Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E756/7591BEBE920011F18B018CA75D11F970/VCbPAAypXtlX-zh4RmES3qX5YzE.mft
File:                     VCbPAAypXtlX-zh4RmES3qX5YzE.mft (raw, json)
Hash identifier:          8kHGxbRR8nid3gbcrrHL8lr0WHAPO9mOeRy2QZTtenY=
Subject key identifier:   79:6D:17:23:A9:F2:84:24:E6:13:6B:D5:27:FD:A0:1B:84:1E:6E:73
Authority key identifier: 54:26:CF:00:0C:A9:5E:D9:57:FB:38:78:46:61:12:DE:A5:F9:63:31
Certificate issuer:       /CN=A918E756/serialNumber=5426CF000CA95ED957FB3878466112DEA5F96331
Certificate serial:       1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCbPAAypXtlX-zh4RmES3qX5YzE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E756/7591BEBE920011F18B018CA75D11F970/VCbPAAypXtlX-zh4RmES3qX5YzE.mft
Manifest number:          1B
Signing time:             Mon 21 Sep 2026 09:00:01 +0000
Manifest this update:     Mon 21 Sep 2026 09:00:00 +0000
Manifest next update:     Mon 28 Sep 2026 09:00:00 +0000
Files and hashes:         1: VCbPAAypXtlX-zh4RmES3qX5YzE.crl (hash: yeJvqfFZJ4R0SkwvhM6bCFNc2PziA4rsQXxTZG2hC/U=)
                          2: 8977E636920211F1A2698D205E11F970.roa (hash: 3eJTC2jfzPpwkH7VciNnlLOn+MVAn1jhTqs6n6Rzetk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E756/7591BEBE920011F18B018CA75D11F970/VCbPAAypXtlX-zh4RmES3qX5YzE.crl
                          rsync://rpki.apnic.net/member_repository/A918E756/7591BEBE920011F18B018CA75D11F970/VCbPAAypXtlX-zh4RmES3qX5YzE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCbPAAypXtlX-zh4RmES3qX5YzE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E756, serialNumber=5426CF000CA95ED957FB3878466112DEA5F96331
        Validity
            Not Before: Sep 21 09:00:00 2026 GMT
            Not After : Sep 28 09:00:00 2026 GMT
        Subject: CN=6ab0f211-af9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:9f:9f:5d:b0:80:f2:03:c0:2a:de:61:22:a4:
                    27:3e:f5:6a:bd:61:a0:5f:7a:ad:97:ef:c9:42:90:
                    4b:d2:e1:a7:1f:9e:fd:a8:78:a8:6b:a7:8a:c2:5f:
                    6f:f9:3a:af:aa:bb:2d:93:f5:58:83:36:91:a2:8b:
                    a0:0d:85:2f:bc:6e:06:0a:0d:60:a7:53:4b:2b:67:
                    24:9d:18:43:81:1c:a5:50:c7:03:ef:c2:33:90:54:
                    60:e7:d3:39:16:37:4f:21:ad:00:02:2f:85:c5:7c:
                    b4:7c:8c:e2:1b:19:5c:b5:75:3d:56:58:34:d2:e2:
                    30:dc:c9:d6:9b:7b:51:40:55:fa:b0:35:01:5b:40:
                    ad:a8:8e:06:ba:b3:aa:ec:50:82:d4:03:3d:b5:26:
                    61:68:e6:cb:35:12:11:a8:72:d4:8c:b1:25:ef:80:
                    d9:b5:f4:60:23:1b:5c:d7:0a:43:a3:6b:aa:74:e5:
                    c2:8f:7d:a0:e8:32:53:0a:75:46:cc:84:7b:5d:ba:
                    b8:60:34:80:8d:7f:61:c0:41:a5:b2:27:12:de:3b:
                    38:db:69:4c:0d:2b:a5:2d:ec:20:31:61:43:e4:12:
                    bf:14:9c:55:70:c3:03:5d:df:4f:2c:cb:59:4e:9f:
                    6b:10:d5:a2:d7:0c:65:0f:35:e8:13:cb:69:b5:32:
                    37:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:6D:17:23:A9:F2:84:24:E6:13:6B:D5:27:FD:A0:1B:84:1E:6E:73
            X509v3 Authority Key Identifier:
                keyid:54:26:CF:00:0C:A9:5E:D9:57:FB:38:78:46:61:12:DE:A5:F9:63:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E756/7591BEBE920011F18B018CA75D11F970/VCbPAAypXtlX-zh4RmES3qX5YzE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCbPAAypXtlX-zh4RmES3qX5YzE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E756/7591BEBE920011F18B018CA75D11F970/VCbPAAypXtlX-zh4RmES3qX5YzE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:d8:f9:30:7a:0a:08:6d:bd:69:49:f9:17:09:5c:dd:71:74:
         44:25:43:c8:e0:0e:27:3c:14:c4:c4:59:fd:a8:99:6b:f0:a8:
         c6:63:d2:5f:13:b3:a6:f6:24:51:16:7d:a6:c9:5c:34:02:c0:
         ff:7e:d5:ad:2f:6e:cf:11:aa:d0:79:0a:a2:8a:83:de:89:26:
         65:7e:3b:b1:f0:bf:93:5f:42:d5:b3:43:14:97:a0:eb:82:55:
         af:87:9a:46:d9:c2:aa:84:f1:05:29:3c:10:29:15:18:a0:f6:
         8e:26:7b:a8:88:43:e1:b6:d0:b0:5b:51:25:bb:66:ef:ee:cb:
         5a:2b:be:a0:5c:6d:64:18:89:72:82:b8:c6:3c:db:6d:68:26:
         db:d7:55:84:19:64:0f:17:96:75:4c:a8:21:7f:6f:8b:62:1e:
         fe:5b:f9:c9:9e:f3:55:12:d6:7a:d0:2c:bf:5f:c9:b4:55:fe:
         04:6c:fd:2c:75:3b:5e:e9:5c:b5:39:3b:d6:b6:63:3c:7f:e1:
         1c:07:9f:a5:38:78:8e:46:36:ab:c8:57:4c:1a:98:c3:4f:c0:
         6c:a6:a4:d2:44:50:fe:a7:c3:3c:0b:a6:a9:0a:28:a7:37:6c:
         a7:90:1f:f5:8d:46:a7:40:fc:52:ba:15:95:b8:70:51:68:60:
         a9:27:9b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:25:36 2026 by rpki-client