Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft
File:                     VRHewp3K7aF782u_M5UycVnxSoE.mft (raw, json)
Hash identifier:          xaZbtNee4Vkkj7TLgYYINKCyMhwvixQBp4FcQetnEBc=
Subject key identifier:   09:C3:E8:35:20:71:A7:39:A9:77:6C:FB:75:53:2A:C3:EA:B2:50:C4
Authority key identifier: 55:11:DE:C2:9D:CA:ED:A1:7B:F3:6B:BF:33:95:32:71:59:F1:4A:81
Certificate issuer:       /CN=A9192248/serialNumber=5511DEC29DCAEDA17BF36BBF3395327159F14A81
Certificate serial:       0D3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRHewp3K7aF782u_M5UycVnxSoE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft
Manifest number:          0D23
Signing time:             Tue 12 May 2026 18:07:30 +0000
Manifest this update:     Tue 12 May 2026 18:07:29 +0000
Manifest next update:     Tue 19 May 2026 18:07:29 +0000
Files and hashes:         1: VRHewp3K7aF782u_M5UycVnxSoE.crl (hash: 686e5UjJsNrCNZwPUYlDvOpWJvwKkIeXxWgyztIo5J8=)
                          2: F2B52DF6CBB611EB94FE6E68C4F9AE02.roa (hash: Xmjn71gL/YQIzR03KwfjQ2azJG6B5XbTMAuZDitsX1c=)
                          3: F3E543B4CBB611EB94FE6E68C4F9AE02.roa (hash: wX/LG4PCY+hN9kkQeun4KuKXF3q4iW90Y5Az5gpzISI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.crl
                          rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRHewp3K7aF782u_M5UycVnxSoE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 18:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3389 (0xd3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192248, serialNumber=5511DEC29DCAEDA17BF36BBF3395327159F14A81
        Validity
            Not Before: May 12 18:07:29 2026 GMT
            Not After : May 19 18:07:29 2026 GMT
        Subject: CN=6a036c61-c9a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1d:2a:c9:02:06:da:d4:73:9f:ed:1f:d9:24:
                    5f:2c:c7:cc:4d:b6:4d:0e:ff:8b:5b:51:97:92:ba:
                    a7:69:a4:cc:ac:01:c9:1e:d8:6c:2a:86:a3:59:fb:
                    63:3d:82:a6:f8:de:34:63:87:3c:07:fc:02:7d:31:
                    79:58:a6:40:d4:00:dd:2f:da:f2:4f:b4:a2:94:4f:
                    07:99:17:1d:96:d8:fb:c8:c3:6e:82:38:90:bf:cf:
                    58:e4:33:be:41:37:61:8e:db:25:76:55:d7:9a:69:
                    63:5f:93:fc:6a:7e:96:2e:9c:5b:16:82:a0:81:dd:
                    98:eb:08:dc:c8:1c:fe:35:33:ee:ab:78:01:76:80:
                    41:8a:33:e1:96:25:7d:2d:65:2a:71:c1:0b:20:25:
                    42:7b:25:a1:47:e6:3f:1c:0e:02:9e:a0:50:7d:3a:
                    a6:55:ee:21:5a:b0:38:d1:9e:06:92:f5:0f:82:f6:
                    82:c6:26:33:3f:36:cb:36:f8:e6:07:9b:8d:e0:21:
                    ec:a0:7d:3d:be:64:0e:38:00:22:96:4b:55:60:dd:
                    5d:5c:6c:77:67:4d:38:6c:15:f2:2c:82:ff:ba:98:
                    87:1c:91:11:47:0b:12:2b:f6:90:c2:8c:05:78:ae:
                    b1:c4:79:44:f5:bd:a5:23:6e:09:d1:b7:81:d8:ed:
                    f9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C3:E8:35:20:71:A7:39:A9:77:6C:FB:75:53:2A:C3:EA:B2:50:C4
            X509v3 Authority Key Identifier:
                keyid:55:11:DE:C2:9D:CA:ED:A1:7B:F3:6B:BF:33:95:32:71:59:F1:4A:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRHewp3K7aF782u_M5UycVnxSoE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:7e:54:bf:f4:47:63:ac:0c:2c:46:c2:8a:ba:a3:f6:b1:f5:
         30:ae:7d:60:30:2b:ae:e1:54:44:95:19:9a:29:04:78:93:4c:
         7f:da:11:96:e2:b8:32:18:22:c6:2a:37:6e:13:e3:f3:86:43:
         ab:44:8f:79:c4:69:a6:11:39:4b:00:06:7b:59:29:4f:ac:23:
         63:43:01:b8:d4:c6:ca:5c:75:c1:73:71:0b:c1:6b:54:64:c3:
         ee:6f:a7:a9:32:17:b3:2b:98:a7:17:1b:a5:f1:bd:b6:2a:d0:
         6e:66:2c:1c:13:21:9a:86:47:be:53:b4:a3:4b:dc:24:9b:66:
         9c:8a:10:1f:28:9e:3b:c8:ef:6b:19:b1:46:87:ac:c2:cc:6b:
         a4:dd:83:1d:25:7f:38:1e:41:fe:dd:f6:7b:17:2f:87:4f:c1:
         cd:6f:51:aa:27:fa:a9:91:d9:fb:ca:80:4f:c7:03:25:3e:07:
         11:93:cd:98:3b:ae:57:36:f4:16:8f:70:83:78:c4:15:25:31:
         b6:17:7c:5a:f5:0f:d2:18:b8:48:1d:cd:2a:33:46:f7:33:c1:
         1b:46:cb:e2:41:09:cb:08:1a:25:92:fd:63:ac:d7:c9:69:4b:
         5f:15:c1:fe:77:b5:48:1b:af:ca:2c:c7:7a:b2:38:24:c4:b9:
         f4:90:c1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:57:59 2026 by rpki-client