Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.mft
File:                     VVzqN0EM0oazHxoArfYlPUzgUjI.mft (raw, json)
Hash identifier:          obMn7FUJtGem+r7dJbOtXUM76f4z7JWfvLLSYPYpJuo=
Subject key identifier:   37:5B:55:0D:6F:1D:DB:61:92:98:92:AA:E6:74:B9:C6:C6:C3:F4:F9
Authority key identifier: 55:5C:EA:37:41:0C:D2:86:B3:1F:1A:00:AD:F6:25:3D:4C:E0:52:32
Certificate issuer:       /CN=A9137522/serialNumber=555CEA37410CD286B31F1A00ADF6253D4CE05232
Certificate serial:       3567
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVzqN0EM0oazHxoArfYlPUzgUjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.mft
Manifest number:          355F
Signing time:             Wed 22 Jul 2026 15:04:03 +0000
Manifest this update:     Wed 22 Jul 2026 15:04:03 +0000
Manifest next update:     Wed 29 Jul 2026 15:04:03 +0000
Files and hashes:         1: VVzqN0EM0oazHxoArfYlPUzgUjI.crl (hash: ML+NJ9UI9LjgS67fD+JsPp70qhhAjlBZpdRfqesVd2Y=)
                          2: FF9802D6FE3911EBBCE1485DC4F9AE02.roa (hash: Zqu39Uw0HncOG5VI+5Ts7HDsov6x0MYg0Iq+gNjyWCk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.crl
                          rsync://rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVzqN0EM0oazHxoArfYlPUzgUjI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 15:04:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13671 (0x3567)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137522, serialNumber=555CEA37410CD286B31F1A00ADF6253D4CE05232
        Validity
            Not Before: Jul 22 15:04:03 2026 GMT
            Not After : Jul 29 15:04:03 2026 GMT
        Subject: CN=6a60dbe3-d985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9d:87:08:d4:80:11:02:7a:e8:d1:67:c9:83:
                    64:5c:28:a1:33:2a:a1:29:8d:b9:be:dc:d5:d3:54:
                    45:c2:9d:18:f9:9a:0b:97:5d:33:d9:8b:7c:0a:de:
                    9c:cb:d9:87:49:ac:b9:72:9e:7a:82:86:a6:15:f7:
                    69:a7:fe:eb:79:9f:d1:7d:ef:fa:b2:84:75:8c:99:
                    82:cd:c2:32:45:26:67:7e:65:e0:ae:da:39:8b:0a:
                    a6:74:66:e7:a8:77:5a:2f:6a:f9:1d:07:99:64:0f:
                    da:cc:fe:23:d5:8b:96:b9:c8:50:5c:be:8c:6e:81:
                    66:dc:54:28:37:43:f3:6c:cf:ba:b9:2a:68:f9:a1:
                    b8:b5:58:38:a9:fe:e3:2e:11:03:82:b7:8d:bd:d2:
                    d9:07:1e:72:6f:24:c2:45:b0:e5:7c:87:cd:e0:e0:
                    c4:5a:ba:ca:42:68:9f:fa:c2:a1:a0:d8:d5:27:fd:
                    4f:1d:d6:bc:62:72:2c:1b:af:f1:16:1b:10:1d:d4:
                    b9:32:7a:f9:4f:8d:f7:52:cb:ab:5e:23:ef:19:6e:
                    84:3b:19:48:1e:ff:49:f8:52:2b:d4:13:cf:f1:4a:
                    9d:31:c8:70:fb:41:a3:4d:71:44:cd:64:1f:85:46:
                    47:92:b9:9c:23:f3:08:64:ae:58:7d:16:46:2f:74:
                    2f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:5B:55:0D:6F:1D:DB:61:92:98:92:AA:E6:74:B9:C6:C6:C3:F4:F9
            X509v3 Authority Key Identifier:
                keyid:55:5C:EA:37:41:0C:D2:86:B3:1F:1A:00:AD:F6:25:3D:4C:E0:52:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVzqN0EM0oazHxoArfYlPUzgUjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:1d:2a:31:07:7d:2d:ab:ab:76:91:d5:b9:b0:0e:ef:54:f4:
         51:a9:80:6a:11:b1:92:88:b8:5f:82:17:f9:5a:0e:35:7e:fd:
         9c:c2:66:b2:ad:04:6b:1a:72:f6:35:22:ab:c2:3e:7b:5d:13:
         9a:c2:6e:05:bb:24:bb:b0:59:38:f6:3c:a2:e9:b5:7c:fd:cf:
         52:ca:e7:d8:0d:e1:cd:d3:2c:74:8c:70:8f:b9:c1:a8:d0:26:
         18:0b:d8:f0:9a:4d:76:50:3c:b5:84:ec:c8:56:39:b0:32:1f:
         1d:23:30:85:c1:7f:fb:6b:30:09:16:3f:4a:73:11:a9:ba:40:
         ee:d1:8e:5b:82:3d:90:d2:30:7c:b6:95:79:a5:97:0e:42:a5:
         1e:c3:23:dc:94:3e:b1:a7:61:8f:57:86:4a:ef:e7:46:4f:56:
         0b:78:ba:0e:8d:82:6d:17:c9:a8:31:9c:c8:5e:ec:ef:f8:03:
         50:44:a0:c8:31:21:cf:6c:15:5a:2a:3a:dd:42:96:d8:b5:cf:
         d0:3b:a7:a7:f2:39:6d:7d:42:ac:56:ce:ad:d3:dd:40:71:98:
         c6:8d:8c:aa:c5:0d:d9:29:d3:9c:1d:16:13:34:e4:05:d3:58:
         f3:40:bf:f3:0a:f3:bd:c0:b5:d0:46:74:fc:cc:9f:33:52:d3:
         28:00:19:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:01:54 2026 by rpki-client