Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft
File:                     vm13JvnXOebsmvk0fs7LQhevej8.mft (raw, json)
Hash identifier:          fUE4jn3Ayl+qVacROBKjzxiEeDvCibu5gjK1pNOXVeE=
Subject key identifier:   34:E9:A2:E6:41:2A:22:E5:F6:76:E3:32:7A:70:10:43:CC:FB:11:A7
Authority key identifier: BE:6D:77:26:F9:D7:39:E6:EC:9A:F9:34:7E:CE:CB:42:17:AF:7A:3F
Certificate issuer:       /CN=A91ED35E/serialNumber=BE6D7726F9D739E6EC9AF9347ECECB4217AF7A3F
Certificate serial:       0207
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vm13JvnXOebsmvk0fs7LQhevej8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft
Manifest number:          0201
Signing time:             Wed 23 Sep 2026 03:02:06 +0000
Manifest this update:     Wed 23 Sep 2026 03:02:05 +0000
Manifest next update:     Wed 30 Sep 2026 03:02:05 +0000
Files and hashes:         1: vm13JvnXOebsmvk0fs7LQhevej8.crl (hash: QYz0l3K7EHZ0NZCTXZIJUzWG68iR/4q9Cpl3irc4R08=)
                          2: 3AE10060B0F111EE9727201AC4F9AE02.roa (hash: C6Cummg9Sl6RCDS2LtUiMc8wWWKvQYCjdXXfFdueSWs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.crl
                          rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vm13JvnXOebsmvk0fs7LQhevej8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 03:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 519 (0x207)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED35E, serialNumber=BE6D7726F9D739E6EC9AF9347ECECB4217AF7A3F
        Validity
            Not Before: Sep 23 03:02:05 2026 GMT
            Not After : Sep 30 03:02:05 2026 GMT
        Subject: CN=6ab3412e-3894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c0:f0:e1:6f:43:dc:68:59:5f:6e:24:b1:dd:
                    07:0f:70:30:29:3d:72:60:34:d0:4b:4b:a1:9e:75:
                    ec:fe:0d:06:2b:81:4c:7e:83:38:9a:3d:21:8f:ee:
                    a8:d1:8a:f5:aa:1b:e5:fa:71:3d:b3:67:bb:1e:85:
                    7e:e0:ae:fb:db:b1:29:84:9b:c5:24:39:de:d4:bc:
                    74:9c:e6:a9:8b:75:28:71:a5:2d:76:4a:ad:5d:6e:
                    d9:63:d3:f8:12:dd:cb:10:98:26:59:15:34:6d:24:
                    56:dd:a6:58:d6:26:97:61:56:2d:36:36:79:d6:fc:
                    26:62:f2:ba:1c:4b:15:d7:1f:89:a7:07:d4:10:59:
                    d5:d6:ad:1e:ee:62:92:c4:ad:cd:2e:ba:52:f8:47:
                    63:33:53:52:24:ad:5f:95:50:a8:fd:0d:81:74:41:
                    be:14:1e:61:93:00:15:15:10:04:c1:c4:d4:14:57:
                    21:bd:b6:e2:de:9f:33:35:7b:12:ec:1d:84:8e:65:
                    c2:84:a4:56:4b:29:1a:e3:19:0a:f0:e2:1a:d9:cf:
                    4a:87:11:b8:cb:81:aa:df:63:9b:2d:13:e8:22:4a:
                    10:56:f5:1d:bb:2b:30:b5:cc:b1:1a:ed:c6:e2:a8:
                    60:46:af:cf:a1:24:9c:f9:bc:de:d0:b5:10:0d:53:
                    12:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:E9:A2:E6:41:2A:22:E5:F6:76:E3:32:7A:70:10:43:CC:FB:11:A7
            X509v3 Authority Key Identifier:
                keyid:BE:6D:77:26:F9:D7:39:E6:EC:9A:F9:34:7E:CE:CB:42:17:AF:7A:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vm13JvnXOebsmvk0fs7LQhevej8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:f4:8d:7a:22:c3:10:b0:35:c9:c1:a6:8c:39:13:9a:c0:39:
         7c:79:02:82:27:3f:01:d1:be:50:11:93:61:5d:41:61:aa:fe:
         a7:dc:bb:c9:01:e8:12:07:fc:20:fd:40:e5:a3:2b:1e:05:9d:
         ef:79:36:ab:56:15:e8:ce:e3:e1:68:c6:81:b1:59:75:26:41:
         d4:a3:39:08:6b:84:05:85:18:0d:0d:6c:c5:26:67:2a:6b:af:
         1a:c8:3a:22:0f:6a:5f:a7:d8:1c:19:f5:41:29:d5:c1:ea:73:
         6c:36:c9:43:0a:7a:e7:c9:7a:16:a6:fd:ab:84:49:c5:6f:dd:
         bf:36:06:0b:c6:7e:31:5a:e6:ed:f4:69:04:7b:ba:95:c9:09:
         fb:b6:1f:05:89:c3:ec:0e:e3:3d:62:00:23:a3:15:66:f8:3b:
         42:35:2c:3f:8d:44:ea:f3:1e:ec:66:5f:d7:05:b9:8b:cb:14:
         1d:8a:fe:1a:11:02:bf:ae:a3:1e:20:84:e0:34:34:6d:24:89:
         43:31:e6:9f:4d:2f:1e:41:00:e9:32:ea:0a:f3:53:0e:01:f7:
         77:85:6c:41:c8:58:b1:4e:96:f6:99:21:eb:99:46:48:4c:2c:
         6c:4f:87:73:c9:93:da:23:eb:7e:1e:fd:88:ef:59:83:ed:57:
         91:05:ca:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:34:59 2026 by rpki-client