Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.mft
File:                     vkiLTmCsanOmVu_bxfpnoajegSo.mft (raw, json)
Hash identifier:          TV7XH3/7LCTvw9xLIYqLtLV8fTjcYv6r9Iw/zwJvn+E=
Subject key identifier:   D8:C3:DF:6A:B4:E3:3C:21:F1:D9:D8:B1:6C:61:FC:AE:B5:C2:0D:48
Authority key identifier: BE:48:8B:4E:60:AC:6A:73:A6:56:EF:DB:C5:FA:67:A1:A8:DE:81:2A
Certificate issuer:       /CN=A91ADE0A/serialNumber=BE488B4E60AC6A73A656EFDBC5FA67A1A8DE812A
Certificate serial:       238D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkiLTmCsanOmVu_bxfpnoajegSo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.mft
Manifest number:          2349
Signing time:             Sat 26 Sep 2026 15:51:25 +0000
Manifest this update:     Sat 26 Sep 2026 15:51:25 +0000
Manifest next update:     Sat 03 Oct 2026 15:51:25 +0000
Files and hashes:         1: vkiLTmCsanOmVu_bxfpnoajegSo.crl (hash: VBCJL+fSKFGdfBJQk/j/323jsss1qTVGb4a0ntxnznQ=)
                          2: 4AB8D38E178811EF95C8DF41C4F9AE02.roa (hash: 1Kz1vE1HOF5/kl+i8Rr4tSzcXBMpG4BgFwTZXnp4/e4=)
                          3: 815465903EB511E9881B6529C4F9AE02.roa (hash: +ANu6JmCUfWc/fEshVMRk/CtwPkSloyzKlXpU5KCY3Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.crl
                          rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkiLTmCsanOmVu_bxfpnoajegSo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 15:51:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9101 (0x238d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADE0A, serialNumber=BE488B4E60AC6A73A656EFDBC5FA67A1A8DE812A
        Validity
            Not Before: Sep 26 15:51:25 2026 GMT
            Not After : Oct  3 15:51:25 2026 GMT
        Subject: CN=6ab7e9fd-4303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2c:f6:19:b1:3e:57:9c:92:76:8a:ad:2f:d0:
                    80:29:0d:d2:81:98:87:3b:8c:82:4c:ba:cb:e7:79:
                    15:f0:8f:ee:3a:b6:70:55:90:66:e9:19:20:e1:4b:
                    17:44:92:9b:8e:41:fd:1b:6a:5b:e0:2e:3b:e7:ce:
                    9c:b6:6f:d4:fc:32:30:6e:be:ce:91:be:82:ff:ae:
                    ad:b8:6b:5f:11:6f:2e:f5:09:a0:af:c6:2e:18:df:
                    63:02:0c:48:9e:46:ed:3c:17:f7:5c:e7:4c:2d:bc:
                    7e:36:87:79:ea:7d:dd:3c:b5:ed:f3:3e:5e:79:ac:
                    9b:94:94:a9:f2:f4:3b:b6:a3:f2:17:ba:cf:ab:aa:
                    94:d5:c2:bc:f8:55:3c:33:02:73:87:58:2f:2e:93:
                    0b:0e:42:0a:59:33:2b:03:b9:e3:52:a2:82:7f:44:
                    ca:77:c6:31:24:0f:11:c5:cb:be:1c:0b:e1:1e:0f:
                    69:05:c1:a8:e6:db:0d:9a:60:60:09:e0:a3:e7:e6:
                    37:b1:2d:f8:2d:57:0f:5e:47:9e:04:fa:52:92:08:
                    a7:37:fa:b4:9d:ca:43:df:14:6a:7a:7d:40:99:3b:
                    9e:e2:d6:37:d1:ce:6d:c5:43:0f:20:22:cf:4b:2d:
                    98:a8:0b:55:de:cd:8e:fe:d2:5e:ed:f3:8c:34:25:
