Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft
File:                     vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft (raw, json)
Hash identifier:          +gMnPKliqhLAltXF0v3os2Vu7CcGMTPrr0/qQLfZPVY=
Subject key identifier:   25:DB:C3:5D:80:57:A1:4F:3A:98:15:4A:D8:33:B0:50:E1:40:2C:13
Authority key identifier: BD:06:BD:BF:8B:0E:ED:BC:9F:07:39:5A:65:25:4F:CB:85:83:98:9D
Certificate issuer:       /CN=A91CB816/serialNumber=BD06BDBF8B0EEDBC9F07395A65254FCB8583989D
Certificate serial:       0823
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQa9v4sO7byfBzlaZSVPy4WDmJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft
Manifest number:          0811
Signing time:             Thu 08 Oct 2026 21:21:51 +0000
Manifest this update:     Thu 08 Oct 2026 21:21:50 +0000
Manifest next update:     Thu 15 Oct 2026 21:21:50 +0000
Files and hashes:         1: vQa9v4sO7byfBzlaZSVPy4WDmJ0.crl (hash: QzJtsRZuB/CPHp4h9z0pel0X+S4+2PErrboNeLJ2qAQ=)
                          2: 0YWgaGIF9dg_vz8DObb-nIQ_xWc.asa (hash: M8//xCy23o616HLuE2S+UB87G4/yU3vOFgDaz19hbUc=)
                          3: 122052A03DD811EBAE99F45CC4F9AE02.roa (hash: mtoKEHPZWLoyi/r8N8V2JGeY1kwSeTuX6aCOjVwyle4=)
                          4: 7D8845C43DD911EB8DA0EE5FC4F9AE02.roa (hash: 4xgzK7PrNpZAnd72wXzvBuPzMZA+sokeDoeYoGYDtEI=)
                          5: 5_nSlAUYz7kej07hm6J22as0DbA.asa (hash: Ro0OilI0FgZQdMeoEOAlPCaDijmkB2YohI/w3wtAFA4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.crl
                          rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQa9v4sO7byfBzlaZSVPy4WDmJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 21:21:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2083 (0x823)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB816, serialNumber=BD06BDBF8B0EEDBC9F07395A65254FCB8583989D
        Validity
            Not Before: Oct  8 21:21:50 2026 GMT
            Not After : Oct 15 21:21:50 2026 GMT
        Subject: CN=6ac8096f-51e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:49:b2:a9:4c:9a:d3:be:27:45:90:85:9a:f4:
                    13:5f:99:02:86:8d:85:cf:7c:fc:98:4a:b9:4a:ab:
                    ee:d1:43:cf:ed:e0:f6:cb:53:bd:26:41:42:73:f2:
                    8e:34:b1:b3:3c:b6:01:77:c1:64:3c:c1:e2:74:e3:
                    37:ba:ba:75:b9:ae:cf:05:eb:1e:f9:56:6c:d4:98:
                    b1:f0:bd:fd:e4:d4:18:d9:c8:2a:39:d8:83:41:08:
                    b7:23:71:48:82:90:28:c6:d8:cb:ab:9b:6f:ce:c7:
                    fa:09:aa:1b:40:71:38:67:15:87:72:43:c2:1b:b5:
                    5a:bd:35:bb:29:c7:ce:61:81:b8:57:c4:72:e3:1c:
                    86:7f:31:d6:d3:3a:1c:6f:e2:ec:04:90:dd:91:33:
                    b5:45:36:0b:8e:c5:36:bb:fe:18:8e:48:55:a2:c3:
                    4d:c1:fd:75:2c:00:01:8e:8d:2e:0d:d6:9b:74:2d:
                    17:f0:59:0e:1a:88:e6:59:54:62:46:ea:73:06:b0:
                    cf:6c:36:13:45:2d:3e:d1:ff:db:57:f6:ef:10:33:
                    24:8f:be:27:80:b7:11:4c:d0:2a:7f:69:6e:0d:b0:
                    72:31:7a:7d:ca:90:b7:0c:ba:17:26:b1:a4:ce:c2:
                    83:d8:70:7d:e4:67:d9:af:77:d4:18:e7:a6:9e:e5:
                    4d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:DB:C3:5D:80:57:A1:4F:3A:98:15:4A:D8:33:B0:50:E1:40:2C:13
            X509v3 Authority Key Identifier:
                keyid:BD:06:BD:BF:8B:0E:ED:BC:9F:07:39:5A:65:25:4F:CB:85:83:98:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQa9v4sO7byfBzlaZSVPy4WDmJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:fe:e3:fc:fd:48:1e:54:c8:21:66:c3:c4:1b:a0:09:e5:72:
         b5:10:5f:77:a2:5d:47:3f:b5:0d:4e:1b:e6:11:d6:0d:55:32:
         24:9c:56:83:2b:d6:0a:7c:5e:ca:93:72:08:4f:fc:e8:a4:c1:
         c6:33:d2:2e:bc:a4:4d:3d:04:02:7b:c5:20:44:8c:bc:97:aa:
         a3:88:30:79:6b:8a:68:59:e0:c7:5f:1e:66:2f:52:7c:ce:69:
         73:8b:1e:d2:ba:87:6f:dd:c8:0c:73:cf:96:2f:b0:cc:40:ae:
         07:33:5d:64:c0:38:6d:cc:6a:ac:40:16:bf:93:f2:eb:6a:ba:
         1b:fb:a9:a2:8d:15:e5:93:87:98:c7:6b:f3:c3:20:11:9e:18:
         2a:ff:c6:5a:c3:52:1c:a7:6e:24:3c:4f:d2:8f:24:4a:4a:71:
         53:bd:80:e2:ab:05:5e:08:75:f3:ab:01:ad:bd:37:0f:9e:68:
         da:17:aa:75:0c:a8:bb:ed:4f:9d:54:66:bd:4a:36:45:e0:2e:
         dd:b3:25:5d:49:2c:8c:06:45:88:f6:dc:6c:a7:66:57:02:0a:
         fb:d3:91:ea:c2:c8:28:23:36:98:2f:34:72:7c:11:81:c9:7a:
         3c:9e:97:12:18:24:2c:88:40:a4:f7:04:68:d5:7c:26:77:74:
         59:73:a4:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 02:57:35 2026 by rpki-client