Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.mft
File:                     vrCjIjTRl23j3iJaVReALbYTqLY.mft (raw, json)
Hash identifier:          2QTANS5NcjZlJgdXlaNjrjfc4MLHkgLo89C3UoGT8NQ=
Subject key identifier:   E6:99:A0:44:FA:93:F5:67:81:86:8C:23:3A:3C:D4:AE:8D:27:AC:63
Authority key identifier: BE:B0:A3:22:34:D1:97:6D:E3:DE:22:5A:55:17:80:2D:B6:13:A8:B6
Certificate issuer:       /CN=A91AF17B/serialNumber=BEB0A32234D1976DE3DE225A5517802DB613A8B6
Certificate serial:       06B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrCjIjTRl23j3iJaVReALbYTqLY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.mft
Manifest number:          06AC
Signing time:             Tue 22 Sep 2026 22:06:41 +0000
Manifest this update:     Tue 22 Sep 2026 22:06:41 +0000
Manifest next update:     Tue 29 Sep 2026 22:06:41 +0000
Files and hashes:         1: vrCjIjTRl23j3iJaVReALbYTqLY.crl (hash: EjDSakrM3usUOQ0Qy3qDE2ptoUdHlidMkpMhFcNdGmg=)
                          2: 9C955450C77E11EB9DF68B6AC4F9AE02.roa (hash: mmfq1A4JFs2jPRiNdsYAoBmzmeTYZwoCaqGyjp1X2RQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.crl
                          rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrCjIjTRl23j3iJaVReALbYTqLY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 22:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1716 (0x6b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF17B, serialNumber=BEB0A32234D1976DE3DE225A5517802DB613A8B6
        Validity
            Not Before: Sep 22 22:06:41 2026 GMT
            Not After : Sep 29 22:06:41 2026 GMT
        Subject: CN=6ab2fbf1-2c29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:78:d6:18:37:eb:f6:05:de:0c:ad:03:31:ac:
                    b5:f9:6e:73:2f:5d:f6:63:fb:db:dd:22:68:d5:5b:
                    ce:53:aa:d6:b1:01:55:e1:b3:45:07:dd:2c:08:74:
                    03:a8:e1:4e:1b:db:b6:be:21:98:1c:e4:fa:c2:ae:
                    48:15:b4:a7:af:ac:f1:46:5d:ce:9d:d5:8d:e5:70:
                    19:5e:15:6c:3e:b4:2e:4b:dd:37:5c:1a:7b:66:7e:
                    4a:a4:02:53:f5:08:46:a3:19:c7:2e:d1:93:fc:af:
                    ea:9c:9b:9a:8c:f1:36:ce:41:91:41:fe:d7:b5:d2:
                    04:6a:bc:84:c0:85:80:5f:ee:f1:78:aa:0e:56:13:
                    a6:ad:56:90:53:39:11:59:28:a1:6b:79:47:b5:99:
                    ec:59:cc:00:94:3f:11:13:dd:14:5c:90:ed:44:be:
                    77:82:96:4e:c2:20:33:f7:23:87:c7:80:0c:af:ab:
                    5a:ab:a4:b8:de:6c:8e:76:31:10:51:a9:88:4e:97:
                    a8:fc:30:c4:5a:85:67:57:61:95:d5:c5:f9:22:21:
                    62:b2:c6:69:b8:cb:b8:b5:68:7d:da:a8:d9:30:f3:
                    08:2a:71:5e:36:0c:af:fc:a1:f6:42:42:4d:b6:c2:
                    e6:b2:a1:84:e8:21:14:85:cf:1c:62:6c:be:30:f1:
                    d5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:99:A0:44:FA:93:F5:67:81:86:8C:23:3A:3C:D4:AE:8D:27:AC:63
            X509v3 Authority Key Identifier:
                keyid:BE:B0:A3:22:34:D1:97:6D:E3:DE:22:5A:55:17:80:2D:B6:13:A8:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrCjIjTRl23j3iJaVReALbYTqLY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:0f:aa:49:1e:93:6a:ac:58:2d:7a:61:78:22:8c:81:14:68:
         b4:84:f8:50:20:20:42:75:b7:a0:4c:de:1d:c9:71:dc:a4:89:
         c7:21:29:5d:79:1b:6d:2c:f9:eb:de:3a:51:33:78:98:c8:43:
         e6:c2:a5:c7:f9:3b:1b:ae:be:6e:57:f9:b5:bb:7b:bb:db:eb:
         44:3f:71:c7:3e:5d:df:e9:5a:14:b4:ab:f4:24:fd:4b:27:4c:
         99:b3:35:ae:0d:12:71:40:d5:ae:67:6e:b4:88:97:b2:22:4d:
         ce:6d:04:19:62:6d:41:11:8b:11:6f:07:0c:56:76:6f:69:8c:
         e8:90:2c:38:9f:72:81:53:ad:e0:b3:2b:77:3f:bd:78:a8:53:
         a0:df:1b:78:1e:2d:49:af:fd:b6:2c:19:7d:ee:2e:a7:03:c3:
         42:7b:f8:3b:36:88:69:63:30:2a:6d:89:c7:7e:49:01:c2:c8:
         54:1d:e6:99:93:28:31:15:f5:b7:46:42:29:48:4d:78:99:cb:
         df:18:e4:b9:75:0b:87:e1:70:74:01:a3:4d:64:37:bb:59:0a:
         f5:84:f2:6f:26:3c:ac:30:68:64:d7:13:a3:40:0e:c9:e4:fc:
         d9:22:40:ed:03:e6:7a:d7:3f:e7:11:94:58:81:e8:54:f5:9b:
         46:f5:61:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:13:25 2026 by rpki-client