Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4700/186F2C2ABB8311F088969765C4F9AE02/vCXNTkiu32CLScwphHLFwG6L9vs.mft
File:                     vCXNTkiu32CLScwphHLFwG6L9vs.mft (raw, json)
Hash identifier:          jX3DQE4qjpK6Qie0tq4CBR5TRjOUGPrbJHX3Xt8QAUc=
Subject key identifier:   CC:98:23:6C:D3:46:18:E7:F3:16:26:F4:1D:00:B3:18:DB:F7:90:4C
Authority key identifier: BC:25:CD:4E:48:AE:DF:60:8B:49:CC:29:84:72:C5:C0:6E:8B:F6:FB
Certificate issuer:       /CN=A91E4700/serialNumber=BC25CD4E48AEDF608B49CC298472C5C06E8BF6FB
Certificate serial:       C5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vCXNTkiu32CLScwphHLFwG6L9vs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4700/186F2C2ABB8311F088969765C4F9AE02/vCXNTkiu32CLScwphHLFwG6L9vs.mft
Manifest number:          C1
Signing time:             Thu 05 Nov 2026 07:46:57 +0000
Manifest this update:     Thu 05 Nov 2026 07:46:56 +0000
Manifest next update:     Thu 12 Nov 2026 07:46:56 +0000
Files and hashes:         1: vCXNTkiu32CLScwphHLFwG6L9vs.crl (hash: SppynpJSt4CdUl0DRuKe6GL2HgMVhODog/XtXPGW8tk=)
                          2: A9CD5C92BB8C11F08999FE2AC4F9AE02.roa (hash: c3y0t6IJx6Q11r5JDlgaeAC6nTxUNX96hYufhWBf0xM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4700/186F2C2ABB8311F088969765C4F9AE02/vCXNTkiu32CLScwphHLFwG6L9vs.crl
                          rsync://rpki.apnic.net/member_repository/A91E4700/186F2C2ABB8311F088969765C4F9AE02/vCXNTkiu32CLScwphHLFwG6L9vs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vCXNTkiu32CLScwphHLFwG6L9vs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Nov 2026 07:46:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 197 (0xc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4700, serialNumber=BC25CD4E48AEDF608B49CC298472C5C06E8BF6FB
        Validity
            Not Before: Nov  5 07:46:56 2026 GMT
            Not After : Nov 12 07:46:56 2026 GMT
        Subject: CN=6aec3471-6aa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5c:45:24:87:eb:5d:2a:de:b6:93:6e:3b:b9:
                    6d:df:26:11:28:64:29:53:d9:c3:5e:17:65:73:d7:
                    bb:42:0e:f2:6e:90:55:b2:19:9e:88:bb:20:7d:85:
                    3d:29:fe:87:bf:5d:65:f5:10:05:d3:01:1f:38:a8:
                    d4:95:f9:46:5b:71:19:60:f1:e6:9a:cb:c7:c5:95:
                    78:14:3c:5c:f5:1d:c9:08:b0:fb:86:0e:0d:5f:39:
                    8d:ae:6e:ed:ce:da:32:e2:f5:a0:1e:9c:84:42:c3:
                    69:fe:59:f4:a1:7b:bd:77:45:54:a5:e5:13:17:d2:
                    02:4b:24:e4:68:61:50:60:03:a6:37:a2:e7:f0:2d:
                    d7:de:12:5d:60:a4:fe:a4:42:9b:72:63:3a:42:fe:
                    e6:8c:e0:80:ad:e0:7e:af:51:55:c5:0c:12:7e:86:
                    8f:31:0b:dc:95:ad:31:ac:8a:b9:53:d1:1a:93:bb:
                    30:2d:7b:e8:d6:e9:cf:7e:42:9a:85:41:f7:c9:2f:
                    3d:63:06:6c:b4:ed:cf:d0:47:18:4f:7f:8f:79:24:
                    b8:15:11:ed:75:29:58:06:f1:d6:7a:09:11:96:b4:
                    f9:7b:13:9a:fa:e7:4e:be:99:dd:01:f0:6d:c4:bb:
                    23:3e:5d:80:ce:1a:ce:1a:8b:8d:1d:ae:0d:80:20:
