Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft
File:                     vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft (raw, json)
Hash identifier:          SAdY6Zh8+c/MHNU+5+iKe63WSgcWszt4Ytpa/NVbVQU=
Subject key identifier:   09:12:D1:F3:EE:AF:83:36:AF:38:40:B2:53:D8:FE:D1:26:1C:4C:E2
Authority key identifier: BD:D5:EB:15:63:38:39:3D:74:4D:AE:2F:C5:32:D5:83:2B:C7:85:BF
Certificate issuer:       /CN=A91ACC41/serialNumber=BDD5EB156338393D744DAE2FC532D5832BC785BF
Certificate serial:       0D2E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vdXrFWM4OT10Ta4vxTLVgyvHhb8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft
Manifest number:          0D24
Signing time:             Sat 26 Sep 2026 18:19:52 +0000
Manifest this update:     Sat 26 Sep 2026 18:19:51 +0000
Manifest next update:     Sat 03 Oct 2026 18:19:51 +0000
Files and hashes:         1: vdXrFWM4OT10Ta4vxTLVgyvHhb8.crl (hash: M0ss0FAcYStgJnEr9b2uPLy0IyRKeEgMI3BUdqCBW1g=)
                          2: 674009AE09D811EA9BCFCE1EC4F9AE02.roa (hash: DqO78dcrLcTqky8MHqNvDeEZVWA5cZxIE2/PsLNtSF4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.crl
                          rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vdXrFWM4OT10Ta4vxTLVgyvHhb8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 18:19:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3374 (0xd2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ACC41, serialNumber=BDD5EB156338393D744DAE2FC532D5832BC785BF
        Validity
            Not Before: Sep 26 18:19:51 2026 GMT
            Not After : Oct  3 18:19:51 2026 GMT
        Subject: CN=6ab80cc7-43ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a3:29:d1:d9:9a:8b:91:ea:34:66:27:a6:65:
                    77:13:ff:95:ab:53:78:47:65:a0:dd:5a:11:ca:56:
                    2e:db:19:b8:56:a0:55:8d:12:1b:a8:ab:30:ae:af:
                    48:df:df:39:58:37:bc:1a:bf:55:bd:86:7e:45:1c:
                    c4:ce:14:c7:f1:08:ed:b4:b4:03:76:0f:b2:4a:ee:
                    b9:d9:60:93:2b:a6:af:17:75:9b:b0:db:72:2d:0e:
                    8a:1e:fa:9f:5b:1f:95:f2:a3:4e:22:a4:c4:d5:68:
                    0d:4c:45:c0:fd:4f:0a:46:ba:d7:2d:20:df:6a:06:
                    13:68:43:7a:68:be:f5:40:4a:0f:7c:07:6a:66:4d:
                    79:37:70:25:78:f7:53:84:5a:57:64:15:a9:33:d1:
                    25:e9:7a:a9:74:c8:70:8f:98:43:c6:b5:c6:66:b3:
                    2d:c5:b5:42:e7:5a:af:22:80:db:eb:4e:b5:73:e9:
                    7d:84:9f:96:f6:9b:85:a6:0e:f5:d9:ec:63:19:c6:
                    96:42:c9:75:d2:db:c0:cf:46:eb:66:a4:70:18:40:
                    d7:1e:9f:e2:14:38:61:a3:0c:e6:95:a1:cd:47:bd:
                    d0:2a:a5:9a:eb:e6:b3:9c:44:c3:0f:32:40:41:51:
                    5b:41:62:26:b9:90:ee:16:1b:ac:71:32:17:ea:28:
                    ef:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:12:D1:F3:EE:AF:83:36:AF:38:40:B2:53:D8:FE:D1:26:1C:4C:E2
            X509v3 Authority Key Identifier:
                keyid:BD:D5:EB:15:63:38:39:3D:74:4D:AE:2F:C5:32:D5:83:2B:C7:85:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vdXrFWM4OT10Ta4vxTLVgyvHhb8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:a0:0f:c9:c9:8c:ca:cb:bc:03:16:eb:f0:ae:17:53:92:71:
         80:59:ad:13:17:65:fc:72:14:43:59:f7:1d:da:f2:1e:5a:75:
         60:08:e3:b8:92:07:6d:9e:e5:40:6d:6e:fd:f5:69:bf:05:ed:
         7a:54:19:46:e0:72:a0:d5:8b:25:bb:8d:66:08:95:2f:9f:12:
         80:76:cc:0e:3c:4e:db:21:e2:29:c1:8b:58:3b:a3:9a:8a:c6:
         ff:51:ca:8d:18:f7:36:79:2e:2c:a9:0e:99:eb:78:e4:c3:b1:
         4d:da:ac:97:1e:8a:2e:a9:26:cf:da:ca:b1:f6:90:41:5f:e6:
         2c:2d:f2:64:c3:cc:1c:0f:b5:6b:d4:43:92:84:12:db:1c:60:
         fe:6f:06:b4:2c:85:9b:52:dc:96:f9:a8:e8:2c:90:9f:df:89:
         63:55:e2:50:98:90:f6:96:5a:4a:9f:85:4f:e1:4f:49:6f:1e:
         1f:88:e7:35:5d:6c:b7:a8:2a:a1:fa:69:c3:f5:25:f3:d9:f5:
         a4:50:9e:ed:86:b5:94:68:6d:07:90:4c:15:fa:02:80:e1:d6:
         b6:4a:44:40:81:06:03:68:3f:0a:ba:ea:ae:93:a6:7f:07:b7:
         2a:59:04:56:b1:79:f0:39:80:74:99:8e:54:34:93:94:0f:fe:
         c5:e7:19:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 07:43:35 2026 by rpki-client