Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917FFCC/11C7637816D311F1BAA410C8303D8C67/vodPnmx2-8t4sU-3D0Eqh5cfzkg.mft
File:                     vodPnmx2-8t4sU-3D0Eqh5cfzkg.mft (raw, json)
Hash identifier:          VGkQTL0Hy/orNXOUIeGvzrR09wvZFKwWj1C+pSHSyqI=
Subject key identifier:   49:95:CF:BD:03:61:DB:CE:08:F5:9B:A6:B3:0D:76:73:BF:63:AB:DC
Authority key identifier: BE:87:4F:9E:6C:76:FB:CB:78:B1:4F:B7:0F:41:2A:87:97:1F:CE:48
Certificate issuer:       /CN=A917FFCC/serialNumber=BE874F9E6C76FBCB78B14FB70F412A87971FCE48
Certificate serial:       71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vodPnmx2-8t4sU-3D0Eqh5cfzkg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917FFCC/11C7637816D311F1BAA410C8303D8C67/vodPnmx2-8t4sU-3D0Eqh5cfzkg.mft
Manifest number:          71
Signing time:             Fri 09 Oct 2026 08:36:59 +0000
Manifest this update:     Fri 09 Oct 2026 08:36:58 +0000
Manifest next update:     Fri 16 Oct 2026 08:36:58 +0000
Files and hashes:         1: vodPnmx2-8t4sU-3D0Eqh5cfzkg.crl (hash: 0GGHc3LyVkJAVz3ZRN3nIu62qutVns4oL8jmdOoT0pY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917FFCC/11C7637816D311F1BAA410C8303D8C67/vodPnmx2-8t4sU-3D0Eqh5cfzkg.crl
                          rsync://rpki.apnic.net/member_repository/A917FFCC/11C7637816D311F1BAA410C8303D8C67/vodPnmx2-8t4sU-3D0Eqh5cfzkg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vodPnmx2-8t4sU-3D0Eqh5cfzkg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 08:36:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113 (0x71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917FFCC, serialNumber=BE874F9E6C76FBCB78B14FB70F412A87971FCE48
        Validity
            Not Before: Oct  9 08:36:58 2026 GMT
            Not After : Oct 16 08:36:58 2026 GMT
        Subject: CN=6ac8a7ab-34da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a7:83:e0:08:51:63:9d:9f:72:a1:73:44:e9:
                    8a:23:53:1d:05:15:83:4e:b8:67:64:c1:2c:9b:eb:
                    e3:d2:a0:e1:36:a4:38:3a:e7:2e:11:c9:0b:48:66:
                    b8:90:de:65:56:21:cd:7d:25:2f:7e:5c:ff:59:3a:
                    ab:99:ad:73:1c:6a:d0:34:e4:72:10:a9:fe:79:54:
                    ac:1b:f6:12:32:9e:4d:31:6c:55:5f:50:d7:f9:e6:
                    a3:d0:b2:e2:9f:1e:62:45:67:18:db:09:71:f3:30:
                    1e:69:57:56:20:55:ea:69:98:e8:cf:2f:55:99:84:
                    7f:a1:fa:3a:cc:27:13:03:02:aa:da:c7:d7:c4:0f:
                    73:d2:46:0a:e5:7d:75:ca:62:36:3e:56:ee:61:18:
                    80:96:28:42:6d:54:d5:a8:27:d8:17:bc:eb:32:23:
                    ba:19:37:79:7d:e9:20:6f:08:f2:2c:bb:a8:53:21:
                    41:04:28:f7:91:2f:82:83:aa:49:bd:bf:f1:67:34:
                    d3:c4:ee:68:2b:84:6b:22:69:e0:ac:71:86:f0:e6:
                    58:fc:10:c7:e9:b6:c2:c9:fa:66:26:8b:f1:2a:e9:
                    c6:3d:1e:f8:a5:aa:1e:03:56:92:65:37:b4:11:3b:
                    59:7d:ed:79:7c:9e:e2:57:d1:bb:f0:b3:05:10:29:
                    51:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:95:CF:BD:03:61:DB:CE:08:F5:9B:A6:B3:0D:76:73:BF:63:AB:DC
            X509v3 Authority Key Identifier:
                keyid:BE:87:4F:9E:6C:76:FB:CB:78:B1:4F:B7:0F:41:2A:87:97:1F:CE:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917FFCC/11C7637816D311F1BAA410C8303D8C67/vodPnmx2-8t4sU-3D0Eqh5cfzkg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vodPnmx2-8t4sU-3D0Eqh5cfzkg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FFCC/11C7637816D311F1BAA410C8303D8C67/vodPnmx2-8t4sU-3D0Eqh5cfzkg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:dc:78:ee:88:a3:ef:1e:90:30:c1:9f:13:3e:51:26:86:04:
         58:02:c6:b8:32:14:2d:17:b3:a6:b6:dd:a0:54:d2:19:f3:df:
         f8:1a:73:33:6c:2c:92:3b:06:35:07:0b:bd:69:3b:bd:88:71:
         0b:48:45:98:c3:7b:10:65:c8:96:8e:3a:6d:7e:20:19:34:2c:
         31:dc:e7:2a:19:51:82:f1:a1:0f:03:3d:ef:a4:1c:c5:ec:d0:
         92:99:35:2d:85:40:8a:18:8d:2e:95:c5:4a:84:dc:15:7f:46:
         39:60:fd:c5:48:82:15:d9:a3:cf:57:b1:65:d5:d8:d6:e6:2b:
         b1:46:72:1d:87:10:63:dd:e4:b7:30:56:3d:cf:33:f8:7d:1a:
         ab:4c:c0:14:2c:41:ac:5a:32:09:f8:02:d5:e2:f7:6b:37:23:
         d6:e5:64:1b:cc:63:c1:78:a9:9e:3d:b3:32:89:e7:48:d7:f2:
         bc:46:78:e4:ca:b6:fb:c1:e3:84:ab:9d:d5:ff:7e:6e:ba:ee:
         6c:98:75:c1:8a:9b:09:8a:f8:d1:7f:bb:24:3d:f3:2c:0e:48:
         0d:45:d0:45:2a:6a:59:8f:4c:77:9e:da:b5:b5:1b:24:06:7b:
         c7:a3:67:7e:29:d5:28:30:e8:fe:3f:43:98:cf:fe:44:2d:07:
         9b:a2:02:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:46:19 2026 by rpki-client