Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.mft
File:                     vpHyHHoLwGQ389tbIUIIyHdO680.mft (raw, json)
Hash identifier:          8WuBPFbIy6N+KvyLrPWRGq4RIc9gsfPatohtsEway4U=
Subject key identifier:   E6:45:E0:AD:DC:D1:A2:D7:9F:03:6E:FA:70:AF:8A:12:9E:0E:2C:95
Authority key identifier: BE:91:F2:1C:7A:0B:C0:64:37:F3:DB:5B:21:42:08:C8:77:4E:EB:CD
Certificate issuer:       /CN=A912CEBD/serialNumber=BE91F21C7A0BC06437F3DB5B214208C8774EEBCD
Certificate serial:       0214
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpHyHHoLwGQ389tbIUIIyHdO680.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.mft
Manifest number:          020C
Signing time:             Mon 21 Sep 2026 03:07:06 +0000
Manifest this update:     Mon 21 Sep 2026 03:07:05 +0000
Manifest next update:     Mon 28 Sep 2026 03:07:05 +0000
Files and hashes:         1: vpHyHHoLwGQ389tbIUIIyHdO680.crl (hash: j/69m5bidK8SEmZQma419nUT7LNZv3pGHs9SfnKgwM8=)
                          2: F2AB0C4A68C011EFB9196160C4F9AE02.roa (hash: N6u8lktiSuz53pP54cFitasaAX+N1ZG30viqDycFfZ8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.crl
                          rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpHyHHoLwGQ389tbIUIIyHdO680.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 03:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 532 (0x214)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912CEBD, serialNumber=BE91F21C7A0BC06437F3DB5B214208C8774EEBCD
        Validity
            Not Before: Sep 21 03:07:05 2026 GMT
            Not After : Sep 28 03:07:05 2026 GMT
        Subject: CN=6ab09f5a-371d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7c:58:16:af:3d:58:23:ec:c1:5f:22:8f:76:
                    c8:b0:00:b0:0c:27:d8:b7:ae:35:8b:1d:85:4a:37:
                    55:66:57:e4:f3:6b:c8:57:fd:c1:5f:9d:80:4a:01:
                    fc:bd:2f:ea:a6:9d:16:b1:fa:e5:a2:4d:e9:2c:30:
                    6d:db:2e:00:02:67:bf:39:53:5d:fa:41:af:4f:a7:
                    57:68:44:05:8b:0e:2e:86:93:3a:80:45:86:26:8b:
                    be:2f:9d:cd:63:fa:71:90:5f:4e:7b:fc:ae:08:63:
                    0e:a4:31:3d:ec:02:d6:7c:3c:1a:89:da:70:56:67:
                    d2:6b:e9:66:25:00:64:37:bc:a3:81:c0:0b:ca:8c:
                    d9:81:b0:8b:cf:a8:8c:29:d2:a7:b7:ad:c2:47:48:
                    96:11:03:94:cc:98:b5:93:17:9d:d7:73:0a:38:da:
                    b5:0f:36:1d:6c:53:35:4f:14:25:88:5c:9d:3e:5a:
                    16:12:14:a2:db:c5:af:25:0c:5e:85:8f:32:f1:9f:
                    4a:e0:51:50:5a:69:b3:52:d9:96:95:19:87:f3:d3:
                    75:de:24:1e:7a:83:b9:ce:72:07:c6:4f:c8:ea:34:
                    a9:cd:2d:de:66:b7:b0:12:a9:f4:1c:e1:9c:9f:68:
                    92:cb:bd:40:33:4a:8b:a5:54:d0:0a:be:49:4b:3f:
                    21:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:45:E0:AD:DC:D1:A2:D7:9F:03:6E:FA:70:AF:8A:12:9E:0E:2C:95
            X509v3 Authority Key Identifier:
                keyid:BE:91:F2:1C:7A:0B:C0:64:37:F3:DB:5B:21:42:08:C8:77:4E:EB:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpHyHHoLwGQ389tbIUIIyHdO680.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:91:5c:ba:7a:f7:9a:e8:d4:26:ce:cf:39:ff:3b:7a:e5:b1:
         48:47:52:4c:fd:29:13:c6:fe:37:15:b8:1e:97:c1:21:05:8c:
         57:b3:8c:21:29:b7:fa:8e:c4:07:96:63:b2:de:24:bf:ba:dd:
         d6:ee:d1:9f:93:b0:ca:5e:9a:70:60:73:e5:88:2c:e9:b8:9c:
         57:ff:5d:f4:b4:5c:0b:13:0f:f2:7e:ee:2f:92:73:ef:b2:e3:
         23:ea:d0:73:f7:55:52:0c:11:6f:57:bc:4c:23:03:50:ce:46:
         e3:2a:3a:dc:56:b9:5c:7f:4c:d8:fc:e8:91:7a:9c:a8:6c:df:
         48:0c:2d:65:2e:fc:04:63:d0:fb:6a:15:c4:c5:f8:8c:3a:2b:
         e7:43:76:fa:5c:86:c7:3f:b3:a4:e3:21:a1:8e:01:23:b4:29:
         8f:bb:33:e8:f4:ec:e5:a4:14:45:2a:95:51:0a:fc:04:d1:ed:
         74:27:65:5d:d9:e1:8f:d0:b0:f7:4d:f0:d9:5a:5e:ff:ae:01:
         b8:02:a9:d7:87:54:e0:ac:0b:8d:fe:cb:82:64:32:dd:fc:bc:
         b3:da:7c:48:a6:a0:c3:b5:8a:80:bc:9c:37:84:a1:1e:fb:65:
         fa:da:4d:d4:78:31:ce:f8:eb:30:2b:de:64:41:ad:ee:a8:77:
         bf:02:b7:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:39:10 2026 by rpki-client