Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft
File:                     VRHewp3K7aF782u_M5UycVnxSoE.mft (raw, json)
Hash identifier:          EsU6GvOvvHYqI/IAwU8vmWPMlD0/ZRpoYpcdMlxqDF0=
Subject key identifier:   F7:74:C7:35:79:3E:D9:2F:43:74:1D:28:7C:B2:21:B2:CD:08:B0:2E
Authority key identifier: 55:11:DE:C2:9D:CA:ED:A1:7B:F3:6B:BF:33:95:32:71:59:F1:4A:81
Certificate issuer:       /CN=A9192248/serialNumber=5511DEC29DCAEDA17BF36BBF3395327159F14A81
Certificate serial:       0D61
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRHewp3K7aF782u_M5UycVnxSoE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft
Manifest number:          0D47
Signing time:             Wed 22 Jul 2026 18:16:44 +0000
Manifest this update:     Wed 22 Jul 2026 18:16:43 +0000
Manifest next update:     Wed 29 Jul 2026 18:16:43 +0000
Files and hashes:         1: VRHewp3K7aF782u_M5UycVnxSoE.crl (hash: 6RPHh18lf/GNMLt+ood74NrqBimrtnwpu8uWGKZ6jE8=)
                          2: F2B52DF6CBB611EB94FE6E68C4F9AE02.roa (hash: Xmjn71gL/YQIzR03KwfjQ2azJG6B5XbTMAuZDitsX1c=)
                          3: F3E543B4CBB611EB94FE6E68C4F9AE02.roa (hash: wX/LG4PCY+hN9kkQeun4KuKXF3q4iW90Y5Az5gpzISI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.crl
                          rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRHewp3K7aF782u_M5UycVnxSoE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:16:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3425 (0xd61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192248, serialNumber=5511DEC29DCAEDA17BF36BBF3395327159F14A81
        Validity
            Not Before: Jul 22 18:16:43 2026 GMT
            Not After : Jul 29 18:16:43 2026 GMT
        Subject: CN=6a61090c-28f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:77:88:2e:5a:43:9f:01:80:ea:f0:da:9c:f4:
                    ed:48:85:db:53:01:ec:b1:4d:61:08:4e:4f:19:71:
                    9b:fe:6b:f2:27:8d:ec:44:df:9c:e1:78:45:6f:76:
                    d9:8d:25:0a:c0:2e:4e:c2:04:7b:31:65:27:f8:3a:
                    cd:2e:98:64:d5:0a:40:68:e0:05:97:4b:e0:45:24:
                    56:1e:7e:b4:52:27:aa:ab:88:86:bd:89:ad:bd:76:
                    3c:51:6a:42:1b:ca:75:9d:d0:4b:59:b9:fe:9c:f0:
                    5e:73:bb:ea:26:ff:b0:86:f4:25:3d:00:23:44:88:
                    80:41:bd:db:00:83:13:fb:6a:1a:44:d7:d2:70:ef:
                    3e:44:05:d3:5e:7f:46:23:b0:79:16:34:f7:8f:2e:
                    b5:3f:fb:e7:6e:9f:83:d4:d3:3a:79:90:59:bc:e5:
                    55:c8:70:dd:12:c6:b8:6d:61:8a:52:cd:1b:f6:67:
                    8e:59:38:95:f3:2c:ae:32:e9:29:8f:25:9e:92:d5:
                    ed:b3:5d:c6:a3:f4:c0:5d:db:8c:26:6d:d7:ca:fc:
                    78:29:4c:eb:6d:b7:64:9c:53:c7:23:bf:67:08:6f:
                    5c:c9:7c:cc:e1:e3:6a:67:b6:b2:4a:33:67:da:d7:
                    db:d9:04:44:2f:7b:ce:99:fe:f1:fb:a7:2a:84:57:
                    ea:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:74:C7:35:79:3E:D9:2F:43:74:1D:28:7C:B2:21:B2:CD:08:B0:2E
            X509v3 Authority Key Identifier:
                keyid:55:11:DE:C2:9D:CA:ED:A1:7B:F3:6B:BF:33:95:32:71:59:F1:4A:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRHewp3K7aF782u_M5UycVnxSoE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:72:d5:0e:2f:7f:82:b2:d4:b3:bf:88:d7:fb:45:a9:6e:33:
         dd:f4:30:20:8b:74:d8:ef:1a:47:b4:e7:67:72:9a:f0:de:98:
         bc:2a:bb:b2:9a:ca:03:5e:8a:4f:33:b5:e3:48:30:bc:f8:40:
         eb:b5:3e:60:ca:18:37:9d:87:cd:23:f1:f1:21:63:e1:51:4f:
         4e:5d:3c:44:a8:b8:35:5b:64:d6:85:08:c9:5a:8b:8c:5b:58:
         10:03:11:92:82:a7:eb:a7:64:5c:cf:b9:ea:ae:11:81:c2:95:
         f2:19:2c:92:02:dc:42:98:e7:03:06:7d:0a:7e:f3:7c:b3:1e:
         92:f8:34:03:77:5f:e5:b0:9a:e3:06:6f:8c:ea:5a:fc:04:0f:
         56:bc:6c:a2:75:5c:a8:9d:8c:1d:30:b1:96:e0:ba:71:c0:a1:
         60:f4:e4:4d:8a:50:93:77:5b:2a:05:d1:08:15:2b:fc:71:85:
         ff:95:5d:ce:0c:6e:6c:08:57:d7:30:66:e7:b5:09:fa:e8:74:
         90:49:c9:33:8a:0f:f6:15:89:61:6f:43:1b:90:21:f7:54:89:
         db:c5:d6:87:99:d7:7f:95:a8:89:e4:ac:c2:87:8f:c0:37:68:
         e4:f2:dc:b5:94:85:64:10:e8:22:0d:da:77:65:e7:3d:2e:69:
         bb:8a:92:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:38:29 2026 by rpki-client