Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/VmpvNEQKySle2KAC1QSfV0zxbIg.mft
File:                     VmpvNEQKySle2KAC1QSfV0zxbIg.mft (raw, json)
Hash identifier:          UyoWCqluP4HTthYfshvDog6l+GndKlNOpZ9J9ad4o3M=
Subject key identifier:   6A:D6:5D:61:8C:3F:64:5D:57:5D:E9:8E:84:FC:EE:55:CF:93:B2:14
Authority key identifier: 56:6A:6F:34:44:0A:C9:29:5E:D8:A0:02:D5:04:9F:57:4C:F1:6C:88
Certificate issuer:       /CN=A91FA64C/serialNumber=566A6F34440AC9295ED8A002D5049F574CF16C88
Certificate serial:       0295
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VmpvNEQKySle2KAC1QSfV0zxbIg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/VmpvNEQKySle2KAC1QSfV0zxbIg.mft
Manifest number:          0287
Signing time:             Fri 09 Oct 2026 02:24:10 +0000
Manifest this update:     Fri 09 Oct 2026 02:24:09 +0000
Manifest next update:     Fri 16 Oct 2026 02:24:09 +0000
Files and hashes:         1: VmpvNEQKySle2KAC1QSfV0zxbIg.crl (hash: w33761a069J+eBJCuOONrmMXacACi6OFkAYUbFbYyJQ=)
                          2: FFCE072E2B8111EE9BDEC079C4F9AE02.roa (hash: fC/KFkgq6lUne8dQqCH/x45Z+TiR28HM4WHVvUg10H8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/VmpvNEQKySle2KAC1QSfV0zxbIg.crl
                          rsync://rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/VmpvNEQKySle2KAC1QSfV0zxbIg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VmpvNEQKySle2KAC1QSfV0zxbIg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 02:24:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 661 (0x295)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA64C, serialNumber=566A6F34440AC9295ED8A002D5049F574CF16C88
        Validity
            Not Before: Oct  9 02:24:09 2026 GMT
            Not After : Oct 16 02:24:09 2026 GMT
        Subject: CN=6ac85049-352b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:6b:4b:3b:f3:12:83:87:62:5e:d3:34:c1:da:
                    65:d7:b2:22:e9:6b:85:e5:ee:e4:e9:98:89:a6:a6:
                    1c:0e:ba:d0:af:3e:0e:41:d7:d2:b3:84:dd:27:4e:
                    0a:d7:cc:d5:56:a1:c1:24:99:59:12:ad:fa:b9:d8:
                    94:70:86:49:e6:6a:a7:9e:3d:f8:1c:93:56:a6:bc:
                    36:14:fe:61:96:c6:a1:38:42:96:e0:95:b1:18:d9:
                    a9:25:46:b5:90:bc:67:e9:e1:2f:6c:36:45:bb:1a:
                    8c:1d:bc:c5:4d:d3:93:ae:1e:50:ab:99:97:87:ab:
                    c9:c6:a3:0a:24:a8:b5:f6:cf:c7:64:d9:50:87:61:
                    cd:35:31:01:b6:59:49:45:bc:63:d6:2f:48:50:d8:
                    6e:67:22:52:b6:80:cd:b6:5c:51:71:37:9b:c1:94:
                    08:48:6d:52:69:bd:e2:7a:e5:02:7b:35:0e:ed:17:
                    a9:b6:29:fa:d3:15:1c:79:91:0b:c8:02:4a:6f:81:
                    a7:66:53:66:9e:cb:f7:c4:c8:eb:20:20:d5:74:53:
                    70:9a:69:3e:a1:35:e4:64:dc:ff:22:c8:ae:65:3d:
                    0a:bd:8c:9e:1e:5f:ed:8f:50:92:5c:d1:e5:b2:de:
                    55:fa:32:59:fd:a4:19:7d:1a:28:41:7e:89:71:73:
                    93:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:D6:5D:61:8C:3F:64:5D:57:5D:E9:8E:84:FC:EE:55:CF:93:B2:14
