Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9165746/7C4024565F3511F1A3AE2F757E47A888/VVw2dp0ODDACycjXBRYwXZYTazg.mft
File:                     VVw2dp0ODDACycjXBRYwXZYTazg.mft (raw, json)
Hash identifier:          Nb+rCf4UNMx7uLA507cmF1CqBTrWVZT45YW8uQZNEas=
Subject key identifier:   76:52:11:53:FE:A6:4A:49:F3:6C:C5:39:8D:0B:30:11:E0:B7:B1:F5
Authority key identifier: 55:5C:36:76:9D:0E:0C:30:02:C9:C8:D7:05:16:30:5D:96:13:6B:38
Certificate issuer:       /CN=A9165746/serialNumber=555C36769D0E0C3002C9C8D70516305D96136B38
Certificate serial:       43
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVw2dp0ODDACycjXBRYwXZYTazg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165746/7C4024565F3511F1A3AE2F757E47A888/VVw2dp0ODDACycjXBRYwXZYTazg.mft
Manifest number:          42
Signing time:             Fri 09 Oct 2026 09:15:06 +0000
Manifest this update:     Fri 09 Oct 2026 09:15:05 +0000
Manifest next update:     Fri 16 Oct 2026 09:15:05 +0000
Files and hashes:         1: VVw2dp0ODDACycjXBRYwXZYTazg.crl (hash: Pcby9I4xBm7JiP3BvctFKSQN9dXdVCzy7Nq2+6kJqRA=)
                          2: 26B060C25F3611F1918BCC0A8047A888.roa (hash: 75R6dGO5HakR3AKLxJh4RDBgHy3ftrxyVx3QxqSSZSw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165746/7C4024565F3511F1A3AE2F757E47A888/VVw2dp0ODDACycjXBRYwXZYTazg.crl
                          rsync://rpki.apnic.net/member_repository/A9165746/7C4024565F3511F1A3AE2F757E47A888/VVw2dp0ODDACycjXBRYwXZYTazg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVw2dp0ODDACycjXBRYwXZYTazg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 09:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165746, serialNumber=555C36769D0E0C3002C9C8D70516305D96136B38
        Validity
            Not Before: Oct  9 09:15:05 2026 GMT
            Not After : Oct 16 09:15:05 2026 GMT
        Subject: CN=6ac8b09a-efae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:dd:e4:01:04:82:07:d9:5b:29:b9:50:75:6a:
                    26:59:6e:fb:c5:a8:da:21:83:b3:45:91:16:a6:aa:
                    01:34:3e:bf:87:91:fe:78:f5:fc:10:b5:df:7d:07:
                    16:bc:14:bf:68:40:af:e1:1b:a6:3f:c6:b6:0d:af:
                    82:f1:f9:8b:08:05:51:6b:a8:59:ef:03:22:03:4d:
                    bf:10:46:a8:74:60:11:3e:66:a3:36:a4:09:50:86:
                    59:44:bd:05:6a:78:dc:bd:f4:38:2f:8d:50:80:aa:
                    7e:93:28:02:95:20:0c:d0:1c:9a:00:bf:63:6b:e7:
                    c8:7e:6d:4b:f5:15:27:e2:ec:87:0d:1c:2a:1b:28:
                    a1:5d:b1:d4:52:a9:a3:bd:fd:cd:c3:48:38:f8:b0:
                    fa:d2:31:e2:22:7c:67:2b:e0:fb:aa:04:2b:7b:84:
                    ae:b1:2e:67:48:a0:60:66:21:60:a1:5e:55:e6:89:
                    da:c0:8b:98:bd:65:86:95:0c:9a:57:ec:2b:e7:b1:
                    f5:f8:9d:eb:f2:ac:48:43:55:fd:8e:d6:75:5a:0c:
                    0f:55:b6:f8:62:eb:36:7d:72:b2:0f:aa:2c:51:49:
                    de:f6:c4:04:2e:fb:8d:eb:37:8e:04:bd:53:cd:0d:
                    35:57:d7:bd:cd:57:01:dd:49:25:cf:b3:d5:e9:eb:
                    29:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:52:11:53:FE:A6:4A:49:F3:6C:C5:39:8D:0B:30:11:E0:B7:B1:F5
            X509v3 Authority Key Identifier:
                keyid:55:5C:36:76:9D:0E:0C:30:02:C9:C8:D7:05:16:30:5D:96:13:6B:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165746/7C4024565F3511F1A3AE2F757E47A888/VVw2dp0ODDACycjXBRYwXZYTazg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVw2dp0ODDACycjXBRYwXZYTazg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165746/7C4024565F3511F1A3AE2F757E47A888/VVw2dp0ODDACycjXBRYwXZYTazg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:0d:ef:96:ba:ab:c9:e3:f4:6a:d6:85:ec:b3:db:da:3d:04:
         b5:0d:45:5e:c1:0f:5d:ba:69:dd:13:cc:1d:34:e8:1f:75:b1:
         dd:61:c4:8e:6d:e1:fe:d8:b7:bb:dd:04:4b:0c:ff:40:f9:07:
         f1:26:d1:06:5b:c2:53:8f:4d:26:2d:dc:7b:ba:e8:3a:ab:04:
         85:93:00:25:f9:2b:f4:c3:db:f0:c8:03:96:dd:66:f5:6a:96:
         84:67:21:13:63:55:60:30:f0:aa:bc:22:5d:02:3c:3d:71:58:
         71:63:39:17:a7:2f:ee:4f:cb:fb:21:8e:b0:23:be:bf:94:13:
         68:a4:98:ee:4b:2a:b4:ac:dd:aa:c5:e5:47:4f:55:b7:7a:0e:
         4b:98:cd:b1:ed:20:95:56:bd:ee:d5:44:4c:57:e0:21:3c:fe:
         7e:fb:88:54:b3:4f:61:f0:5d:3c:c8:95:bd:c8:08:8d:9a:91:
         37:36:64:be:fd:a7:16:e4:20:b9:9f:f4:44:55:8f:df:0b:5c:
         18:cf:05:0e:6c:d5:e1:94:85:3d:ac:2b:3f:72:59:60:57:56:
         47:89:34:94:56:8d:3b:75:1b:aa:56:ca:6b:61:79:ab:ad:b2:
         c0:ea:fa:74:5f:1b:f7:bf:c0:26:e9:fc:20:b2:17:27:2b:7f:
         3a:ab:9c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:23:26 2026 by rpki-client