Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D0432/E3CA18EC7B8711EDB59E3B80C4F9AE02/vjdwS4x985dWFxlK8q3u2hzJvPY.mft
File:                     vjdwS4x985dWFxlK8q3u2hzJvPY.mft (raw, json)
Hash identifier:          9cl5E3xrXIloqTKCW062K09MjEbGj3qX8UrY69M74m8=
Subject key identifier:   40:D6:80:C7:11:5E:41:8A:36:5B:83:D1:C7:50:CB:69:7D:6F:1C:B9
Authority key identifier: BE:37:70:4B:8C:7D:F3:97:56:17:19:4A:F2:AD:EE:DA:1C:C9:BC:F6
Certificate issuer:       /CN=A91D0432/serialNumber=BE37704B8C7DF3975617194AF2ADEEDA1CC9BCF6
Certificate serial:       02D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjdwS4x985dWFxlK8q3u2hzJvPY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0432/E3CA18EC7B8711EDB59E3B80C4F9AE02/vjdwS4x985dWFxlK8q3u2hzJvPY.mft
Manifest number:          02CE
Signing time:             Wed 07 Oct 2026 01:38:40 +0000
Manifest this update:     Wed 07 Oct 2026 01:38:40 +0000
Manifest next update:     Wed 14 Oct 2026 01:38:40 +0000
Files and hashes:         1: vjdwS4x985dWFxlK8q3u2hzJvPY.crl (hash: eW6VxTOhGAmcVv3IhFWAAETduvU6vMEyNtiu32jYczk=)
                          2: 539DF534D1FB11EDA0A31C2FC4F9AE02.roa (hash: MWwHTiRjfNu9FVjZ1lVuCJLbynbBLEwj/iegk3IWVJw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0432/E3CA18EC7B8711EDB59E3B80C4F9AE02/vjdwS4x985dWFxlK8q3u2hzJvPY.crl
                          rsync://rpki.apnic.net/member_repository/A91D0432/E3CA18EC7B8711EDB59E3B80C4F9AE02/vjdwS4x985dWFxlK8q3u2hzJvPY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjdwS4x985dWFxlK8q3u2hzJvPY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 01:38:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 725 (0x2d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0432, serialNumber=BE37704B8C7DF3975617194AF2ADEEDA1CC9BCF6
        Validity
            Not Before: Oct  7 01:38:40 2026 GMT
            Not After : Oct 14 01:38:40 2026 GMT
        Subject: CN=6ac5a2a0-b1b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b4:15:ad:03:9d:ea:e3:fb:e6:e4:ae:6c:06:
                    87:60:18:11:8d:85:4e:66:b6:43:80:b6:f6:67:5e:
                    4e:e4:56:4c:f8:e8:7a:a4:49:75:49:d9:21:e6:29:
                    26:3c:8c:9d:b9:ef:ba:b0:e9:2b:65:d1:78:c6:3e:
                    6c:70:e7:2c:d5:f2:91:76:c7:e7:35:f5:1d:a7:e4:
                    95:44:31:c1:ba:19:20:f9:06:87:e0:a7:46:4a:cf:
                    30:52:34:31:5e:d9:aa:00:bd:14:0f:82:86:d6:2a:
                    66:33:ea:d7:47:99:88:80:96:05:e6:00:09:be:3b:
                    2b:fc:39:3d:2e:39:32:16:70:ac:4e:9b:d1:42:40:
                    05:73:dd:5d:17:f1:86:5c:0a:b7:06:5d:5d:ad:b0:
                    1a:e7:1b:08:96:ee:fe:23:c6:29:fc:ee:dc:3e:84:
                    26:d8:e4:1b:17:e5:3e:8e:49:4d:b2:61:21:3c:e0:
                    0f:9d:6c:4c:1b:f7:83:c8:d8:f9:7f:db:57:5c:1c:
                    d0:90:e1:0e:fb:d3:3c:82:0a:27:18:f7:19:6d:22:
                    c8:4e:f6:10:7c:8c:89:03:7a:c4:7b:49:7f:af:56:
                    ad:3a:6c:61:1d:f2:31:0f:a3:c5:a3:37:bc:76:b0:
                    6f:49:de:21:b0:bd:92:87:01:bd:8d:8a:34:db:85:
                    ef:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:D6:80:C7:11:5E:41:8A:36:5B:83:D1:C7:50:CB:69:7D:6F:1C:B9
            X509v3 Authority Key Identifier:
                keyid:BE:37:70:4B:8C:7D:F3:97:56:17:19:4A:F2:AD:EE:DA:1C:C9:BC:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0432/E3CA18EC7B8711EDB59E3B80C4F9AE02/vjdwS4x985dWFxlK8q3u2hzJvPY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjdwS4x985dWFxlK8q3u2hzJvPY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0432/E3CA18EC7B8711EDB59E3B80C4F9AE02/vjdwS4x985dWFxlK8q3u2hzJvPY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:fd:74:ec:6b:a3:f6:af:23:7d:78:da:eb:67:c7:d8:a6:b1:
         cc:8e:9e:36:5f:0c:a9:08:35:63:8c:30:35:d3:fe:97:3b:c7:
         35:ca:40:ca:ae:3c:be:2d:f0:9a:f2:c6:f4:4b:8b:57:49:41:
         14:e4:62:84:e3:f4:6f:4f:c0:8f:ee:46:28:c9:1f:31:01:b4:
         69:6b:50:48:50:b6:c3:e3:57:03:ed:6a:16:97:68:bd:b1:d2:
         8f:14:69:ae:54:d7:11:71:93:fa:c8:7e:f7:b2:dc:d8:bd:37:
         d9:cb:9c:6c:b4:cf:e5:00:d0:bc:b1:ee:71:b8:24:5c:8b:3b:
         85:38:c5:da:32:53:b5:a8:2d:79:bd:ab:ac:fb:0e:12:f4:3d:
         7e:f7:7b:ff:fb:0e:d0:de:2f:d6:cb:a3:b7:6a:a0:f8:0c:fc:
         72:f0:06:1a:76:bd:68:f4:3e:2e:e2:e0:ec:b6:eb:eb:ed:11:
         7a:2e:5d:da:a3:cd:2c:e0:d3:dc:02:9b:01:16:f5:6f:a9:fa:
         a3:08:52:7c:ff:eb:b7:74:c2:c6:2d:a9:e0:0c:34:01:6c:d7:
         f5:b2:e9:a7:b3:9b:d7:09:42:86:b5:be:cb:63:f3:6e:3a:73:
         78:b4:74:82:a1:86:d4:4c:0f:a8:c1:0e:8b:6b:a1:59:57:b3:
         85:9d:4a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 11:32:05 2026 by rpki-client