Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft
File:                     VRHewp3K7aF782u_M5UycVnxSoE.mft (raw, json)
Hash identifier:          x816VeeozVj5zvQusKTO5gNCxtHAXJXuD5JdMuBZOSU=
Subject key identifier:   23:01:49:8E:5A:14:6D:96:28:F1:D8:14:95:81:55:06:39:2F:F8:60
Authority key identifier: 55:11:DE:C2:9D:CA:ED:A1:7B:F3:6B:BF:33:95:32:71:59:F1:4A:81
Certificate issuer:       /CN=A9192248/serialNumber=5511DEC29DCAEDA17BF36BBF3395327159F14A81
Certificate serial:       0D24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRHewp3K7aF782u_M5UycVnxSoE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft
Manifest number:          0D0A
Signing time:             Tue 24 Mar 2026 17:57:59 +0000
Manifest this update:     Tue 24 Mar 2026 17:57:58 +0000
Manifest next update:     Tue 31 Mar 2026 17:57:58 +0000
Files and hashes:         1: VRHewp3K7aF782u_M5UycVnxSoE.crl (hash: VKCPZ0/RqUu3rgvLD+Ap2e6GtOD4UVHQ6MPj9VRW+lM=)
                          2: F2B52DF6CBB611EB94FE6E68C4F9AE02.roa (hash: Xmjn71gL/YQIzR03KwfjQ2azJG6B5XbTMAuZDitsX1c=)
                          3: F3E543B4CBB611EB94FE6E68C4F9AE02.roa (hash: wX/LG4PCY+hN9kkQeun4KuKXF3q4iW90Y5Az5gpzISI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.crl
                          rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRHewp3K7aF782u_M5UycVnxSoE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 17:57:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3364 (0xd24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192248, serialNumber=5511DEC29DCAEDA17BF36BBF3395327159F14A81
        Validity
            Not Before: Mar 24 17:57:58 2026 GMT
            Not After : Mar 31 17:57:58 2026 GMT
        Subject: CN=69c2d0a7-d3c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b2:22:56:87:de:b0:ef:8b:13:90:14:76:12:
                    02:98:84:14:f6:f2:c7:51:a4:13:28:50:ba:14:e8:
                    3b:fc:d4:d4:c2:da:63:34:9e:5c:77:23:d3:f1:29:
                    54:a5:67:22:66:4b:78:7c:c1:86:ae:9e:58:83:0f:
                    fe:10:b3:89:6a:49:c6:ed:18:7c:f8:69:eb:b8:6e:
                    41:ac:57:23:1a:a1:16:40:ab:46:f8:4e:18:db:85:
                    08:fd:cb:69:98:fd:ff:2c:ed:b9:92:86:68:9d:f8:
                    6f:07:38:e9:7e:7b:5a:38:49:6c:95:cc:82:6c:c0:
                    a5:a9:b6:42:67:bf:21:35:6f:6c:21:9c:4b:07:3b:
                    b6:19:c4:e7:65:38:34:9e:c6:45:48:a0:f1:dc:88:
                    1a:16:9c:33:21:c6:d6:6c:f2:3c:09:89:9a:00:d9:
                    71:bf:e5:3b:4e:9c:97:05:21:76:f9:88:d7:32:2f:
                    6b:87:a6:4c:52:09:3c:99:81:52:96:6d:25:b0:e6:
                    1c:3b:99:1a:af:c5:74:e6:23:46:46:7c:46:e1:76:
                    9a:8f:18:cd:3a:c7:dc:97:d4:dc:58:94:7e:75:99:
                    4d:16:7a:2a:2c:91:8e:0b:5e:06:ec:a3:86:05:50:
                    97:38:91:01:17:85:ab:17:8d:24:49:6c:51:70:fb:
                    43:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:01:49:8E:5A:14:6D:96:28:F1:D8:14:95:81:55:06:39:2F:F8:60
            X509v3 Authority Key Identifier:
                keyid:55:11:DE:C2:9D:CA:ED:A1:7B:F3:6B:BF:33:95:32:71:59:F1:4A:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRHewp3K7aF782u_M5UycVnxSoE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:e0:81:0f:5a:ca:98:c9:6d:30:e8:85:50:47:52:0d:21:4c:
         da:b5:27:49:66:68:b1:d3:9c:cb:ef:f9:05:e2:45:32:c3:e5:
         3d:df:35:44:64:e6:d8:dd:57:4f:85:71:63:e9:4d:78:e6:b4:
         b7:9d:75:1f:74:cd:12:7d:de:f4:9c:9e:39:79:d4:8f:33:d8:
         e2:c3:c1:e6:3c:93:e3:6e:f6:1d:a1:3d:3f:e6:b0:8f:fd:39:
         9e:9e:da:ec:88:1b:4d:0e:5b:cd:c4:26:96:3a:61:eb:65:59:
         e6:5b:5d:53:38:e9:ee:54:fe:bd:99:1f:d4:14:f5:8e:74:ac:
         8e:40:22:3e:14:71:35:ff:d1:38:c7:f5:23:e3:6f:e6:36:f1:
         07:8c:4c:d7:5f:99:59:49:91:14:ee:81:8d:8a:0a:80:52:ba:
         a4:f8:a9:a9:88:bb:29:92:af:09:62:bd:e7:9f:02:da:03:15:
         ef:1f:64:cc:6b:55:c5:e3:0e:a5:49:97:c4:e5:df:2f:bc:50:
         5c:4b:a8:9d:0a:6c:ea:42:8d:93:06:e6:3f:40:b3:2c:c6:80:
         fb:51:6c:00:b5:59:53:fe:c0:4a:26:a7:4d:d2:76:0a:11:87:
         7a:06:2d:0a:71:e6:11:e7:de:6a:b5:a1:06:7d:32:2d:fe:8f:
         24:3a:8c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:44:41 2026 by rpki-client