Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft
File:                     Vg3ED_OlCfnv21Jg7huzhi222N8.mft (raw, json)
Hash identifier:          K/qONn+52udWWcXE+Ozfed9jkpAZh11lawAwhxLs4N4=
Subject key identifier:   24:A3:8E:B3:26:5A:37:B7:F2:05:49:56:7E:67:B8:2A:E2:35:2D:35
Authority key identifier: 56:0D:C4:0F:F3:A5:09:F9:EF:DB:52:60:EE:1B:B3:86:2D:B6:D8:DF
Certificate issuer:       /CN=A912E926/serialNumber=560DC40FF3A509F9EFDB5260EE1BB3862DB6D8DF
Certificate serial:       0278
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vg3ED_OlCfnv21Jg7huzhi222N8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft
Manifest number:          0273
Signing time:             Sun 27 Sep 2026 02:19:59 +0000
Manifest this update:     Sun 27 Sep 2026 02:19:58 +0000
Manifest next update:     Sun 04 Oct 2026 02:19:58 +0000
Files and hashes:         1: Vg3ED_OlCfnv21Jg7huzhi222N8.crl (hash: 2h5d2whR0F/cPst2J85jwb2yGElTcv/HgpBTXxmRito=)
                          2: 46BF7E7CFA0611ED802A1C29C4F9AE02.roa (hash: UyrWlJ/K5ewEnl3nB2amv545KdOMLbjx4FV1Gagszyg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.crl
                          rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vg3ED_OlCfnv21Jg7huzhi222N8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 02:19:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 632 (0x278)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E926, serialNumber=560DC40FF3A509F9EFDB5260EE1BB3862DB6D8DF
        Validity
            Not Before: Sep 27 02:19:58 2026 GMT
            Not After : Oct  4 02:19:58 2026 GMT
        Subject: CN=6ab87d4f-17c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:31:9d:1d:58:d6:96:60:f4:d1:f5:83:79:45:
                    34:c9:49:20:15:23:4f:7a:1d:97:6c:34:ec:dd:ff:
                    08:f1:77:11:df:78:83:f1:2a:91:03:a5:be:64:30:
                    f0:e5:81:19:df:1d:16:0d:48:c8:f6:64:d7:3b:de:
                    b8:11:9f:4c:9f:35:46:5b:0f:4c:17:86:7b:92:33:
                    cc:f6:4b:e2:9b:8c:aa:56:7a:77:0a:de:91:03:70:
                    e0:3e:1a:3e:e3:4d:41:bd:a4:a5:fe:8b:9c:9e:4b:
                    a7:fd:55:53:36:43:ea:15:94:c8:ed:6a:2b:cd:c3:
                    9d:54:7d:92:54:d9:71:17:7f:77:65:9c:fd:85:36:
                    8c:ae:27:80:1b:87:ee:90:3d:c3:e3:68:5b:90:fd:
                    0f:48:d7:e2:03:6a:13:7e:d0:38:a9:32:59:da:c9:
                    95:29:82:21:37:ee:56:fb:e1:9f:3e:0f:58:31:a0:
                    a7:72:93:7c:59:85:5d:33:61:e4:4b:91:18:07:5a:
                    12:c4:29:a9:b8:91:c2:1b:e4:d4:fb:62:ae:fc:85:
                    90:5b:6a:10:65:9c:46:9c:f6:56:f0:e1:99:f6:d3:
                    96:a6:d5:05:aa:7b:31:6d:32:18:26:97:dd:cf:69:
                    1e:f9:73:d8:d8:ac:df:9b:7a:0d:3e:55:c0:e0:ea:
                    58:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A3:8E:B3:26:5A:37:B7:F2:05:49:56:7E:67:B8:2A:E2:35:2D:35
            X509v3 Authority Key Identifier:
                keyid:56:0D:C4:0F:F3:A5:09:F9:EF:DB:52:60:EE:1B:B3:86:2D:B6:D8:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vg3ED_OlCfnv21Jg7huzhi222N8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:27:d6:10:dc:28:14:ee:8d:7d:c9:de:1d:2d:cc:82:83:47:
         54:aa:b0:94:5c:1d:eb:26:a9:eb:73:f6:49:4f:46:ae:c3:5d:
         ce:de:f8:d1:38:e9:83:d9:81:b3:5c:d5:b3:c2:29:f6:c2:f6:
         96:6b:69:a0:c0:66:03:35:eb:be:ae:b4:2f:ba:43:98:fb:bd:
         40:df:9a:f8:50:4d:66:bf:a7:3b:9a:e9:ac:33:d6:1f:d3:ae:
         4f:b8:63:9b:f7:df:34:ff:7e:bd:56:f6:bf:2a:98:f8:f4:d9:
         b9:69:dc:1f:f7:9f:79:d9:e1:57:3e:88:cf:30:2e:31:36:a2:
         51:63:91:99:fe:11:05:69:fc:39:97:42:b8:e9:38:0a:99:e0:
         b7:c3:cb:4f:ed:63:2c:b0:43:83:10:2e:b5:42:d4:9c:bf:bf:
         95:b8:b6:da:fc:f7:51:a8:a0:f7:b5:a1:b8:82:85:47:d0:90:
         92:e6:43:fd:cc:7e:dd:06:c5:0e:05:95:8e:48:17:5d:51:d0:
         3d:ba:e1:46:ef:2a:4f:42:21:0e:98:34:b8:7e:a9:dc:77:70:
         96:b6:52:fd:4a:66:b1:29:a2:e4:11:10:ab:0f:53:84:3d:55:
         c5:7e:54:21:fb:5d:21:8e:20:ff:15:e6:dd:0b:07:6b:57:d1:
         0b:a0:fe:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 23:51:49 2026 by rpki-client