7:81:70:75:4E:8F:0C:87
Certificate issuer:       /CN=A91A99C5/serialNumber=564B69178F269EFB96B76916F78170754E8F0C87
Certificate serial:       F1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VktpF48mnvuWt2kW94FwdU6PDIc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft
Manifest number:          E7
Signing time:             Wed 23 Sep 2026 06:17:56 +0000
Manifest this update:     Wed 23 Sep 2026 06:17:55 +0000
Manifest next update:     Wed 30 Sep 2026 06:17:55 +0000
Files and hashes:         1: VktpF48mnvuWt2kW94FwdU6PDIc.crl (hash: O7cg6cOk4nmbGmpvH1DOkArIZRnRtWATF2abU38678g=)
                          2: AE31872C5DBD11F083DD7F61C4F9AE02.roa (hash: CwQwKB1HiO4WU+K4KyNPGS3F5C0FjCcAF6X+FcGgBgk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.crl
                          rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VktpF48mnvuWt2kW94FwdU6PDIc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 06:17:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 241 (0xf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A99C5, serialNumber=564B69178F269EFB96B76916F78170754E8F0C87
        Validity
            Not Before: Sep 23 06:17:55 2026 GMT
            Not After : Sep 30 06:17:55 2026 GMT
        Subject: CN=6ab36f13-7c97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c5:83:67:f0:6c:2a:33:3a:10:59:3e:57:b5:
                    b7:46:3f:1b:40:ce:09:02:52:ba:bc:fa:47:0e:21:
                    89:5f:97:47:33:61:3e:9d:5f:47:92:02:47:c4:4e:
                    ac:8e:a9:8e:76:26:9b:c9:39:77:90:bd:45:a5:fc:
                    47:e2:66:1a:23:bf:e8:3d:d3:1f:d5:dd:71:ef:f2:
                    1e:29:71:60:38:ca:36:9e:2f:f7:f4:27:a3:30:69:
                    41:12:56:70:f7:2e:a9:3f:8c:dc:2c:f7:f4:fb:8f:
                    bc:23:70:28:2e:4e:9f:55:1e:c3:da:54:78:a8:58:
                    fb:3a:70:c4:ff:16:a1:63:e8:a7:46:03:54:92:b8:
                    3f:ed:11:29:2e:00:20:5a:41:42:86:46:b3:14:05:
                    b0:47:78:c3:e9:85:12:cd:e9:10:f2:7d:8c:79:51:
                    b0:22:b9:9d:11:00:5d:80:45:95:4f:d9:e7:c3:23:
                    b8:25:46:ed:5c:0c:42:b1:63:63:47:2c:56:aa:e5:
                    a1:5d:f2:85:15:0f:bc:83:54:1d:ae:3f:6c:b2:62:
                    14:3d:bf:02:b9:49:4c:c2:f9:70:c4:3b:52:ce:3c:
                    5c:5c:0d:94:e6:42:e0:5e:8d:38:6f:54:23:54:5d:
                    1a:b5:ef:c6:55:66:aa:de:13:11:73:a9:22:7b:9a:
                    5c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:82:96:5F:B7:DD:C2:81:55:19:D6:78:D3:71:68:EF:6E:1E:03:4D
            X509v3 Authority Key Identifier:
