Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.mft
File:                     vkiLTmCsanOmVu_bxfpnoajegSo.mft (raw, json)
Hash identifier:          t4f0b5SZClR600mu45W5p4mUIiGk3SdIgQCR25GtCcg=
Subject key identifier:   DD:48:78:C7:C1:9D:12:8F:DC:13:6A:27:77:ED:D9:2D:A0:37:37:93
Authority key identifier: BE:48:8B:4E:60:AC:6A:73:A6:56:EF:DB:C5:FA:67:A1:A8:DE:81:2A
Certificate issuer:       /CN=A91ADE0A/serialNumber=BE488B4E60AC6A73A656EFDBC5FA67A1A8DE812A
Certificate serial:       238B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkiLTmCsanOmVu_bxfpnoajegSo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.mft
Manifest number:          2347
Signing time:             Tue 22 Sep 2026 15:46:47 +0000
Manifest this update:     Tue 22 Sep 2026 15:46:46 +0000
Manifest next update:     Tue 29 Sep 2026 15:46:46 +0000
Files and hashes:         1: vkiLTmCsanOmVu_bxfpnoajegSo.crl (hash: aA+rDgry/3nLR1W3ZzEea+oOhase9LQ/j2OI7hCjgvg=)
                          2: 815465903EB511E9881B6529C4F9AE02.roa (hash: +ANu6JmCUfWc/fEshVMRk/CtwPkSloyzKlXpU5KCY3Y=)
                          3: 4AB8D38E178811EF95C8DF41C4F9AE02.roa (hash: 1Kz1vE1HOF5/kl+i8Rr4tSzcXBMpG4BgFwTZXnp4/e4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.crl
                          rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkiLTmCsanOmVu_bxfpnoajegSo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 15:46:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9099 (0x238b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADE0A, serialNumber=BE488B4E60AC6A73A656EFDBC5FA67A1A8DE812A
        Validity
            Not Before: Sep 22 15:46:46 2026 GMT
            Not After : Sep 29 15:46:46 2026 GMT
        Subject: CN=6ab2a2e7-c430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:90:ce:a9:75:71:ca:90:4b:a6:08:48:42:c0:
                    16:8a:0f:7b:da:0c:60:ae:25:3c:5b:e4:7c:f2:97:
                    27:16:8c:cc:74:db:f8:8a:3c:43:8c:c9:5a:83:be:
                    15:19:6e:83:1e:32:5c:79:d7:e8:8b:ad:de:90:3e:
                    f8:9a:81:44:a6:a8:9d:77:6a:79:44:c4:3b:e7:32:
                    f1:ff:16:4f:a2:5d:85:04:ae:04:4a:09:ac:60:e2:
                    aa:90:c1:13:be:5b:90:5a:f6:2f:ff:2d:0c:ff:36:
                    d8:af:a9:c1:57:fb:2b:d7:7e:3e:32:ec:01:63:08:
                    89:57:9d:99:9a:22:46:c4:bf:29:b5:14:81:68:39:
                    f1:6f:b9:4a:58:d5:45:fc:c0:6b:f6:bc:0d:74:a0:
                    76:65:8a:65:66:91:94:d1:54:46:b8:1d:17:31:9c:
                    d9:77:96:b1:a2:4e:a3:b1:94:d1:87:99:76:64:88:
                    41:da:b9:d3:c8:65:1f:ef:e3:5f:0b:54:77:a2:c9:
                    78:81:be:ff:6f:1a:2f:e5:f3:bf:8f:8f:60:59:7a:
                    8d:51:a8:8b:92:82:9e:bc:87:72:c4:68:2a:93:e7:
                    e6:03:34:c2:ad:81:6f:dd:86:5c:bd:08:0f:37:8d:
                    cb:79:b2:56:c9:61:f9:e3:e1:9e:b5:49:aa:89:ac:
                    8f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:48:78:C7:C1:9D:12:8F:DC:13:6A:27:77:ED:D9:2D:A0:37:37:93
            X509v3 Authority Key Identifier:
                keyid:BE:48:8B:4E:60:AC:6A:73:A6:56:EF:DB:C5:FA:67:A1:A8:DE:81:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkiLTmCsanOmVu_bxfpnoajegSo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:8d:f4:a0:24:46:87:4b:ba:6b:84:f8:31:6e:ba:7a:5e:1a:
         ce:c6:3d:25:ef:65:89:d8:3f:18:8c:fe:a0:f3:31:ae:da:f6:
         47:e5:4c:20:7a:76:ef:40:62:7b:69:60:09:7c:81:21:b2:1e:
         dd:b9:b1:34:bc:69:fd:b8:86:5e:ac:a4:69:14:f6:e9:d8:29:
         70:9b:48:76:a7:0b:b8:c0:0f:b7:cb:8b:fb:59:6c:65:ad:22:
         5f:53:f2:76:1b:43:7f:ed:7b:38:db:a8:75:c2:9b:61:de:5c:
         38:1c:7c:a2:60:e4:35:74:b8:64:7d:14:eb:f0:15:ba:3b:2a:
         52:72:d1:d3:82:8a:5d:70:83:c5:22:e8:4b:64:af:5e:92:9e:
         77:b3:61:8d:d4:8c:4e:cf:3d:8e:9d:4e:22:e0:86:3a:bd:8f:
         9a:91:e1:4e:29:68:eb:09:28:4a:f3:b4:2f:b1:22:18:3d:d5:
         f6:c4:f2:b0:a9:a3:5f:f4:54:10:ce:b9:bf:45:14:c1:d4:b0:
         c4:42:37:69:9c:d3:ea:1c:9a:12:8c:92:7a:3c:81:e8:75:05:
         ec:7d:d3:0f:33:6a:79:6b:19:79:e2:df:79:fb:61:ca:4d:eb:
         df:0f:9f:b8:54:c6:28:47:48:c0:05:64:2f:30:bb:74:18:42:
         42:e3:de:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:44:48 2026 by rpki-client