Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.mft
File:                     VAR9J873NG9Bde-sc0SUrbsFe1U.mft (raw, json)
Hash identifier:          YEn2cRw1SRf5c9bxbBhng7U6Owu1ghsRFDJi73wwntM=
Subject key identifier:   0D:1B:1B:49:D2:31:B3:8E:47:22:82:EC:40:C9:48:FD:31:06:A8:28
Authority key identifier: 54:04:7D:27:CE:F7:34:6F:41:75:EF:AC:73:44:94:AD:BB:05:7B:55
Certificate issuer:       /CN=A91127C1/serialNumber=54047D27CEF7346F4175EFAC734494ADBB057B55
Certificate serial:       0ACE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VAR9J873NG9Bde-sc0SUrbsFe1U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.mft
Manifest number:          0AC3
Signing time:             Sat 10 Oct 2026 19:32:13 +0000
Manifest this update:     Sat 10 Oct 2026 19:32:12 +0000
Manifest next update:     Sat 17 Oct 2026 19:32:12 +0000
Files and hashes:         1: VAR9J873NG9Bde-sc0SUrbsFe1U.crl (hash: GMyJ725UNkFm77v+Q7MvxK9DdCHAySbyZsZFmfGDsbw=)
                          2: 3492D2F083BA11EA8728F076C4F9AE02.roa (hash: Zdi6fMt+tPDgT+ACX97dCbP+zzmo4Zw2wzFoqTQJgBg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.crl
                          rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VAR9J873NG9Bde-sc0SUrbsFe1U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 19:32:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2766 (0xace)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91127C1, serialNumber=54047D27CEF7346F4175EFAC734494ADBB057B55
        Validity
            Not Before: Oct 10 19:32:12 2026 GMT
            Not After : Oct 17 19:32:12 2026 GMT
        Subject: CN=6aca92bd-219f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:53:1a:d7:ce:5d:ba:c2:82:3a:56:46:b6:bc:
                    c0:06:56:bc:9d:0a:8a:4b:09:e1:99:53:d4:a5:79:
                    a7:c5:12:d2:65:0a:cf:06:2b:6e:36:97:1d:cc:ac:
                    73:56:0b:b3:f6:40:cd:15:31:b1:0e:e3:41:69:f9:
                    a3:4b:1f:bd:f5:4f:e8:26:20:8f:1d:2b:06:39:f8:
                    cb:52:26:ef:bc:b4:ae:ca:2c:79:1d:07:ac:c5:27:
                    4d:15:71:35:88:61:9a:a7:9c:7b:6f:09:f2:e1:d8:
                    d5:76:d0:85:56:95:d3:e8:48:08:32:db:5b:e9:9a:
                    37:3e:da:64:fd:d4:69:b5:e4:ec:a0:1e:4e:1d:f7:
                    9a:ff:9c:48:24:b6:00:00:bb:53:ef:5f:ff:cf:2f:
                    90:64:76:31:0a:ad:9b:9d:04:58:61:d5:7f:42:c5:
                    69:df:b7:60:39:ca:55:2b:62:be:7d:c4:79:a1:48:
                    53:1b:13:11:91:ff:d1:21:78:86:c7:77:2d:25:89:
                    a5:54:52:88:f3:77:25:5b:9a:69:45:29:ec:0f:68:
                    fc:29:d4:ae:7f:f7:f0:a7:f5:2c:89:6f:4b:22:69:
                    dc:83:f6:35:36:07:71:ee:26:3c:b3:09:00:52:41:
                    2a:d5:a0:68:1c:58:da:17:88:2a:f5:40:3a:dc:f6:
                    ab:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:1B:1B:49:D2:31:B3:8E:47:22:82:EC:40:C9:48:FD:31:06:A8:28
            X509v3 Authority Key Identifier:
                keyid:54:04:7D:27:CE:F7:34:6F:41:75:EF:AC:73:44:94:AD:BB:05:7B:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VAR9J873NG9Bde-sc0SUrbsFe1U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:18:f3:c3:9c:41:3a:49:eb:45:4f:19:94:9b:17:d5:25:01:
         95:95:8c:d1:9d:48:19:9f:71:b3:03:18:70:7d:1c:1b:34:cc:
         0d:3d:93:df:15:4f:e7:e3:d4:b4:a9:6b:4a:18:1c:d2:ee:ee:
         fd:fe:ac:f9:f5:36:6b:0d:00:72:b9:da:cd:f2:4b:57:f3:8c:
         c2:d1:25:22:07:fd:64:b8:64:3a:fa:8c:8a:3e:a3:50:48:74:
         ca:9b:c7:5d:73:7e:1f:9e:3a:62:25:4c:34:69:a0:6f:a4:30:
         ee:39:a9:9f:fc:88:86:17:a1:d0:77:0d:ec:06:e0:df:ac:b7:
         16:53:61:23:6b:d3:27:f7:36:41:d5:8a:79:d5:ad:b0:76:01:
         99:e2:5b:26:e7:9e:da:2b:f5:c7:6d:f5:47:03:4e:06:bc:4d:
         68:14:8f:f2:70:4c:fb:cd:59:ff:8f:17:81:1a:41:2d:e9:07:
         b3:c7:a5:25:7f:e5:6c:55:9e:74:a2:88:3b:8e:33:27:76:a3:
         22:ed:43:e7:de:4f:0c:a1:55:ea:d2:19:c7:96:ba:78:39:47:
         98:c4:7d:ae:c2:79:c5:bb:73:11:fd:ea:d4:d2:18:e0:df:8a:
         4f:88:2f:ff:1a:17:dd:8b:65:21:c9:7d:55:f5:e2:d7:d9:c4:
         fa:96:7e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:50:39 2026 by rpki-client