Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft
File:                     VTOnxXv02x5Tj5534LSGi4-QxYI.mft (raw, json)
Hash identifier:          fZVW+0SrH9eWnzVEzU6JV3bnHzSFxCMp3KgKiWi3iu8=
Subject key identifier:   0A:83:CE:F7:0E:46:A8:55:66:D0:CE:19:29:5A:8D:18:F1:2E:BC:C6
Authority key identifier: 55:33:A7:C5:7B:F4:DB:1E:53:8F:9E:77:E0:B4:86:8B:8F:90:C5:82
Certificate issuer:       /CN=A91276FA/serialNumber=5533A7C57BF4DB1E538F9E77E0B4868B8F90C582
Certificate serial:       0189
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft
Manifest number:          0175
Signing time:             Mon 21 Sep 2026 04:49:14 +0000
Manifest this update:     Mon 21 Sep 2026 04:49:14 +0000
Manifest next update:     Mon 28 Sep 2026 04:49:14 +0000
Files and hashes:         1: VTOnxXv02x5Tj5534LSGi4-QxYI.crl (hash: 8l3DF5C9rPTthDQAZShAEXcy+Fx9Wm3Yc+kfJno4MSA=)
                          2: 5D8DFB5684CA11EF9F92574DC4F9AE02.roa (hash: ui+QIvOSSm4JsqVWIgvAnE+tPuj6skIC4z/Y5KBBL/w=)
                          3: 7EC9705C84CA11EFA41F8D4DC4F9AE02.roa (hash: VkfTGGoNVUsbEcJxM7s1vcrxda5Fy3LpRVjxl0XTbMI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.crl
                          rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 04:45:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 393 (0x189)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91276FA, serialNumber=5533A7C57BF4DB1E538F9E77E0B4868B8F90C582
        Validity
            Not Before: Sep 21 04:49:14 2026 GMT
            Not After : Sep 28 04:49:14 2026 GMT
        Subject: CN=6ab0b74a-77bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a3:51:5a:86:11:15:91:7d:8c:bf:ff:b5:45:
                    75:8c:6f:ae:30:81:59:db:c7:51:51:25:e5:44:78:
                    0d:39:10:ae:cb:33:bc:58:77:5e:22:70:6d:41:d0:
                    0b:55:a0:1e:45:b4:0e:a5:de:4c:a9:97:45:d4:82:
                    d3:b0:33:08:e7:af:41:92:54:b0:3a:74:35:55:c8:
                    37:5e:08:2f:69:22:a1:69:b0:36:e5:cb:36:cf:71:
                    c8:c1:60:9c:ca:88:48:44:b0:71:1d:73:d4:12:ad:
                    e4:ea:75:17:21:9a:85:13:77:be:3c:75:98:a4:1a:
                    e0:ef:fa:0f:be:86:c6:14:fb:13:b6:91:09:86:0b:
                    fc:f0:98:0f:5b:ae:e3:a1:17:f9:3c:c5:b1:c5:6d:
                    c1:dd:e4:06:93:1a:a3:3d:ed:f7:4a:47:83:7d:e9:
                    b5:0d:60:8e:42:b4:39:4a:85:de:66:86:2b:aa:9f:
                    43:f0:6b:24:69:d4:f7:bf:a4:83:f8:d7:04:01:3c:
                    57:0e:ce:d0:2f:f9:ac:fa:75:4e:96:08:ac:6b:3e:
                    6c:67:6e:d4:bd:2f:d3:51:b4:6c:aa:70:fe:78:04:
                    c9:b0:9d:61:c8:8c:40:32:f6:4c:13:d7:9e:76:44:
                    bb:32:7e:51:37:d2:6d:be:6d:78:2b:80:b3:1a:21:
                    88:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:83:CE:F7:0E:46:A8:55:66:D0:CE:19:29:5A:8D:18:F1:2E:BC:C6
            X509v3 Authority Key Identifier:
                keyid:55:33:A7:C5:7B:F4:DB:1E:53:8F:9E:77:E0:B4:86:8B:8F:90:C5:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:39:33:73:e8:1f:a4:ee:91:41:4a:c6:9e:0d:6c:be:db:39:
         15:12:16:0c:19:0c:ef:8d:8b:b3:69:65:12:00:45:d0:72:6c:
         8b:00:d0:35:bd:7e:2e:25:5f:e1:0e:cc:8e:13:0f:9d:b3:8f:
         39:b6:65:10:c7:1b:88:7f:74:08:ec:90:c3:2f:c0:90:a2:81:
         e2:cf:cf:34:ae:5a:03:72:87:95:bb:72:17:b9:dc:fb:d0:9f:
         69:06:b0:9d:f2:a9:a9:95:a8:ba:2d:3c:78:e6:da:64:68:e2:
         5b:9d:f2:4a:54:eb:b6:6f:c5:0c:a3:77:15:d1:62:1e:48:53:
         82:ed:9d:39:92:97:1c:b9:0b:c4:71:f5:dc:5c:e2:fa:31:09:
         3f:b0:c7:a8:e2:dc:17:ad:d5:5e:1a:0d:fb:22:bf:98:ce:b2:
         ca:c0:ce:da:d9:a4:fb:5a:13:db:92:62:f4:6a:ad:13:35:79:
         48:76:70:4e:ff:c1:d5:eb:10:18:3b:68:05:b5:d2:d0:e2:fc:
         62:b0:da:93:67:ce:af:68:3d:a5:9c:91:1c:e5:24:33:41:31:
         52:98:04:39:0f:90:a7:5a:ec:8f:d4:2c:f6:42:c9:62:54:fc:
         dd:d6:04:2c:59:7e:00:f1:1c:be:93:71:c9:f5:43:02:50:6a:
         4a:55:f5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:23:55 2026 by rpki-client