Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft
File:                     VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft (raw, json)
Hash identifier:          haCE+O829m9+fjbL7EYf4mIXXKVupCxU0zT1qlAxuCQ=
Subject key identifier:   81:F1:FE:55:1B:51:F6:62:06:CA:33:63:9C:99:E8:B8:33:0B:73:E8
Authority key identifier: 56:38:CB:1E:26:D1:19:9D:AB:E8:B8:C7:ED:22:B0:3C:4C:E8:C8:0A
Certificate issuer:       /CN=A91D6F2B/serialNumber=5638CB1E26D1199DABE8B8C7ED22B03C4CE8C80A
Certificate serial:       045B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VjjLHibRGZ2r6LjH7SKwPEzoyAo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft
Manifest number:          0453
Signing time:             Wed 07 Oct 2026 00:17:21 +0000
Manifest this update:     Wed 07 Oct 2026 00:17:21 +0000
Manifest next update:     Wed 14 Oct 2026 00:17:21 +0000
Files and hashes:         1: VjjLHibRGZ2r6LjH7SKwPEzoyAo.crl (hash: Fc9QxnehbJWfgDQjdhuidQxiP45RcBGojhekVGhguGE=)
                          2: 2A22D2FCB6CB11ECA43EEE87C4F9AE02.roa (hash: 84Ty7wcmoehSksw6QkgqM/3dAcuuvgPeVakKxHJDpTI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.crl
                          rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VjjLHibRGZ2r6LjH7SKwPEzoyAo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 00:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1115 (0x45b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6F2B, serialNumber=5638CB1E26D1199DABE8B8C7ED22B03C4CE8C80A
        Validity
            Not Before: Oct  7 00:17:21 2026 GMT
            Not After : Oct 14 00:17:21 2026 GMT
        Subject: CN=6ac58f91-1885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:80:35:a9:19:63:06:4f:b0:2c:3b:92:7a:ef:
                    21:7c:25:47:2d:7b:78:7a:44:a6:d2:8b:d1:17:3e:
                    b5:fb:e5:37:d7:2a:cd:17:7d:0d:f5:41:c4:83:90:
                    e8:f6:e7:ae:21:e1:ea:c8:59:e0:d4:a5:f5:41:ac:
                    d0:6c:30:4f:0b:9c:ba:de:12:3a:8f:57:97:a1:a5:
                    88:f5:b6:06:6b:be:31:47:74:99:f9:73:b9:7b:b5:
                    e1:3a:62:7c:2d:52:c5:60:f3:15:04:63:c7:25:0f:
                    30:45:dc:c2:6a:69:8d:c4:f4:73:45:d7:75:0a:76:
                    b5:f9:45:ed:1a:18:ff:61:62:88:95:3c:2a:97:89:
                    9a:5a:6e:e4:f1:83:75:8a:b1:f2:a2:52:ab:d6:a0:
                    49:4a:fc:84:be:9c:b9:7d:e1:3c:4a:4b:2a:7b:a6:
                    70:03:05:dc:ef:91:35:d6:b5:ab:db:a5:58:ef:64:
                    79:8a:ef:73:f8:06:ca:d7:c1:1f:ea:e3:0a:2c:f1:
                    29:ae:f7:bd:b5:95:ec:f3:4b:98:0f:6f:7c:a6:39:
                    62:cf:0c:7b:80:83:1a:03:ae:14:fb:8c:aa:36:3e:
                    61:9c:70:eb:d8:d1:d7:42:86:ba:65:42:f0:09:1e:
                    03:f3:6c:12:95:04:cf:2f:ad:5f:1f:f4:fa:cb:38:
                    83:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:F1:FE:55:1B:51:F6:62:06:CA:33:63:9C:99:E8:B8:33:0B:73:E8
            X509v3 Authority Key Identifier:
                keyid:56:38:CB:1E:26:D1:19:9D:AB:E8:B8:C7:ED:22:B0:3C:4C:E8:C8:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VjjLHibRGZ2r6LjH7SKwPEzoyAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:a5:18:46:68:22:a3:02:40:01:75:9e:0b:fe:e5:94:7b:5b:
         95:84:3b:69:1d:a0:d9:d8:6c:5c:8d:c9:d1:b1:27:8b:87:6f:
         01:9a:6e:9d:8f:24:b5:f0:4b:2a:ef:dd:de:31:6d:92:90:15:
         ee:8a:b5:70:a7:97:ba:ae:ec:a6:e7:42:11:a8:05:fe:36:82:
         af:bf:1c:46:2a:c5:c6:7b:a4:8f:cf:e7:25:9f:ce:e6:71:a2:
         1c:0f:f7:83:f0:3c:a8:51:a2:b6:1c:18:61:9b:9c:b9:83:1b:
         6e:a8:21:76:71:01:1b:f5:f1:02:82:e5:a6:16:ef:c9:3c:b4:
         36:0f:fd:20:07:e8:af:6c:6d:d9:11:30:65:fa:f0:a6:80:d1:
         a1:a2:35:86:ff:1f:78:9e:b8:e0:f4:03:c5:3b:4b:55:73:49:
         da:e4:f7:f8:29:17:e7:ab:7c:b0:30:2d:2d:97:27:e5:c7:2b:
         8a:65:8c:fd:5b:fb:7b:1c:8f:31:ad:b9:91:38:9e:b3:9d:5f:
         49:92:96:50:aa:6b:54:70:b3:42:21:90:64:f0:f3:5f:ce:26:
         96:35:76:91:13:21:7b:9e:81:64:60:dc:96:69:0f:28:f7:27:
         ca:f8:10:6e:12:48:47:c4:11:0a:6e:b3:0a:d1:d1:46:73:a9:
         e7:ad:50:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:54:07 2026 by rpki-client