Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft
File:                     M-VCXQNo-C_4W5uEf0EjitWNTlA.mft (raw, json)
Hash identifier:          DDRwMS48einVPZKkHzMnrDuAUrBNq7GbyXF4tlE8KjM=
Subject key identifier:   FE:B5:9A:6F:09:54:2D:0F:DC:E2:B2:4D:C6:6D:37:94:28:80:3D:FB
Authority key identifier: 33:E5:42:5D:03:68:F8:2F:F8:5B:9B:84:7F:41:23:8A:D5:8D:4E:50
Certificate issuer:       /CN=A91CFD5A/serialNumber=33E5425D0368F82FF85B9B847F41238AD58D4E50
Certificate serial:       020C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M-VCXQNo-C_4W5uEf0EjitWNTlA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft
Manifest number:          01FA
Signing time:             Mon 21 Sep 2026 03:19:02 +0000
Manifest this update:     Mon 21 Sep 2026 03:19:02 +0000
Manifest next update:     Mon 28 Sep 2026 03:19:02 +0000
Files and hashes:         1: M-VCXQNo-C_4W5uEf0EjitWNTlA.crl (hash: Cd3B2J0caTrfnOAMqE6z3IxOwr9EVOZOsS+1eWpYwlI=)
                          2: D677E18AB9AF11EE97EEDB49C4F9AE02.roa (hash: 4BM5LIM23GXw5AfkXFzMdqX+Y7TcpkGGG81Gw9eoyBY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.crl
                          rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M-VCXQNo-C_4W5uEf0EjitWNTlA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 03:19:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 524 (0x20c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFD5A, serialNumber=33E5425D0368F82FF85B9B847F41238AD58D4E50
        Validity
            Not Before: Sep 21 03:19:02 2026 GMT
            Not After : Sep 28 03:19:02 2026 GMT
        Subject: CN=6ab0a226-55b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:38:3c:99:0e:0e:4b:34:d6:87:a0:c2:60:ab:
                    96:26:a4:40:ad:17:03:0d:4c:fa:e2:25:d2:05:9a:
                    89:ac:d3:26:e2:4f:1d:59:d0:5e:e1:fc:7c:13:57:
                    da:46:fc:f9:39:44:64:5d:0a:69:fc:f4:54:a5:9d:
                    ba:4a:dd:d2:ab:3b:6f:a0:11:2e:d4:6b:4e:53:e5:
                    e4:f1:48:22:46:1a:b0:0f:be:b1:5a:38:46:98:74:
                    85:f3:03:82:de:ce:26:b5:b7:90:63:46:74:9a:e9:
                    23:e0:8d:97:22:bf:b1:dd:7c:0e:a9:b2:93:f1:b5:
                    61:b8:97:3c:40:38:39:f9:84:ca:49:60:b6:54:6a:
                    48:80:79:b8:b3:98:21:de:ab:fe:ba:f6:35:98:64:
                    8b:59:14:3c:53:cc:f9:55:db:96:2d:d5:77:3f:c5:
                    4d:7d:0c:26:7d:fd:8d:f2:b3:22:86:75:f0:00:7d:
                    23:1c:85:df:51:75:f6:71:ed:1c:6c:46:de:4a:ee:
                    68:dc:ef:e6:f9:33:2d:35:2d:02:76:e5:f4:52:6f:
                    a7:7d:fb:75:38:78:91:30:d7:24:b1:07:32:bc:21:
                    7c:c9:47:2a:c5:0f:43:a0:b6:c9:1a:a2:f7:d5:14:
                    2c:d7:c5:55:93:f3:85:37:ef:5e:16:91:89:a1:51:
                    7c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:B5:9A:6F:09:54:2D:0F:DC:E2:B2:4D:C6:6D:37:94:28:80:3D:FB
            X509v3 Authority Key Identifier:
                keyid:33:E5:42:5D:03:68:F8:2F:F8:5B:9B:84:7F:41:23:8A:D5:8D:4E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M-VCXQNo-C_4W5uEf0EjitWNTlA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:e3:d5:13:63:91:0f:95:15:f9:8e:09:9e:86:eb:37:d7:13:
         e3:f8:79:66:09:18:a3:a8:70:bd:0f:6c:ef:0c:f3:2f:2e:78:
         33:d0:1d:5a:f1:ec:d1:cc:34:5c:ed:f2:a9:2d:6b:74:cd:4f:
         2b:cd:4f:c6:5c:90:24:de:46:70:fd:76:20:a4:85:6e:5e:7c:
         55:f3:ce:bd:61:98:b1:58:61:45:e6:d6:b8:ea:39:80:4a:aa:
         57:2c:55:f7:51:16:0b:ff:a0:5c:5b:c4:d4:cb:4d:25:54:b6:
         3f:d3:26:0f:0d:16:3a:3a:4f:60:d5:95:2a:b5:2c:bf:1e:75:
         38:8e:08:60:39:c2:59:b4:ad:d0:f0:3c:42:a1:5e:7a:9a:31:
         b2:a2:05:76:4c:eb:e9:d3:fb:ee:e7:1d:4a:57:de:3a:fe:ac:
         3a:27:09:73:8f:4b:97:b3:2d:5c:00:b4:40:30:16:a7:86:84:
         51:0a:6c:45:4e:49:b8:8a:9b:e7:3f:5d:dc:f1:82:4a:9c:3e:
         a6:41:af:8b:03:a7:5a:31:9a:7d:ab:3a:32:4b:e9:4a:d9:aa:
         3b:e9:10:ba:f7:f7:ae:c5:a2:69:2c:23:9f:c8:15:8f:29:80:
         e4:5f:9c:e6:23:7e:0f:7f:70:cf:c9:fe:49:e4:6f:c2:20:85:
         54:df:d2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:59:34 2026 by rpki-client