Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.mft
File:                     vtASVxhUXB5QgDHT_1-26Chqf9g.mft (raw, json)
Hash identifier:          QALvjhouatozDmXkdR7HbeA4XQGhGYrGYne+lS/CTUA=
Subject key identifier:   81:D7:ED:DC:C9:C0:38:F3:A6:75:7A:9B:98:F1:3B:6E:96:27:79:92
Authority key identifier: BE:D0:12:57:18:54:5C:1E:50:80:31:D3:FF:5F:B6:E8:28:6A:7F:D8
Certificate issuer:       /CN=A91E72DE/serialNumber=BED0125718545C1E508031D3FF5FB6E8286A7FD8
Certificate serial:       0304
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vtASVxhUXB5QgDHT_1-26Chqf9g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.mft
Manifest number:          02FC
Signing time:             Mon 21 Sep 2026 00:57:45 +0000
Manifest this update:     Mon 21 Sep 2026 00:57:44 +0000
Manifest next update:     Mon 28 Sep 2026 00:57:44 +0000
Files and hashes:         1: vtASVxhUXB5QgDHT_1-26Chqf9g.crl (hash: PsZvomYkJMF7FKT1/sA2B739PcNOu7NEZ+hjCDHdJE8=)
                          2: DBA023303B6F11ED903B484FC4F9AE02.roa (hash: /+2x4P+0VjjyulNd+Hlilcjz+a4mQNA9bK+3jYhM9Ew=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.crl
                          rsync://rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vtASVxhUXB5QgDHT_1-26Chqf9g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 00:57:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 772 (0x304)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E72DE, serialNumber=BED0125718545C1E508031D3FF5FB6E8286A7FD8
        Validity
            Not Before: Sep 21 00:57:44 2026 GMT
            Not After : Sep 28 00:57:44 2026 GMT
        Subject: CN=6ab08108-3017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ca:f2:fb:aa:26:92:4a:78:1e:72:a7:2a:11:
                    f1:4a:02:10:4b:ce:c3:11:df:d0:f8:18:26:59:9d:
                    0c:e0:6c:15:05:3c:13:a9:b2:ba:a6:44:89:7e:7e:
                    02:bc:94:04:b2:ce:bc:63:ab:3e:4d:cb:1d:c3:1e:
                    84:55:7a:52:fc:f2:c0:31:1a:e3:54:32:dc:76:25:
                    d1:ba:2c:2e:fa:46:78:84:6b:70:fc:fe:e3:44:21:
                    f1:8d:fe:8f:b7:f2:75:d9:6d:81:3b:13:12:a8:e1:
                    b3:9f:68:85:02:98:9d:3d:06:7a:13:b4:e6:59:93:
                    c3:30:e9:69:21:26:82:fe:28:7d:f0:12:c7:ce:b8:
                    3e:48:8d:a0:24:c0:ca:35:e4:ab:dd:7f:a7:f8:d2:
                    c0:e6:aa:ff:f4:77:26:99:ad:db:ca:0a:55:c8:9a:
                    3a:ab:46:2d:22:88:4a:d5:1e:a7:6d:dd:be:18:5b:
                    bd:d6:29:e3:87:87:c8:fc:9a:da:5a:ab:46:3b:c1:
                    9f:e6:8f:80:c7:d3:11:04:3e:3d:15:91:4d:4a:53:
                    1f:f4:1a:74:4f:33:d0:2b:06:d7:3d:a3:b2:2e:2e:
                    0a:e6:fe:e4:6a:52:ae:6b:3d:42:c1:a9:20:10:58:
                    62:82:64:39:cb:83:8c:42:3d:c2:6f:e3:8e:cc:ba:
                    ba:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:D7:ED:DC:C9:C0:38:F3:A6:75:7A:9B:98:F1:3B:6E:96:27:79:92
