Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft
File:                     vhLS7vQqHJ3CpXIERscDFsfCBlA.mft (raw, json)
Hash identifier:          mbO7tspTbNkKVhuVoi4Y+8G3BmMqO2xtMXeekGKmSVU=
Subject key identifier:   B0:CC:03:57:70:1D:C3:A9:A1:DD:07:15:28:5D:2E:F4:38:79:81:5D
Authority key identifier: BE:12:D2:EE:F4:2A:1C:9D:C2:A5:72:04:46:C7:03:16:C7:C2:06:50
Certificate issuer:       /CN=A9174A6B/serialNumber=BE12D2EEF42A1C9DC2A5720446C70316C7C20650
Certificate serial:       290A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft
Manifest number:          28DE
Signing time:             Tue 22 Sep 2026 15:33:05 +0000
Manifest this update:     Tue 22 Sep 2026 15:33:04 +0000
Manifest next update:     Tue 29 Sep 2026 15:33:04 +0000
Files and hashes:         1: vhLS7vQqHJ3CpXIERscDFsfCBlA.crl (hash: RyumESTggmlRp9FyQFv7OYBI8b1WETksXfF8bX8UvMM=)
                          2: 5UXIKmWqo-EBUfAdqb3AfiGNwt4.asa (hash: EGbS76h1brvYeOhgFfCzAj/zLNdTcv0xYc1rIzDyMRA=)
                          3: RjtJADDV0_xVIHKM6AxMwjiOpJc.asa (hash: cizTmtMukagaIDONuHUr+Znzj5qm8V+AxuhTGLPEf8A=)
                          4: B70AE7D20C6B11EC82638A40C4F9AE02.roa (hash: FfIhVgOobJG4Dwk4yARQxeFwaeZwMJUebKyXm+2RqRM=)
                          5: 5B7F22440AF811ECB423A671C4F9AE02.roa (hash: TspezYM4IRlokwPfjhl3bMH0Gn30QinDMLtE8ZCLHTk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.crl
                          rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 15:33:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10506 (0x290a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174A6B, serialNumber=BE12D2EEF42A1C9DC2A5720446C70316C7C20650
        Validity
            Not Before: Sep 22 15:33:04 2026 GMT
            Not After : Sep 29 15:33:04 2026 GMT
        Subject: CN=6ab29fb0-f595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:a9:cf:5c:d9:42:03:dd:15:2f:d0:33:e5:1a:
                    f6:8d:a1:5c:dd:b0:dc:e3:9b:0f:ac:a7:5c:59:38:
                    aa:e0:67:2d:5d:2f:cb:ec:57:06:3d:2b:0b:8e:26:
                    98:17:6a:a4:ae:e3:5c:77:0f:7d:a3:1d:ca:63:01:
                    05:11:81:dc:08:29:c9:92:1f:b4:70:05:9c:95:0a:
                    f2:07:25:9b:4f:b8:c0:5b:02:85:11:36:16:03:81:
                    ea:8b:99:2f:82:c7:cb:3a:d8:9d:73:46:18:84:df:
                    9a:4b:55:80:e4:f3:69:7d:d4:9c:ac:6a:0e:05:fe:
                    3a:a3:2a:81:3e:bc:74:bf:2d:d3:c0:87:53:f5:91:
                    5c:c6:91:a0:f1:1c:61:05:b8:d2:03:2f:91:36:a7:
                    97:5f:44:fb:87:bc:58:d1:12:4e:5f:0e:4f:7f:98:
                    15:a3:fa:a6:55:80:4e:53:df:41:3e:ac:77:31:bd:
                    d2:fc:f8:de:96:58:50:50:b3:e7:3c:e5:7a:21:fd:
                    81:d3:21:10:f1:28:66:42:e9:ff:0f:b1:14:cb:45:
                    16:4c:67:88:3d:3a:ed:98:cf:d9:09:0e:34:25:d2:
                    79:87:73:e2:28:9d:c5:8f:54:50:46:d4:a5:7b:b2:
                    20:42:82:9c:20:62:6c:4d:05:c6:d2:c9:58:10:08:
                    24:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:CC:03:57:70:1D:C3:A9:A1:DD:07:15:28:5D:2E:F4:38:79:81:5D
            X509v3 Authority Key Identifier:
                keyid:BE:12:D2:EE:F4:2A:1C:9D:C2:A5:72:04:46:C7:03:16:C7:C2:06:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:63:98:d9:fc:a1:85:77:11:d5:ed:03:f5:b3:3e:d1:66:95:
         33:ed:e2:94:a1:31:90:05:2f:74:41:b8:7f:c2:bf:0c:a2:40:
         f7:74:dd:ab:84:96:0b:b6:ac:04:b2:75:90:57:f2:9f:6e:1e:
         6f:21:bc:8b:18:62:5b:1f:90:10:07:4a:7b:5d:81:59:b0:10:
         42:86:35:13:c7:9a:cb:b6:ba:f6:8d:d3:53:56:8f:60:57:2b:
         8b:e9:b6:87:61:3c:24:12:ad:aa:09:cf:b3:e3:12:23:83:a1:
         8c:1c:a0:2e:bb:b3:d3:4a:05:29:c2:d6:04:af:2e:d0:96:b0:
         48:c2:cf:de:b4:0e:14:e3:81:f1:6f:82:47:36:e8:e5:ff:d2:
         0d:6d:f8:fc:44:fb:d6:f1:a0:fb:5a:01:d0:ec:a6:39:d6:5d:
         e0:ec:25:85:4e:7a:c5:11:27:bd:83:41:21:1c:cf:bd:a1:b6:
         eb:50:48:38:17:3d:46:8e:d9:20:dc:6f:62:81:ab:5f:b0:04:
         80:fd:86:4c:11:08:e5:c2:ca:40:3f:76:22:a9:82:2b:8e:db:
         2a:4d:c1:be:f8:c3:50:9f:51:8f:14:2d:f6:4d:3a:bc:c0:c9:
         81:38:ad:5c:5b:75:e0:e2:4e:8d:e2:f9:9c:d1:e7:b6:25:9b:
         dd:3f:b0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:39:16 2026 by rpki-client