                    83:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:C3:DF:6A:B4:E3:3C:21:F1:D9:D8:B1:6C:61:FC:AE:B5:C2:0D:48
            X509v3 Authority Key Identifier:
                keyid:BE:48:8B:4E:60:AC:6A:73:A6:56:EF:DB:C5:FA:67:A1:A8:DE:81:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkiLTmCsanOmVu_bxfpnoajegSo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:ab:26:e5:59:d5:8d:f3:56:28:eb:30:64:71:65:69:12:cf:
         29:13:59:97:7c:40:a1:88:31:d6:f9:7e:30:27:fa:7d:09:52:
         3f:7b:77:09:37:34:13:91:de:b2:64:15:d6:6d:2d:c1:62:41:
         7d:cc:a3:2a:c9:d1:49:d4:21:35:f1:c4:25:c8:cc:5c:f9:34:
         d9:d0:66:36:aa:e9:59:8c:b2:e2:a0:67:1f:a1:43:ca:36:29:
         85:14:cd:1c:f0:c3:d8:ca:2e:60:86:d6:31:50:22:3d:ec:0c:
         71:f9:9f:15:65:64:98:0e:f4:a6:28:76:fe:95:10:80:99:4c:
         83:23:63:5a:c7:59:b9:06:21:ba:a8:e1:aa:c2:7d:0a:4a:6e:
         20:ad:01:48:3a:b4:9f:cf:b6:0c:d3:da:ae:94:b4:c5:88:2d:
         f9:d9:51:9b:74:d3:2c:25:fc:24:58:4e:a4:d3:a1:7d:c4:85:
         70:3c:60:c7:89:8b:18:e8:3f:46:72:5b:e4:5e:87:79:2f:17:
         bd:e5:72:c9:25:83:34:da:bc:52:4e:d0:62:0b:19:ef:7b:f2:
         01:9f:56:b0:c4:4c:c6:8e:9d:d1:d0:03:74:66:0c:61:89:28:
         6d:66:28:b8:af:d1:c7:b7:d7:1f:a4:b2:70:65:05:da:77:c5:
         6e:10:26:b8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICI40wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QURFMEExMTAvBgNVBAUTKEJFNDg4QjRFNjBBQzZBNzNBNjU2RUZEQkM1RkE2N0Ex
QThERTgxMkEwHhcNMjYwOTI2MTU1MTI1WhcNMjYxMDAzMTU1MTI1WjAYMRYwFAYD
VQQDEw02YWI3ZTlmZC00MzAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2Sz2GbE+V5ySdoqtL9CAKQ3SgZiHO4yCTLrL53kV8I/uOrZwVZBm6Rkg4UsX
RJKbjkH9G2pb4C47586ctm/U/DIwbr7Okb6C/66tuGtfEW8u9Qmgr8YuGN9jAgxI
nkbtPBf3XOdMLbx+Nod56n3dPLXt8z5eeayblJSp8vQ7tqPyF7rPq6qU1cK8+FU8
MwJzh1gvLpMLDkIKWTMrA7njUqKCf0TKd8YxJA8Rxcu+HAvhHg9pBcGo5tsNmmBg
CeCj5+Y3sS34LVcPXkeeBPpSkginN/q0ncpD3xRqen1AmTue4tY30c5txUMPICLP
Sy2YqAtV3s2O/tJe7fOMNCWDUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNjD32q0
4zwh8dnYsWxh/K61wg1IMB8GA1UdIwQYMBaAFL5Ii05grGpzplbv28X6Z6Go3oEq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREUwQS8zMEQ4MDEyNkMx
MTMxMUU1QjAxQTcyNjlDNEY5QUUwMi92a2lMVG1Dc2FuT21WdV9ieGZwbm9hamVn
U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZraUxUbUNzYW5PbVZ1X2J4ZnBub2FqZWdTby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
REUwQS8zMEQ4MDEyNkMxMTMxMUU1QjAxQTcyNjlDNEY5QUUwMi92a2lMVG1Dc2Fu
T21WdV9ieGZwbm9hamVnU28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATqsm5VnVjfNWKOswZHFlaRLPKRNZl3xAoYgx1vl+MCf6fQlSP3t3CTc0E5He
smQV1m0twWJBfcyjKsnRSdQhNfHEJcjMXPk02dBmNqrpWYyy4qBnH6FDyjYphRTN
HPDD2MouYIbWMVAiPewMcfmfFWVkmA70pih2/pUQgJlMgyNjWsdZuQYhuqjhqsJ9
CkpuIK0BSDq0n8+2DNParpS0xYgt+dlRm3TTLCX8JFhOpNOhfcSFcDxgx4mLGOg/
RnJb5F6HeS8XveVyySWDNNq8Uk7QYgsZ73vyAZ9WsMRMxo6d0dADdGYMYYkobWYo
uK/Rx7fXH6SycGUF2nfFbhAmuA==
-----END CERTIFICATE-----
Generated at Sun Sep 27 04:37:43 2026 by rpki-client