Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.mft
File:                     vrCjIjTRl23j3iJaVReALbYTqLY.mft (raw, json)
Hash identifier:          Hpi77C+S9S9lkBTe4V5Kbrl0Ff97DoeSuBjDT1iKogo=
Subject key identifier:   23:97:09:4E:89:1B:75:E1:FE:24:83:E5:45:C2:42:34:B2:81:C9:D8
Authority key identifier: BE:B0:A3:22:34:D1:97:6D:E3:DE:22:5A:55:17:80:2D:B6:13:A8:B6
Certificate issuer:       /CN=A91AF17B/serialNumber=BEB0A32234D1976DE3DE225A5517802DB613A8B6
Certificate serial:       06B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrCjIjTRl23j3iJaVReALbYTqLY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.mft
Manifest number:          06AD
Signing time:             Thu 24 Sep 2026 22:17:46 +0000
Manifest this update:     Thu 24 Sep 2026 22:17:46 +0000
Manifest next update:     Thu 01 Oct 2026 22:17:46 +0000
Files and hashes:         1: vrCjIjTRl23j3iJaVReALbYTqLY.crl (hash: RUcSSa/5HvY4vWJkIGW02ce06sGAXejl4C51DVkK8gA=)
                          2: 9C955450C77E11EB9DF68B6AC4F9AE02.roa (hash: mmfq1A4JFs2jPRiNdsYAoBmzmeTYZwoCaqGyjp1X2RQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.crl
                          rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrCjIjTRl23j3iJaVReALbYTqLY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 22:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1717 (0x6b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF17B, serialNumber=BEB0A32234D1976DE3DE225A5517802DB613A8B6
        Validity
            Not Before: Sep 24 22:17:46 2026 GMT
            Not After : Oct  1 22:17:46 2026 GMT
        Subject: CN=6ab5a18a-027f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:27:5c:cf:af:95:65:c8:ff:e7:3e:4d:90:f9:
                    28:f0:3c:e8:5f:6c:2c:ce:49:f8:9d:0a:13:ff:4d:
                    c7:40:0b:90:94:8c:11:e9:ee:3e:17:0c:0b:d2:44:
                    10:8b:0d:bf:5d:15:09:e1:7a:2a:0d:1a:58:e2:a5:
                    6f:f2:bc:5f:1d:b3:15:38:a4:de:53:6b:33:7d:85:
                    95:c2:39:7e:a7:5a:c7:00:3c:00:30:ef:65:d7:7a:
                    2c:a3:1b:1d:f1:94:0b:a8:0e:7e:0c:c7:a6:75:ba:
                    88:8d:e6:11:25:a7:ec:a1:d1:f1:a5:b4:c0:d3:5d:
                    45:d6:53:6a:1b:28:ce:67:10:26:ac:2a:fd:8d:0a:
                    f9:60:74:57:30:1a:f4:c9:df:33:06:de:90:35:f6:
                    b1:d0:ad:ee:ec:33:a0:15:74:f6:f8:3a:98:28:9f:
                    79:40:70:46:a8:e3:4c:b6:29:62:93:14:a0:d6:dc:
                    c6:d8:4b:3d:e1:af:b1:05:7b:6e:2a:5c:84:82:87:
                    03:eb:3e:d2:20:d9:8e:ab:f1:1a:9e:23:9b:e6:3d:
                    08:60:7e:8b:87:78:5d:00:1e:db:40:94:e8:a2:7b:
                    ed:d3:f5:dd:44:13:12:c9:03:56:3b:49:0f:7e:47:
                    8f:ef:a2:43:2c:cf:bd:df:3f:ae:a7:27:41:3f:83:
                    87:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:97:09:4E:89:1B:75:E1:FE:24:83:E5:45:C2:42:34:B2:81:C9:D8
            X509v3 Authority Key Identifier:
                keyid:BE:B0:A3:22:34:D1:97:6D:E3:DE:22:5A:55:17:80:2D:B6:13:A8:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrCjIjTRl23j3iJaVReALbYTqLY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:db:5c:a9:29:a5:d1:f2:08:bb:db:3c:b9:53:a1:a3:50:34:
         38:63:05:b5:85:b7:e6:1b:85:3e:ba:35:04:a5:2f:70:62:11:
         3a:58:5d:29:b2:3e:eb:78:aa:c7:02:5c:83:9c:cd:82:b5:7f:
         36:9d:1f:19:52:08:51:15:cd:ee:a1:79:43:27:20:53:e5:e5:
         d5:7c:3d:ef:af:43:e0:ba:6f:2f:36:95:d2:75:0f:9c:25:5b:
         23:f7:b3:15:47:74:be:85:00:c6:f8:35:37:7a:38:0a:22:4b:
         81:97:ec:1e:26:79:e7:b8:90:b6:8a:a7:9c:2f:be:35:27:ee:
         3e:d7:95:91:b8:fb:93:a8:99:71:ed:43:b0:5d:bf:af:b9:bd:
         34:ad:8c:7b:31:ed:ff:41:1c:84:34:47:b8:c2:23:9f:f3:36:
         56:22:b1:40:7b:3f:92:06:82:dd:c5:04:4e:61:55:63:67:72:
         3f:eb:b5:26:f8:3e:95:6b:68:93:96:ba:9f:02:b0:3a:51:86:
         af:f1:38:98:16:11:28:c5:73:94:23:69:3d:27:27:13:70:6a:
         8e:bd:dd:d0:72:54:e5:0c:50:49:a5:a0:40:eb:1b:65:14:7a:
         ce:0f:71:5b:47:31:18:68:43:30:63:d3:c5:fe:d0:db:31:6a:
         44:d9:df:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:56:04 2026 by rpki-client