Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft
File:                     vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft (raw, json)
Hash identifier:          2YWXEer2kxtHnMgm+tYrUqOEpzO3s+vmSEn4ZSFfKAM=
Subject key identifier:   6D:E5:95:7B:B2:FC:0E:30:1F:9D:52:93:09:F9:0C:B0:16:45:AD:DB
Authority key identifier: BC:2D:A3:5C:B5:65:13:A9:4A:68:B5:91:DD:2C:76:C5:1D:81:11:34
Certificate issuer:       /CN=A91F7C21/serialNumber=BC2DA35CB56513A94A68B591DD2C76C51D811134
Certificate serial:       064D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft
Manifest number:          063A
Signing time:             Tue 22 Sep 2026 22:24:36 +0000
Manifest this update:     Tue 22 Sep 2026 22:24:35 +0000
Manifest next update:     Tue 29 Sep 2026 22:24:35 +0000
Files and hashes:         1: vC2jXLVlE6lKaLWR3Sx2xR2BETQ.crl (hash: FGRJaCp+45GBYWgT8n6ATT/WMqfpMIv8QzXStKqQ/rM=)
                          2: 0EF4DA3A38D011EC936A8C4FC4F9AE02.roa (hash: +ojUNJ+0LXpRUq2YvOJC2a3HW9his1KdABhw/922pzI=)
                          3: 7FBF284EF5B211EB8419A23AC4F9AE02.roa (hash: FSmvi+jzzyKKXWhskSUQbtgE3xdZ8BhML9W9RQn3tuA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.crl
                          rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 22:24:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1613 (0x64d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7C21, serialNumber=BC2DA35CB56513A94A68B591DD2C76C51D811134
        Validity
            Not Before: Sep 22 22:24:35 2026 GMT
            Not After : Sep 29 22:24:35 2026 GMT
        Subject: CN=6ab30024-b716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bd:b7:08:f8:9f:8d:40:a9:c4:a7:b5:fb:1e:
                    3e:20:55:e8:61:a4:22:9d:41:fb:97:84:a1:f4:29:
                    1d:dd:02:c0:80:bb:94:a3:72:99:62:07:9b:03:0a:
                    8e:11:0f:66:45:19:eb:05:9e:43:65:53:3d:f7:e1:
                    58:c5:57:13:7c:3c:46:c9:1c:bb:7c:b2:33:b4:8e:
                    18:94:b5:be:65:d2:87:3a:dc:21:9f:2f:c2:97:26:
                    02:55:d9:de:f5:e1:7b:1c:21:23:9a:01:59:d5:57:
                    cf:12:0d:af:b2:93:91:48:df:2c:af:51:46:c5:bb:
                    83:8f:34:73:a5:59:85:39:f2:b8:87:08:82:ad:02:
                    22:5d:64:8b:54:1f:78:01:97:5e:36:10:cb:68:bd:
                    df:c7:cb:cc:e2:56:bb:e7:99:6c:9b:a7:83:74:47:
                    f6:81:f7:b4:ea:6d:73:fb:63:14:df:11:dd:52:a4:
                    68:aa:87:11:eb:7f:36:b2:4a:0b:83:f8:04:90:3a:
                    d2:fc:2f:4d:e0:0c:ef:e3:eb:7a:bc:c8:b8:32:0e:
                    d8:46:5e:91:d3:dd:7a:d8:0c:f2:92:79:3f:72:f3:
                    95:91:47:39:94:9c:6e:41:1f:5d:65:d4:bd:48:66:
                    c5:0e:fe:05:df:08:a3:75:31:ec:2c:8b:36:9c:a9:
                    55:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:E5:95:7B:B2:FC:0E:30:1F:9D:52:93:09:F9:0C:B0:16:45:AD:DB
            X509v3 Authority Key Identifier:
                keyid:BC:2D:A3:5C:B5:65:13:A9:4A:68:B5:91:DD:2C:76:C5:1D:81:11:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:fb:05:08:f1:e4:6e:0d:9b:52:9f:dc:7f:1d:69:2f:67:0e:
         ee:c4:e0:ca:eb:57:80:27:6b:4a:05:c8:24:71:9e:e9:fe:e1:
         6a:75:f9:26:96:9a:84:2d:19:63:a3:55:63:c3:a4:5c:86:e8:
         19:11:b7:65:69:19:6f:d0:84:54:a3:aa:97:92:04:3e:44:59:
         9d:f8:5a:0e:d3:b8:d9:5c:02:3c:43:4f:11:9f:4c:3c:07:c8:
         c3:e5:1e:66:1b:54:52:ec:53:1d:02:67:b2:fa:9d:12:f3:b2:
         8e:0c:86:fa:35:29:28:a3:c6:06:18:67:44:2d:aa:d4:3e:0a:
         6c:aa:32:b1:14:31:c3:fc:85:5b:69:75:6d:fa:bd:04:57:44:
         b0:f5:5d:d0:b5:6e:06:11:a8:b4:e3:dc:79:3d:4d:6a:6d:07:
         b9:68:5e:05:ef:13:f0:8f:13:41:4d:de:9a:6a:29:af:bc:93:
         a6:de:a7:e5:a6:33:c5:c0:11:ef:67:14:ea:78:d2:8f:49:ef:
         0c:cf:c3:50:c1:ff:3e:4a:b3:83:58:84:8a:0e:0d:a9:4e:00:
         03:7e:95:cc:15:f8:3c:11:83:46:d5:e4:8e:2c:2a:18:da:cb:
         38:61:77:df:1b:f2:bc:ce:a0:8c:2f:1c:19:3f:04:60:be:3c:
         07:64:98:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:07:55 2026 by rpki-client