Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft
File:                     Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft (raw, json)
Hash identifier:          G5KfvuoHRUdJCVQ3+DDCYFTwRfes10n+3+S7TwneT1w=
Subject key identifier:   36:FE:47:50:18:6F:8B:FE:72:63:CD:4C:82:D5:88:97:7B:A0:1D:1C
Authority key identifier: 56:7F:9A:B2:B2:C7:96:92:68:5C:03:05:5A:F9:69:E6:0B:66:B8:00
Certificate issuer:       /CN=A91ADB98/serialNumber=567F9AB2B2C79692685C03055AF969E60B66B800
Certificate serial:       030D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vn-asrLHlpJoXAMFWvlp5gtmuAA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft
Manifest number:          02FA
Signing time:             Fri 25 Sep 2026 01:01:11 +0000
Manifest this update:     Fri 25 Sep 2026 01:01:10 +0000
Manifest next update:     Fri 02 Oct 2026 01:01:10 +0000
Files and hashes:         1: Vn-asrLHlpJoXAMFWvlp5gtmuAA.crl (hash: nHkOf0HzkB3eFkpknS7bGNy9ukVwO3oS2sdtd2177Oo=)
                          2: 310AEC7A5B7C11EDAAFAB831C4F9AE02.roa (hash: IkRGaF1uTyzRv6zOhznPG18QRmePTnGkiWjf3intWWA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.crl
                          rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vn-asrLHlpJoXAMFWvlp5gtmuAA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 01:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 781 (0x30d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADB98, serialNumber=567F9AB2B2C79692685C03055AF969E60B66B800
        Validity
            Not Before: Sep 25 01:01:10 2026 GMT
            Not After : Oct  2 01:01:10 2026 GMT
        Subject: CN=6ab5c7d6-4c7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b7:7f:95:df:8e:4f:59:23:87:ef:37:3b:a6:
                    ec:29:2d:83:b7:f8:5c:e6:ef:f5:46:fc:8b:1c:10:
                    10:cc:d6:b1:68:ce:25:3d:ad:3a:82:7e:f1:f8:39:
                    e6:76:a3:bf:05:28:c7:69:d2:2c:88:cd:f3:39:93:
                    11:9c:d0:4d:4c:c7:1e:18:66:34:65:40:e7:86:9f:
                    1c:1b:9e:81:36:74:48:61:21:59:62:25:e8:5c:c0:
                    29:1e:15:7f:93:ef:22:14:e0:2f:92:4e:1c:1d:38:
                    7d:77:46:e7:1e:ee:5a:77:d0:c6:66:e5:e8:84:c6:
                    91:9c:eb:4b:b6:2b:87:ee:4c:ed:99:a2:a3:ca:6e:
                    8d:09:26:94:14:08:2a:ec:fa:dd:bb:7b:91:cb:6c:
                    b9:7f:52:0f:ac:38:e6:be:c1:bd:d9:60:8c:dd:90:
                    8e:6c:5f:f7:e6:16:bf:86:b3:79:76:4d:2f:ec:4c:
                    53:a3:97:6e:e4:65:83:87:61:20:88:28:0a:a5:11:
                    d2:98:33:59:3b:2d:da:42:23:b1:56:47:69:2c:8c:
                    2d:ca:78:9e:ff:82:86:ea:fd:4b:84:c3:0e:49:a4:
                    f9:3a:13:9c:4a:ff:38:39:47:20:8f:18:07:80:72:
                    49:82:c4:a7:9b:71:f0:5c:1a:a1:33:1e:ea:69:1f:
                    ca:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:FE:47:50:18:6F:8B:FE:72:63:CD:4C:82:D5:88:97:7B:A0:1D:1C
            X509v3 Authority Key Identifier:
                keyid:56:7F:9A:B2:B2:C7:96:92:68:5C:03:05:5A:F9:69:E6:0B:66:B8:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vn-asrLHlpJoXAMFWvlp5gtmuAA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:c4:6f:c5:9e:99:ad:fc:58:00:d1:02:0c:83:6a:61:a6:90:
         75:fa:ee:49:f6:c8:25:8b:53:35:cd:34:35:28:cd:e1:cd:37:
         5c:ae:8a:cf:82:70:1f:b5:ed:16:62:9d:1b:ce:15:cc:7d:28:
         e3:d1:99:1c:75:4a:2f:e1:17:15:c1:14:12:37:68:bf:b4:3f:
         15:a9:c0:4f:9f:94:86:cb:14:71:2b:ba:f6:93:14:0e:e1:d8:
         c6:f8:9d:c2:1d:96:93:38:35:6b:e5:98:1e:53:34:7d:ce:4e:
         79:8b:97:54:69:ba:af:19:68:d4:f1:96:82:ca:58:ef:8d:ff:
         a6:b9:6c:29:ed:15:b9:39:82:c8:ae:1d:97:4e:d1:38:7d:09:
         fc:1a:05:7c:04:7b:41:df:a5:b9:b6:c4:38:4d:cc:77:ef:d0:
         25:d6:d6:1d:91:b0:aa:b7:9e:2e:57:f8:62:cf:3d:17:b3:53:
         c2:47:25:64:ba:f7:e9:68:29:c9:4e:50:4e:59:e0:1c:1a:aa:
         da:c2:26:7b:27:5f:ff:92:c2:77:c8:63:b1:27:96:69:41:09:
         d4:8c:d5:96:28:77:d8:82:ce:fd:b6:e8:fa:74:5c:b0:05:38:
         96:a2:dd:a6:a8:ac:cf:de:e8:aa:6a:58:6c:80:b3:8b:4e:47:
         ea:23:15:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:36:34 2026 by rpki-client