Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B00DC/2FBBC36E001811F1B6A12A14426F56BC/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.mft
File:                     Vd5CtrGL1XmaJuhCmWED-jS8Fxg.mft (raw, json)
Hash identifier:          9v2aLbvWgkwnIUy3DJTP+2Z6Jwi58OzmAC+nrHMP4dE=
Subject key identifier:   A6:B5:B0:61:FC:09:29:BB:B5:16:11:68:C7:F3:88:D8:56:9E:BB:31
Authority key identifier: 55:DE:42:B6:B1:8B:D5:79:9A:26:E8:42:99:61:03:FA:34:BC:17:18
Certificate issuer:       /CN=A91B00DC/serialNumber=55DE42B6B18BD5799A26E842996103FA34BC1718
Certificate serial:       88
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B00DC/2FBBC36E001811F1B6A12A14426F56BC/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.mft
Manifest number:          85
Signing time:             Sun 11 Oct 2026 08:18:14 +0000
Manifest this update:     Sun 11 Oct 2026 08:18:14 +0000
Manifest next update:     Sun 18 Oct 2026 08:18:14 +0000
Files and hashes:         1: Vd5CtrGL1XmaJuhCmWED-jS8Fxg.crl (hash: 6xtGX2F8lgelzM1RD2EwIb/z+3cJLv/9xc9dv+Uc1dQ=)
                          2: 63ABE3C0001811F1804E761C426F56BC.roa (hash: yY65u/jqJQmHqnGhqt0gIcasuvIles8dQWtNSaAAQqc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B00DC/2FBBC36E001811F1B6A12A14426F56BC/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.crl
                          rsync://rpki.apnic.net/member_repository/A91B00DC/2FBBC36E001811F1B6A12A14426F56BC/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 08:18:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136 (0x88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B00DC, serialNumber=55DE42B6B18BD5799A26E842996103FA34BC1718
        Validity
            Not Before: Oct 11 08:18:14 2026 GMT
            Not After : Oct 18 08:18:14 2026 GMT
        Subject: CN=6acb4646-a7bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:71:db:ca:79:28:80:34:88:f6:23:3f:6e:bb:
                    cd:8c:3a:52:fa:3b:3c:73:0b:c9:59:91:74:79:19:
                    9a:90:66:48:da:14:ea:3d:3e:97:31:88:23:81:06:
                    7a:b7:99:3e:9f:f9:de:50:39:53:38:94:c3:c2:09:
                    09:b9:cc:f8:cf:a2:0f:fe:71:00:a5:f0:1b:0d:9d:
                    4e:97:55:20:45:d5:01:e1:0e:da:fb:fa:eb:b7:8a:
                    42:9f:0e:94:2d:cd:62:ea:c0:d6:aa:4a:99:e4:65:
                    57:cf:d5:2f:03:54:ac:49:76:19:8a:3f:54:5b:33:
                    20:83:53:b8:f0:00:90:9e:dd:6d:22:39:ec:ed:af:
                    2a:89:9c:46:c1:d8:33:63:94:78:65:6d:3d:4f:11:
                    19:6a:3d:2d:a5:14:df:64:48:14:20:0e:05:d1:75:
                    1a:bf:ab:9f:59:72:de:0d:88:72:fe:9f:9c:84:da:
                    58:45:96:ca:f7:c9:02:31:d5:01:e8:63:df:cd:12:
                    49:38:a3:0b:93:05:c1:6f:37:67:9b:78:cc:47:6e:
                    77:f8:82:4f:92:be:83:2b:85:38:b8:28:2a:9b:0c:
                    94:06:51:2e:27:4f:64:78:68:e4:88:a0:2f:59:89:
                    5a:e0:cb:c4:3a:87:b8:4a:f2:83:b5:83:97:47:8a:
                    79:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:B5:B0:61:FC:09:29:BB:B5:16:11:68:C7:F3:88:D8:56:9E:BB:31
            X509v3 Authority Key Identifier:
                keyid:55:DE:42:B6:B1:8B:D5:79:9A:26:E8:42:99:61:03:FA:34:BC:17:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B00DC/2FBBC36E001811F1B6A12A14426F56BC/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B00DC/2FBBC36E001811F1B6A12A14426F56BC/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:cf:34:44:de:62:28:bc:22:38:30:60:92:59:97:7e:bc:55:
         ff:bf:e5:75:72:77:eb:c4:14:7d:8e:b4:27:05:44:82:7b:67:
         27:8d:1b:cb:ae:d1:12:2c:4f:3d:6b:f1:8c:86:08:f6:20:cf:
         c7:ea:52:96:a0:47:8d:de:a6:cb:bb:11:4e:b4:32:ae:5c:56:
         9f:cc:8d:23:48:d4:90:c3:5e:18:9c:44:92:5c:b3:2a:8b:ab:
         be:65:ea:c9:58:55:c2:90:d7:a9:3d:a1:55:33:ce:67:c6:5c:
         b3:a5:c8:ce:c0:86:19:e0:54:89:48:1a:0e:53:12:8d:96:05:
         7d:4a:18:a4:10:b4:0f:6b:49:27:9c:da:e9:5a:9d:d3:76:c3:
         51:7f:f0:ca:a3:71:f4:37:59:79:68:0d:3e:a1:7f:f2:63:43:
         55:dd:6f:ea:26:eb:ab:80:bb:c5:05:c4:4f:a3:0c:13:9b:26:
         ce:d1:24:d6:f7:05:8a:bc:30:3b:57:77:3f:71:a0:ad:9f:e1:
         c2:4a:0d:70:20:83:73:9d:c8:fb:65:89:d1:2d:32:66:2e:04:
         69:4f:a6:67:0a:96:b9:88:03:8d:ed:82:3f:52:78:37:ad:08:
         f2:43:7e:a7:dc:07:4e:04:4c:2b:1a:58:57:fa:cd:78:2b:70:
         69:72:d6:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:40:13 2026 by rpki-client