                keyid:56:4B:69:17:8F:26:9E:FB:96:B7:69:16:F7:81:70:75:4E:8F:0C:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VktpF48mnvuWt2kW94FwdU6PDIc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:90:c2:45:aa:22:03:a5:09:29:08:39:b4:e5:93:c4:d2:5e:
         5f:6b:6f:02:10:b6:05:10:e6:76:3a:d2:6a:b4:7a:7f:44:90:
         21:89:d6:c6:48:1c:ca:7e:4a:47:18:53:35:9b:5b:2a:6f:87:
         e3:ae:6a:60:93:b4:5c:68:f1:b5:0e:c5:bf:e6:35:b0:ed:c1:
         98:e8:20:72:69:ba:46:0f:77:d0:db:8f:bc:1d:cb:f5:cf:ba:
         b7:d4:97:a5:3f:ec:b4:9f:a9:17:7b:d4:b4:47:ed:3f:5f:0f:
         64:b3:af:ea:37:48:fc:11:44:e4:37:58:a8:f7:07:b4:bf:74:
         c9:db:df:71:01:92:c7:94:d7:0b:ba:56:d4:bd:66:b0:b1:99:
         2c:c3:ec:4b:52:db:9e:da:67:d8:ea:81:86:7d:33:69:69:5e:
         db:ee:64:9d:93:d0:07:df:fc:93:6a:15:25:2c:2f:e3:7f:ac:
         69:36:5e:4f:00:48:e8:4e:f7:b9:56:53:ab:1b:e5:18:cd:e1:
         05:6f:48:b7:cb:6b:c1:09:2a:96:cf:2c:c1:32:80:5c:96:c2:
         65:a7:21:01:9c:da:d1:38:3b:e4:3b:2a:de:a0:9d:a9:d9:dc:
         d6:3f:d9:74:4d:7b:8d:b5:53:b4:45:73:ee:11:09:14:32:99:
         33:ec:95:17
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTk5QzUxMTAvBgNVBAUTKDU2NEI2OTE3OEYyNjlFRkI5NkI3NjkxNkY3ODE3MDc1
NEU4RjBDODcwHhcNMjYwOTIzMDYxNzU1WhcNMjYwOTMwMDYxNzU1WjAYMRYwFAYD
VQQDEw02YWIzNmYxMy03Yzk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApcWDZ/BsKjM6EFk+V7W3Rj8bQM4JAlK6vPpHDiGJX5dHM2E+nV9HkgJHxE6s
jqmOdiabyTl3kL1FpfxH4mYaI7/oPdMf1d1x7/IeKXFgOMo2ni/39CejMGlBElZw
9y6pP4zcLPf0+4+8I3AoLk6fVR7D2lR4qFj7OnDE/xahY+inRgNUkrg/7REpLgAg
WkFChkazFAWwR3jD6YUSzekQ8n2MeVGwIrmdEQBdgEWVT9nnwyO4JUbtXAxCsWNj
RyxWquWhXfKFFQ+8g1Qdrj9ssmIUPb8CuUlMwvlwxDtSzjxcXA2U5kLgXo04b1Qj
VF0ate/GVWaq3hMRc6kie5pccwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ2Cll+3
3cKBVRnWeNNxaO9uHgNNMB8GA1UdIwQYMBaAFFZLaRePJp77lrdpFveBcHVOjwyH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTlDNS9GQzAxRTg3QzVE
QkIxMUYwOUFBMTc4NTBDNEY5QUUwMi9Wa3RwRjQ4bW52dVd0MmtXOTRGd2RVNlBE
SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1ZrdHBGNDhtbnZ1V3Qya1c5NEZ3ZFU2UERJYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OTlDNS9GQzAxRTg3QzVEQkIxMUYwOUFBMTc4NTBDNEY5QUUwMi9Wa3RwRjQ4bW52
dVd0MmtXOTRGd2RVNlBESWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArpDCRaoiA6UJKQg5tOWTxNJeX2tvAhC2BRDmdjrSarR6f0SQIYnWxkgcyn5K
RxhTNZtbKm+H465qYJO0XGjxtQ7Fv+Y1sO3BmOggcmm6Rg930NuPvB3L9c+6t9SX
pT/stJ+pF3vUtEftP18PZLOv6jdI/BFE5DdYqPcHtL90ydvfcQGSx5TXC7pW1L1m
sLGZLMPsS1Lbntpn2OqBhn0zaWle2+5knZPQB9/8k2oVJSwv43+saTZeTwBI6E73
uVZTqxvlGM3hBW9It8trwQkqls8swTKAXJbCZachAZza0Tg75Dsq3qCdqdnc1j/Z
dE17jbVTtEVz7hEJFDKZM+yVFw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 21:48:22 2026 by rpki-client