Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/VmpvNEQKySle2KAC1QSfV0zxbIg.mft
File:                     VmpvNEQKySle2KAC1QSfV0zxbIg.mft (raw, json)
Hash identifier:          jfpfWP3MA6TaDvr4YF55lJ8h/xc/Tl0uhrJ4kDYhvEU=
Subject key identifier:   55:C0:8F:AF:55:32:57:34:ED:3C:5E:68:53:21:CC:EE:12:45:99:AF
Authority key identifier: 56:6A:6F:34:44:0A:C9:29:5E:D8:A0:02:D5:04:9F:57:4C:F1:6C:88
Certificate issuer:       /CN=A91FA64C/serialNumber=566A6F34440AC9295ED8A002D5049F574CF16C88
Certificate serial:       028E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VmpvNEQKySle2KAC1QSfV0zxbIg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/VmpvNEQKySle2KAC1QSfV0zxbIg.mft
Manifest number:          0280
Signing time:             Fri 25 Sep 2026 02:01:40 +0000
Manifest this update:     Fri 25 Sep 2026 02:01:40 +0000
Manifest next update:     Fri 02 Oct 2026 02:01:40 +0000
Files and hashes:         1: VmpvNEQKySle2KAC1QSfV0zxbIg.crl (hash: MiRf9Q/E4xgRBN0xPlta9m1a6OgUpShSa3R3sX711ug=)
                          2: FFCE072E2B8111EE9BDEC079C4F9AE02.roa (hash: fC/KFkgq6lUne8dQqCH/x45Z+TiR28HM4WHVvUg10H8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/VmpvNEQKySle2KAC1QSfV0zxbIg.crl
                          rsync://rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/VmpvNEQKySle2KAC1QSfV0zxbIg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VmpvNEQKySle2KAC1QSfV0zxbIg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 02:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 654 (0x28e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA64C, serialNumber=566A6F34440AC9295ED8A002D5049F574CF16C88
        Validity
            Not Before: Sep 25 02:01:40 2026 GMT
            Not After : Oct  2 02:01:40 2026 GMT
        Subject: CN=6ab5d604-c2a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1d:07:de:7c:be:cc:f0:08:e1:c7:2a:10:56:
                    be:02:99:52:29:49:a5:74:0f:8f:e5:a4:c1:4a:43:
                    0c:c7:01:1a:30:c9:ec:88:e9:18:2f:e5:cb:58:ba:
                    2f:c0:72:4a:73:3b:19:d6:db:91:23:42:f2:77:f0:
                    8c:c4:31:bd:c6:28:a4:8c:44:bc:4c:79:0d:e5:65:
                    97:2b:4a:19:1f:a3:8a:b1:04:83:c2:9f:88:4b:2e:
                    64:02:f8:71:22:61:7d:a7:83:92:b7:5d:6c:ed:77:
                    51:24:c1:a2:60:72:36:75:b2:45:8a:11:0d:39:8e:
                    70:27:35:4b:5c:69:16:3d:9a:dd:58:5e:0f:f3:18:
                    cc:3d:35:e9:36:e5:be:33:3e:9f:f1:8d:93:74:38:
                    1b:e5:3f:67:4c:4a:19:6f:38:e6:30:3e:d0:fd:d4:
                    06:40:1b:35:d9:f6:1f:55:2e:13:da:0f:be:22:7c:
                    be:48:45:2e:9d:95:83:e1:5c:dc:40:03:49:c4:75:
                    31:36:0a:a5:bb:91:8e:f7:34:ae:83:8d:ae:ef:f3:
                    c5:29:c9:f4:6b:4b:6c:4b:82:73:7b:a8:f6:9d:3b:
                    cb:80:9c:f7:8e:93:5e:6d:be:11:9e:38:93:dd:ac:
                    70:54:21:7a:96:04:4b:05:f7:a2:cd:87:1d:b4:c6:
                    b8:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C0:8F:AF:55:32:57:34:ED:3C:5E:68:53:21:CC:EE:12:45:99:AF
            X509v3 Authority Key Identifier:
                keyid:56:6A:6F:34:44:0A:C9:29:5E:D8:A0:02:D5:04:9F:57:4C:F1:6C:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/VmpvNEQKySle2KAC1QSfV0zxbIg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VmpvNEQKySle2KAC1QSfV0zxbIg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/VmpvNEQKySle2KAC1QSfV0zxbIg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:64:15:f4:23:a4:30:0a:39:53:a5:62:ca:3c:35:e1:4b:46:
         94:5b:4d:a9:82:f3:ef:37:f2:6b:ba:00:93:b1:83:02:fb:ac:
         db:67:5b:ef:ac:79:97:e1:f8:0a:b1:8d:09:46:51:41:9d:32:
         af:c1:e2:e7:3f:5e:5c:c3:56:77:e0:61:3e:65:75:a9:55:ae:
         af:55:24:db:d2:ef:80:f4:85:13:3b:8f:8d:23:8e:91:cd:16:
         6a:73:14:f2:4c:b7:a1:8a:55:69:17:a7:66:15:80:47:bb:5b:
         60:ec:67:94:68:1c:4a:f4:82:02:2a:c8:ed:72:4a:44:20:07:
         f6:92:9b:6e:43:8d:09:7a:fc:2f:81:60:0d:eb:39:b5:c5:77:
         b9:67:4f:20:df:05:64:11:6f:a9:15:ce:85:23:81:cd:cb:5a:
         d2:f2:67:29:9a:30:95:c2:68:15:04:bb:2c:de:92:0e:7d:06:
         2f:f1:29:a6:05:84:f0:26:f8:12:6c:09:9b:93:c4:c9:ea:7c:
         b6:7c:46:ea:2c:e8:80:f2:b5:25:84:d8:ee:7b:a1:94:be:63:
         18:1a:d3:d3:3b:f0:a7:83:9e:c4:af:35:c8:8e:17:a3:b7:be:
         c0:8f:e5:b2:57:ad:be:d6:ff:80:80:f9:85:f0:05:b2:4d:61:
         2d:6f:55:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:26:47 2026 by rpki-client