            X509v3 Authority Key Identifier:
                keyid:56:6A:6F:34:44:0A:C9:29:5E:D8:A0:02:D5:04:9F:57:4C:F1:6C:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/VmpvNEQKySle2KAC1QSfV0zxbIg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VmpvNEQKySle2KAC1QSfV0zxbIg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/VmpvNEQKySle2KAC1QSfV0zxbIg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:b0:4d:2f:93:c1:d4:3d:bd:1a:d6:c1:cb:60:f9:ba:0c:91:
         3b:67:cf:61:1c:a1:4e:ea:79:4e:49:98:6c:ec:fd:03:fd:e6:
         47:36:c6:84:56:96:e9:10:f6:fd:35:14:91:3c:e7:67:04:59:
         c4:e6:20:33:6e:0a:46:d0:5a:ea:a5:51:43:5d:db:5f:4a:95:
         7a:59:df:8e:66:fd:2a:2c:8c:ae:f1:5f:25:f0:5b:24:50:71:
         d4:78:c3:c9:3e:c3:60:a5:e0:b7:79:18:15:f1:b4:9e:d1:a4:
         ba:fa:98:38:fd:3a:a6:f4:b2:9d:18:39:6f:93:95:c7:de:eb:
         bd:df:4a:9b:cb:8f:a6:e2:da:b3:50:29:77:22:ca:f1:7e:ee:
         26:6e:58:a0:d3:bc:26:81:21:40:f7:37:22:d2:26:44:97:e3:
         45:c1:6a:c0:40:3e:53:e7:5b:78:a6:69:34:1a:53:6a:06:3d:
         f1:41:ce:38:3f:8c:6b:5a:5a:39:c5:42:8d:74:7a:3b:1d:18:
         77:7a:fe:1c:6b:14:25:0c:d9:9d:85:0a:88:21:cf:e9:c0:b3:
         5a:91:42:39:4c:8a:86:23:53:ca:bc:16:e5:da:9f:e8:e3:52:
         8e:4a:16:3a:57:da:ad:f3:a7:fe:b0:1d:7b:f9:76:aa:a9:ff:
         27:e7:a1:cc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICApUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkE2NEMxMTAvBgNVBAUTKDU2NkE2RjM0NDQwQUM5Mjk1RUQ4QTAwMkQ1MDQ5RjU3
NENGMTZDODgwHhcNMjYxMDA5MDIyNDA5WhcNMjYxMDE2MDIyNDA5WjAYMRYwFAYD
VQQDEw02YWM4NTA0OS0zNTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9mtLO/MSg4diXtM0wdpl17Ii6WuF5e7k6ZiJpqYcDrrQrz4OQdfSs4TdJ04K
18zVVqHBJJlZEq36udiUcIZJ5mqnnj34HJNWprw2FP5hlsahOEKW4JWxGNmpJUa1
kLxn6eEvbDZFuxqMHbzFTdOTrh5Qq5mXh6vJxqMKJKi19s/HZNlQh2HNNTEBtllJ
Rbxj1i9IUNhuZyJStoDNtlxRcTebwZQISG1Sab3ieuUCezUO7Reptin60xUceZEL
yAJKb4GnZlNmnsv3xMjrICDVdFNwmmk+oTXkZNz/IsiuZT0KvYyeHl/tj1CSXNHl
st5V+jJZ/aQZfRooQX6JcXOTtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGrWXWGM
P2RdV13pjoT87lXPk7IUMB8GA1UdIwQYMBaAFFZqbzRECskpXtigAtUEn1dM8WyI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTY0Qy9FMUE1NDYyNkY3
OTgxMUVEOTY3NzcxMjRDNEY5QUUwMi9WbXB2TkVRS3lTbGUyS0FDMVFTZlYwenhi
SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZtcHZORVFLeVNsZTJLQUMxUVNmVjB6eGJJZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QTY0Qy9FMUE1NDYyNkY3OTgxMUVEOTY3NzcxMjRDNEY5QUUwMi9WbXB2TkVRS3lT
bGUyS0FDMVFTZlYwenhiSWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAArBNL5PB1D29GtbBy2D5ugyRO2fPYRyhTup5TkmYbOz9A/3mRzbGhFaW6RD2
/TUUkTznZwRZxOYgM24KRtBa6qVRQ13bX0qVelnfjmb9KiyMrvFfJfBbJFBx1HjD
yT7DYKXgt3kYFfG0ntGkuvqYOP06pvSynRg5b5OVx97rvd9Km8uPpuLas1ApdyLK
8X7uJm5YoNO8JoEhQPc3ItImRJfjRcFqwEA+U+dbeKZpNBpTagY98UHOOD+Ma1pa
OcVCjXR6Ox0Yd3r+HGsUJQzZnYUKiCHP6cCzWpFCOUyKhiNTyrwW5dqf6ONSjkoW
OlfarfOn/rAde/l2qqn/J+ehzA==
-----END CERTIFICATE-----
Generated at Fri Oct 9 05:53:02 2026 by rpki-client