                    82:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:98:23:6C:D3:46:18:E7:F3:16:26:F4:1D:00:B3:18:DB:F7:90:4C
            X509v3 Authority Key Identifier:
                keyid:BC:25:CD:4E:48:AE:DF:60:8B:49:CC:29:84:72:C5:C0:6E:8B:F6:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4700/186F2C2ABB8311F088969765C4F9AE02/vCXNTkiu32CLScwphHLFwG6L9vs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vCXNTkiu32CLScwphHLFwG6L9vs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4700/186F2C2ABB8311F088969765C4F9AE02/vCXNTkiu32CLScwphHLFwG6L9vs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:c7:6f:f7:8b:96:09:43:62:5e:4d:4b:7b:ab:3b:0f:9f:2b:
         3b:1a:ea:b8:70:79:54:59:be:8c:da:6f:14:02:ea:14:23:6b:
         21:ef:86:7f:e9:4b:fd:7d:c4:ed:9e:05:35:6c:5b:89:ea:8c:
         63:3e:34:2c:b4:cf:4f:02:20:11:e5:99:72:fd:4a:0c:2f:78:
         0b:ee:0a:9d:c4:5c:b2:87:77:56:c9:90:cf:a3:ad:32:75:dd:
         69:9b:bd:49:4f:11:5e:4a:c0:15:03:ed:e4:bd:b5:e1:3d:8a:
         8d:6f:e7:11:07:18:47:e4:c9:83:62:49:f9:b5:0b:db:6f:2f:
         cc:f9:43:93:9f:38:45:3c:9f:e6:2f:c7:74:97:b6:bf:f0:f5:
         c0:6b:74:cc:99:80:d1:7b:98:ba:63:1e:cf:39:37:59:b1:88:
         13:93:02:3d:03:57:18:46:47:c0:18:ee:fe:0e:a5:43:53:a1:
         a2:49:49:2b:d8:8e:bc:e6:3b:47:9d:f0:e5:8c:ce:80:29:c9:
         dc:51:37:7f:c2:59:1d:73:dc:6b:5d:a3:ef:f7:9b:71:67:d5:
         a4:2a:c3:85:c7:a1:c8:21:b4:0d:50:40:8b:80:4d:0c:d5:13:
         49:a7:49:c1:8f:a9:f6:d2:ab:72:19:ae:aa:c9:a9:e7:70:34:
         26:89:1a:d8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTQ3MDAxMTAvBgNVBAUTKEJDMjVDRDRFNDhBRURGNjA4QjQ5Q0MyOTg0NzJDNUMw
NkU4QkY2RkIwHhcNMjYxMTA1MDc0NjU2WhcNMjYxMTEyMDc0NjU2WjAYMRYwFAYD
VQQDEw02YWVjMzQ3MS02YWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzVxFJIfrXSretpNuO7lt3yYRKGQpU9nDXhdlc9e7Qg7ybpBVshmeiLsgfYU9
Kf6Hv11l9RAF0wEfOKjUlflGW3EZYPHmmsvHxZV4FDxc9R3JCLD7hg4NXzmNrm7t
ztoy4vWgHpyEQsNp/ln0oXu9d0VUpeUTF9ICSyTkaGFQYAOmN6Ln8C3X3hJdYKT+
pEKbcmM6Qv7mjOCAreB+r1FVxQwSfoaPMQvcla0xrIq5U9Eak7swLXvo1unPfkKa
hUH3yS89YwZstO3P0EcYT3+PeSS4FRHtdSlYBvHWegkRlrT5exOa+udOvpndAfBt
xLsjPl2AzhrOGouNHa4NgCCC4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMyYI2zT
Rhjn8xYm9B0Asxjb95BMMB8GA1UdIwQYMBaAFLwlzU5Irt9gi0nMKYRyxcBui/b7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDcwMC8xODZGMkMyQUJC
ODMxMUYwODg5Njk3NjVDNEY5QUUwMi92Q1hOVGtpdTMyQ0xTY3dwaEhMRndHNkw5
dnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3ZDWE5Ua2l1MzJDTFNjd3BoSExGd0c2TDl2cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NDcwMC8xODZGMkMyQUJCODMxMUYwODg5Njk3NjVDNEY5QUUwMi92Q1hOVGtpdTMy
Q0xTY3dwaEhMRndHNkw5dnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdsdv94uWCUNiXk1Le6s7D58rOxrquHB5VFm+jNpvFALqFCNrIe+Gf+lL/X3E
7Z4FNWxbieqMYz40LLTPTwIgEeWZcv1KDC94C+4KncRcsod3VsmQz6OtMnXdaZu9
SU8RXkrAFQPt5L214T2KjW/nEQcYR+TJg2JJ+bUL228vzPlDk584RTyf5i/HdJe2
v/D1wGt0zJmA0XuYumMezzk3WbGIE5MCPQNXGEZHwBju/g6lQ1OhoklJK9iOvOY7
R53w5YzOgCnJ3FE3f8JZHXPca12j7/ebcWfVpCrDhcehyCG0DVBAi4BNDNUTSadJ
wY+p9tKrchmuqsmp53A0Joka2A==
-----END CERTIFICATE-----
Generated at Thu Nov 5 14:29:13 2026 by rpki-client