            X509v3 Authority Key Identifier:
                keyid:BE:D0:12:57:18:54:5C:1E:50:80:31:D3:FF:5F:B6:E8:28:6A:7F:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vtASVxhUXB5QgDHT_1-26Chqf9g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:aa:f1:c9:61:52:9e:55:ef:97:75:87:e3:47:0e:7a:66:52:
         41:5b:14:35:fb:ab:af:0e:3e:2e:65:61:ae:7b:90:70:c9:2e:
         ca:53:75:c3:c0:2b:f4:4a:ea:37:43:60:f5:89:2e:e3:6f:c6:
         68:1e:7c:27:97:05:4e:4c:db:10:de:8d:7f:9c:ee:c3:de:5a:
         3d:69:b6:88:9b:27:b5:b8:90:dc:6b:3e:79:a5:7d:24:29:9b:
         c1:d0:30:a2:2e:15:84:cf:39:01:72:b2:55:73:48:42:ed:6d:
         ee:28:fd:44:7a:d2:23:7d:40:12:a7:75:a4:2c:ed:b5:e4:fd:
         d9:32:d6:46:7a:fe:6c:9a:37:54:a2:7c:11:7c:b9:95:7e:b8:
         6d:be:fb:15:13:6e:d5:d4:44:54:1e:09:83:c2:76:2c:c1:1e:
         03:5a:4d:32:f9:42:bf:5e:41:00:f7:08:fc:03:a6:4f:30:4d:
         9e:27:c6:63:64:57:07:50:b6:28:aa:96:88:a0:26:68:31:5b:
         ab:6e:e2:b9:bf:25:a3:be:90:33:5a:7c:f7:7e:3b:fa:e6:e7:
         61:fc:0a:91:d8:b5:14:8c:0d:d3:a5:87:21:eb:68:4e:d9:4d:
         39:28:a6:28:48:92:c1:43:ba:de:fa:55:d0:71:ce:ef:1b:4e:
         d5:4e:09:5e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAwQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTcyREUxMTAvBgNVBAUTKEJFRDAxMjU3MTg1NDVDMUU1MDgwMzFEM0ZGNUZCNkU4
Mjg2QTdGRDgwHhcNMjYwOTIxMDA1NzQ0WhcNMjYwOTI4MDA1NzQ0WjAYMRYwFAYD
VQQDEw02YWIwODEwOC0zMDE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt8ry+6omkkp4HnKnKhHxSgIQS87DEd/Q+BgmWZ0M4GwVBTwTqbK6pkSJfn4C
vJQEss68Y6s+Tcsdwx6EVXpS/PLAMRrjVDLcdiXRuiwu+kZ4hGtw/P7jRCHxjf6P
t/J12W2BOxMSqOGzn2iFApidPQZ6E7TmWZPDMOlpISaC/ih98BLHzrg+SI2gJMDK
NeSr3X+n+NLA5qr/9Hcmma3bygpVyJo6q0YtIohK1R6nbd2+GFu91injh4fI/Jra
WqtGO8Gf5o+Ax9MRBD49FZFNSlMf9Bp0TzPQKwbXPaOyLi4K5v7kalKuaz1Cwakg
EFhigmQ5y4OMQj3Cb+OOzLq6QQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIHX7dzJ
wDjzpnV6m5jxO26WJ3mSMB8GA1UdIwQYMBaAFL7QElcYVFweUIAx0/9ftugoan/Y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzJERS84REU0RTRDMDNC
NkQxMUVEQjJCM0IzNEVDNEY5QUUwMi92dEFTVnhoVVhCNVFnREhUXzEtMjZDaHFm
OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Z0QVNWeGhVWEI1UWdESFRfMS0yNkNocWY5Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NzJERS84REU0RTRDMDNCNkQxMUVEQjJCM0IzNEVDNEY5QUUwMi92dEFTVnhoVVhC
NVFnREhUXzEtMjZDaHFmOWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAE6rxyWFSnlXvl3WH40cOemZSQVsUNfurrw4+LmVhrnuQcMkuylN1w8Ar9Erq
N0Ng9Yku42/GaB58J5cFTkzbEN6Nf5zuw95aPWm2iJsntbiQ3Gs+eaV9JCmbwdAw
oi4VhM85AXKyVXNIQu1t7ij9RHrSI31AEqd1pCztteT92TLWRnr+bJo3VKJ8EXy5
lX64bb77FRNu1dREVB4Jg8J2LMEeA1pNMvlCv15BAPcI/AOmTzBNnifGY2RXB1C2
KKqWiKAmaDFbq27iub8lo76QM1p89347+ubnYfwKkdi1FIwN06WHIetoTtlNOSim
KEiSwUO63vpV0HHO7xtO1U4JXg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 13:02:41 2026 by rpki-client