Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914417A/752B65021DA111E2BC82A39308B02CD2/VR9-hn-vN0cJR19QtJbX_YhCb7E.mft
File:                     VR9-hn-vN0cJR19QtJbX_YhCb7E.mft (raw, json)
Hash identifier:          VgRVe077B8zuJmYzNygikG4OLh/skiUi1NTtvBgnY5Y=
Subject key identifier:   E4:72:09:40:77:5D:73:20:80:25:13:1C:57:FA:91:58:30:6B:77:C0
Authority key identifier: 55:1F:7E:86:7F:AF:37:47:09:47:5F:50:B4:96:D7:FD:88:42:6F:B1
Certificate issuer:       /CN=A914417A/serialNumber=551F7E867FAF374709475F50B496D7FD88426FB1
Certificate serial:       352B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9-hn-vN0cJR19QtJbX_YhCb7E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914417A/752B65021DA111E2BC82A39308B02CD2/VR9-hn-vN0cJR19QtJbX_YhCb7E.mft
Manifest number:          3525
Signing time:             Tue 24 Mar 2026 15:03:04 +0000
Manifest this update:     Tue 24 Mar 2026 15:03:04 +0000
Manifest next update:     Tue 31 Mar 2026 15:03:04 +0000
Files and hashes:         1: VR9-hn-vN0cJR19QtJbX_YhCb7E.crl (hash: yL+3anFYEd6YBUpgg4PeLxPttXv+REzrqDfoBeVsbbQ=)
                          2: B4FD92C42C5211EEAD14C272C4F9AE02.roa (hash: FDw45yR+UbBpAGinSl1fAl1lgBy1+jOVmwDkOeQk0cg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914417A/752B65021DA111E2BC82A39308B02CD2/VR9-hn-vN0cJR19QtJbX_YhCb7E.crl
                          rsync://rpki.apnic.net/member_repository/A914417A/752B65021DA111E2BC82A39308B02CD2/VR9-hn-vN0cJR19QtJbX_YhCb7E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9-hn-vN0cJR19QtJbX_YhCb7E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 15:03:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13611 (0x352b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914417A, serialNumber=551F7E867FAF374709475F50B496D7FD88426FB1
        Validity
            Not Before: Mar 24 15:03:04 2026 GMT
            Not After : Mar 31 15:03:04 2026 GMT
        Subject: CN=69c2a7a8-4a1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c4:f3:14:73:9d:4d:89:f4:0c:3c:92:7e:67:
                    b3:6f:f1:c4:bb:df:ec:e1:1c:fb:67:52:70:13:7a:
                    51:53:77:d6:8a:58:a5:7a:8c:31:69:e6:f6:fb:73:
                    07:b8:e3:2d:70:17:55:ff:ce:60:aa:27:fc:0e:df:
                    f5:bc:a5:cc:e1:e2:c3:5d:0e:39:9c:5b:f8:aa:ec:
                    50:71:2b:95:84:fc:bf:e3:5d:68:50:b3:45:b0:00:
                    16:b9:6d:68:3d:19:da:9d:25:53:33:a2:cf:0c:15:
                    04:b7:39:44:f4:13:bb:12:7c:ec:59:ff:4a:38:d9:
                    ea:66:93:7e:10:16:4e:b2:1a:a8:9b:60:f2:36:e4:
                    40:57:3d:b4:d3:6e:a8:c4:92:73:ae:5c:bb:b8:e4:
                    2c:42:52:67:6e:11:f5:93:c8:40:2e:5b:ff:c1:fc:
                    97:d5:1c:46:e9:07:8a:99:a2:35:16:ae:aa:13:34:
                    4c:a9:a1:0e:a4:6f:6f:a8:56:0a:95:da:8f:5a:8f:
                    ea:62:48:5c:c3:67:f6:ce:c9:b5:f2:71:fe:09:ee:
                    13:e2:da:d1:07:2a:93:cb:27:99:29:0f:fb:39:6d:
                    c9:23:58:52:9c:4f:2d:dc:de:ca:59:0e:30:c0:05:
                    ca:70:97:32:72:0c:4d:e6:69:09:dd:ee:ac:90:c0:
                    98:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:72:09:40:77:5D:73:20:80:25:13:1C:57:FA:91:58:30:6B:77:C0
            X509v3 Authority Key Identifier:
                keyid:55:1F:7E:86:7F:AF:37:47:09:47:5F:50:B4:96:D7:FD:88:42:6F:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914417A/752B65021DA111E2BC82A39308B02CD2/VR9-hn-vN0cJR19QtJbX_YhCb7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9-hn-vN0cJR19QtJbX_YhCb7E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914417A/752B65021DA111E2BC82A39308B02CD2/VR9-hn-vN0cJR19QtJbX_YhCb7E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:9d:d1:47:6a:c0:f7:49:30:1a:d0:2f:bf:66:a4:eb:7b:f0:
         0e:7a:bf:6f:48:00:81:43:c4:33:07:58:8a:99:cd:88:6f:0f:
         ca:04:e8:35:15:09:75:97:2c:70:16:71:48:2e:7e:92:6c:71:
         dc:85:fa:4a:4c:63:df:d1:6d:46:cc:de:f9:c8:11:0b:03:8a:
         28:c8:29:b7:da:cc:5c:0d:64:92:c3:23:f2:db:64:95:78:66:
         f8:d7:34:89:68:c9:1f:ad:82:74:30:6f:5c:5a:9d:38:54:ed:
         b3:e8:ba:d3:92:d3:81:be:36:e1:be:23:6c:75:c2:24:7b:f9:
         c1:94:8d:a6:35:67:f0:2c:e0:ef:24:f3:90:bd:c1:5e:dd:d3:
         47:01:47:ca:b1:72:92:b1:70:f7:37:bc:f9:a5:ad:14:bd:93:
         7e:9f:1f:8e:32:f6:1b:03:48:ab:81:23:8e:42:ad:3f:58:c2:
         a4:4c:39:32:7f:c5:28:4c:45:47:45:b2:60:5e:25:aa:03:52:
         77:99:5b:72:7c:3e:c5:fb:73:20:c2:36:08:2f:dc:23:65:24:
         4a:a2:e0:cf:9c:68:9c:6f:4d:6b:d8:1f:e4:8c:26:26:b0:02:
         ab:70:11:73:fc:6a:d0:b0:fb:91:e3:ca:a4:e9:3f:9a:de:b8:
         57:bf:3b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:43:08 2026 by rpki-client