Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914417A/752B65021DA111E2BC82A39308B02CD2/VR9-hn-vN0cJR19QtJbX_YhCb7E.mft
File:                     VR9-hn-vN0cJR19QtJbX_YhCb7E.mft (raw, json)
Hash identifier:          7ZK8WShj9rCweii/9JouZHFPsHJTw05aaA1MQXSPywI=
Subject key identifier:   11:5B:76:29:87:59:16:EF:D8:C7:4F:2B:E5:26:01:28:10:44:36:D4
Authority key identifier: 55:1F:7E:86:7F:AF:37:47:09:47:5F:50:B4:96:D7:FD:88:42:6F:B1
Certificate issuer:       /CN=A914417A/serialNumber=551F7E867FAF374709475F50B496D7FD88426FB1
Certificate serial:       3568
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9-hn-vN0cJR19QtJbX_YhCb7E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914417A/752B65021DA111E2BC82A39308B02CD2/VR9-hn-vN0cJR19QtJbX_YhCb7E.mft
Manifest number:          3562
Signing time:             Wed 22 Jul 2026 15:07:30 +0000
Manifest this update:     Wed 22 Jul 2026 15:07:30 +0000
Manifest next update:     Wed 29 Jul 2026 15:07:30 +0000
Files and hashes:         1: VR9-hn-vN0cJR19QtJbX_YhCb7E.crl (hash: bTFUPncTlxYT6wpWZK96iSNCXaxflCQt+1STTNaMeb0=)
                          2: B4FD92C42C5211EEAD14C272C4F9AE02.roa (hash: FDw45yR+UbBpAGinSl1fAl1lgBy1+jOVmwDkOeQk0cg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914417A/752B65021DA111E2BC82A39308B02CD2/VR9-hn-vN0cJR19QtJbX_YhCb7E.crl
                          rsync://rpki.apnic.net/member_repository/A914417A/752B65021DA111E2BC82A39308B02CD2/VR9-hn-vN0cJR19QtJbX_YhCb7E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9-hn-vN0cJR19QtJbX_YhCb7E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 15:07:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13672 (0x3568)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914417A, serialNumber=551F7E867FAF374709475F50B496D7FD88426FB1
        Validity
            Not Before: Jul 22 15:07:30 2026 GMT
            Not After : Jul 29 15:07:30 2026 GMT
        Subject: CN=6a60dcb2-ce9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b3:09:09:fa:b0:63:57:d9:31:fa:cb:60:46:
                    7e:f9:0e:ab:10:51:82:f3:16:90:ae:09:71:8b:61:
                    3d:9b:a3:02:6e:d6:09:93:52:8f:c9:25:86:2c:d8:
                    d2:90:5e:a3:0a:f0:d7:60:0c:cb:52:c3:b1:78:23:
                    e3:b7:aa:9c:95:f1:db:11:84:3d:83:27:86:55:c5:
                    74:b3:16:83:4c:d0:c9:6c:eb:85:a2:ec:08:bd:50:
                    f5:67:34:25:da:29:f6:73:e1:56:ad:24:ad:ba:26:
                    d0:b9:fc:33:e6:ca:74:f6:f0:f7:09:d1:a5:db:32:
                    5a:46:a5:8b:67:ad:b5:f2:22:0d:9b:44:e5:3a:8f:
                    88:ef:ab:ea:26:37:92:7f:3b:d4:f1:9e:25:0a:3d:
                    65:77:01:57:7f:65:24:d6:65:49:1e:dc:0b:aa:ba:
                    f8:0c:ff:c5:9c:f1:43:6e:78:d1:f1:90:c6:54:63:
                    07:87:fd:2b:bf:bb:fa:73:8a:4e:56:96:c9:95:7f:
                    08:01:fe:28:c7:b3:64:1d:70:67:65:8f:d8:7c:bf:
                    c3:10:49:9f:81:2d:08:da:0d:a4:c8:48:6f:22:18:
                    a4:1e:05:8b:fd:16:03:d8:93:b4:35:65:1b:2f:34:
                    f7:36:ae:bd:2d:17:6f:71:87:2f:ff:9e:50:16:d6:
                    3d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:5B:76:29:87:59:16:EF:D8:C7:4F:2B:E5:26:01:28:10:44:36:D4
            X509v3 Authority Key Identifier:
                keyid:55:1F:7E:86:7F:AF:37:47:09:47:5F:50:B4:96:D7:FD:88:42:6F:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914417A/752B65021DA111E2BC82A39308B02CD2/VR9-hn-vN0cJR19QtJbX_YhCb7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9-hn-vN0cJR19QtJbX_YhCb7E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914417A/752B65021DA111E2BC82A39308B02CD2/VR9-hn-vN0cJR19QtJbX_YhCb7E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:c9:d9:75:4a:6a:1e:72:cd:a3:1b:a3:0c:70:35:07:e0:3c:
         91:d8:b4:9a:c6:2a:1c:d9:05:8f:c7:0a:67:a7:f2:f6:0d:c8:
         29:50:51:dc:bd:de:6b:d3:a0:67:a3:6c:54:18:d4:f0:61:6d:
         12:50:d3:d1:d7:4b:f5:32:cc:5d:7a:98:68:6d:d9:b1:15:ff:
         69:6c:b5:28:45:14:ed:58:bb:ff:da:7d:f7:fb:f6:1f:33:f0:
         14:56:a9:71:1f:30:25:03:76:f1:ed:27:1a:f5:66:95:9f:bc:
         f3:61:19:18:2b:c7:20:3d:d0:28:68:f8:7c:76:98:7f:28:16:
         0a:c5:24:60:80:2c:07:6d:d7:82:65:4d:bd:45:d2:61:a7:ff:
         e4:e0:6f:eb:d6:e8:11:f7:71:34:79:d9:2a:ff:2f:9f:52:73:
         23:b7:50:47:3c:70:98:4d:19:c1:6e:e9:be:53:46:ae:52:8c:
         2b:4d:0f:fb:2a:20:2e:45:b5:6e:a0:f6:e2:6b:2f:e7:c2:a3:
         7f:0f:fd:9b:0e:5d:4f:98:d8:54:30:82:bf:6c:bd:b8:49:b0:
         97:38:ba:70:47:3c:c3:7b:94:68:65:7b:49:d2:0d:fd:55:dc:
         47:2e:63:22:0c:b1:f2:de:c8:6d:94:fd:6a:98:c5:4b:e5:ca:
         84:d7:d4:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:41:10 2026 by rpki-client