Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft
File:                     0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft (raw, json)
Hash identifier:          yzmpP5g3TfN42fxwuWN+s07vO7P9DJaeTUiUdDkSZ64=
Subject key identifier:   26:41:A3:7D:28:D3:D0:AB:3B:06:33:BA:77:48:6A:F1:D4:67:E9:4C
Authority key identifier: D1:5A:5A:F9:AF:8D:99:DF:E5:E4:4D:35:EE:55:01:05:FE:D9:45:11
Certificate issuer:       /CN=A91A20A3/serialNumber=D15A5AF9AF8D99DFE5E44D35EE550105FED94511
Certificate serial:       35A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft
Manifest number:          3590
Signing time:             Fri 02 Oct 2026 15:02:53 +0000
Manifest this update:     Fri 02 Oct 2026 15:02:52 +0000
Manifest next update:     Fri 09 Oct 2026 15:02:52 +0000
Files and hashes:         1: 0Vpa-a-Nmd_l5E017lUBBf7ZRRE.crl (hash: CJdElxMCSGU2AE2/ze0/htw8mornTv9uLAlNvDhC6no=)
                          2: XQ5uXFHvK62rljFLiRwCSQ80r60.asa (hash: Kukyua62md/zUmj1W/H7JYPzbOr4yaZHbCsGihhe31U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.crl
                          rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 15:02:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13729 (0x35a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A20A3, serialNumber=D15A5AF9AF8D99DFE5E44D35EE550105FED94511
        Validity
            Not Before: Oct  2 15:02:52 2026 GMT
            Not After : Oct  9 15:02:52 2026 GMT
        Subject: CN=6abfc79d-207a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:68:e2:a8:53:35:21:1c:53:f0:07:6b:30:44:
                    79:8a:e7:a7:05:ad:40:1a:b4:6c:04:be:f1:77:16:
                    9a:93:ff:80:0b:c3:ed:d4:d1:59:cc:41:25:17:02:
                    d1:20:72:6e:66:24:9f:86:6d:9a:a4:0f:75:ae:4b:
                    46:45:55:d0:72:97:ca:06:78:d7:97:0c:48:9d:6b:
                    b2:ca:f9:4d:e5:21:05:8a:af:ba:d3:9f:97:8e:fc:
                    f6:dc:4c:37:e8:56:38:36:84:38:12:ab:02:9b:7d:
                    1d:2e:c4:98:9e:02:01:65:2a:2b:7c:25:26:d7:af:
                    93:fc:96:52:9c:75:b7:2f:fa:2c:e2:5b:c2:14:24:
                    cb:ec:87:1a:03:e5:36:80:3e:cf:b1:92:59:6e:f2:
                    68:aa:16:0c:e1:4a:42:76:8b:1a:e0:12:84:40:d7:
                    a3:ca:db:0f:26:56:f4:17:85:e5:a7:9e:30:ee:22:
                    08:ec:5e:00:fd:7d:16:00:fa:2a:fc:5f:70:b0:10:
                    09:f5:71:92:85:63:11:60:cd:f7:4e:6f:1d:67:72:
                    60:dd:6a:84:a1:db:b0:62:3b:99:04:87:d7:9e:d4:
                    8f:b9:1b:8d:78:10:87:6b:75:9e:98:83:0b:c8:61:
                    f9:56:d2:17:0e:ee:8d:11:f0:2d:84:80:6c:1b:6f:
                    92:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:41:A3:7D:28:D3:D0:AB:3B:06:33:BA:77:48:6A:F1:D4:67:E9:4C
            X509v3 Authority Key Identifier:
                keyid:D1:5A:5A:F9:AF:8D:99:DF:E5:E4:4D:35:EE:55:01:05:FE:D9:45:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:c2:13:08:83:1e:57:56:2f:1e:a4:ad:cf:25:07:77:80:81:
         71:1c:0c:4e:39:ec:a1:91:1b:a0:38:6a:ef:e4:f4:12:cc:84:
         55:09:d2:8e:7e:80:49:e2:76:00:28:c8:60:a1:e8:31:62:81:
         30:be:4e:56:cd:d1:2f:05:ab:51:12:5b:57:64:b7:89:35:7f:
         5e:19:fc:23:fd:d5:f9:51:97:0b:2d:8e:e0:d1:e0:a1:dd:ac:
         b5:b8:a6:b3:5b:d5:99:ba:e6:cd:ae:a7:dd:59:c4:1f:01:91:
         72:f6:33:6b:39:53:66:49:a5:92:21:c0:1a:ad:eb:24:5a:10:
         eb:c2:8a:07:48:f0:63:d1:ab:6b:5e:c7:25:6d:67:1b:ca:4e:
         07:2e:93:f2:44:f2:aa:c2:d6:3a:24:88:a9:44:59:47:28:80:
         28:22:43:f3:ce:69:7a:e4:1a:85:bf:9f:17:f7:6b:91:d3:e1:
         02:1d:9f:0b:b9:06:f5:69:c0:5a:e4:4e:aa:de:e6:aa:30:f5:
         34:34:79:aa:e4:a5:17:e9:d3:1e:32:b8:3e:72:65:47:1b:15:
         be:49:2d:5a:8f:5c:c0:50:8f:83:21:80:f4:55:b8:fb:42:23:
         c8:ed:53:69:8a:02:8b:b7:dd:5b:d3:28:f0:5f:10:3a:ed:7c:
         0c:a7:44:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 03:32:15 2026 by rpki-client