Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft
File:                     VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft (raw, json)
Hash identifier:          5btG3gBTmO89vqnA8chUVLykTadQmMNYlZlyeVrSyyo=
Subject key identifier:   42:2B:A3:0C:FF:9D:7C:2F:4B:50:AC:6D:C6:C3:A7:06:55:63:63:1D
Authority key identifier: 56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3
Certificate issuer:       /CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
Certificate serial:       0C3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft
Manifest number:          08B8
Signing time:             Thu 23 Jul 2026 08:59:54 +0000
Manifest this update:     Thu 23 Jul 2026 08:59:53 +0000
Manifest next update:     Thu 30 Jul 2026 08:59:53 +0000
Files and hashes:         1: VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl (hash: m9CGch1kGjYGJ699YsbGJ2KgwEUmycQ5vzEehaEFlo8=)
                          2: 041C4116C47C11F0A98A0F0AC4F9AE02.roa (hash: nbLqVcL0fTjqbIJwLUXiGBSckIhHY+gUWicA4Ejfd+c=)
                          3: 0C5EDCDA716911EDA03D4A50C4F9AE02.roa (hash: 1UzncEKSR5GFkiri+HSHWqbKXpOZsxz5QJtUjNS60dU=)
                          4: 6A05B7C8D34F11F0879CFC0EC4F9AE02.roa (hash: ufTi5hbK6vc1MI5912uruEQ478fXX3CwZt4j4vHPRQ4=)
                          5: 038A3E10C47C11F092370F0AC4F9AE02.roa (hash: PE30fEqW14AO5z9GLUYe95jY8ke+Jr+zM4xGnRRJLDM=)
                          6: 9A1D8B2E867D11ED856A8E54C4F9AE02.roa (hash: fdYZt6jklY3bJQYs/J5vrVMo+1h7F5ICSVyf7ebtNOQ=)
                          7: 0BD4BBC2716911EDA03D4A50C4F9AE02.roa (hash: H3UyhkzzibOUYss8LsCthA0jqoyZZmdZqwto2ZgduQo=)
                          8: D4FCF92C716B11ED9F349A49C4F9AE02.roa (hash: XMmSyDgKxtH6qPeamyVCMMC+VcBd+O1+Cvw9Hsg5W7w=)
                          9: 03D31B6A775711F1A349736662A30FBC.roa (hash: dvNyDKjY+q/DPA+bpKMpCsyquJDjlYqP9mC2DA3NqL0=)
                          10: 262EECF8623E11F1B19F70B27947A888.roa (hash: 7r8I/t3aD0KS64OG37TgSZks2BgxIbXwQjHGWmC2/98=)
                          11: 0D0517EE716911EDA03D4A50C4F9AE02.roa (hash: 44VXldbBCfEVQNtNcncHBjm9zUl5518bfQtv5Cwsbsk=)
                          12: D359E238716B11ED9F349A49C4F9AE02.roa (hash: go9QI7FpdmjkqqbhQxd+M3xHAwb/d4cfJkbfC6AyPpc=)
                          13: ECC41AD2748A11ED80EF3436C4F9AE02.roa (hash: LmBb3E6ZOpW9OlLSpl9Xe8OqcU/Rwlz9J6Udb54EdW8=)
                          14: 48CB7422E27911ED88B5A641C4F9AE02.roa (hash: JnZNG5CGc8oHU0w2EbnMQvCrxn0rcrBgZn15GdSGzO0=)
                          15: 733B2566778D11F1A5FCE36972A30FBC.roa (hash: MhSAVOXZtaH9ksASWWeor2AgauRPg8SzoAGrVH1ZbqE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl
                          rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 08:59:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3134 (0xc3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD39D, serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
        Validity
            Not Before: Jul 23 08:59:53 2026 GMT
            Not After : Jul 30 08:59:53 2026 GMT
        Subject: CN=6a61d80a-64fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:aa:fe:b3:8f:dc:41:7d:c8:2c:c7:79:70:c4:
                    1b:65:4d:21:f8:ef:94:4e:38:5d:3e:f3:1c:53:cc:
                    38:c0:32:96:7c:d3:7c:ea:97:89:0c:a1:ef:ad:0b:
                    9c:8d:3b:c4:6d:f9:f0:c2:78:9c:af:23:31:c8:9c:
                    b5:94:4c:96:f1:b8:19:1d:1e:f4:7a:16:73:c2:c6:
                    b4:59:c5:f3:b0:5e:76:56:26:3d:14:a9:b6:b2:4a:
                    77:dc:74:54:6b:8e:06:fa:21:c4:80:b0:3d:b4:09:
                    74:57:68:fa:92:e9:23:19:43:29:90:55:73:26:70:
                    39:09:ee:cf:04:62:19:25:de:cb:9a:c7:d7:c9:25:
                    82:c3:f3:ef:4b:85:7c:69:25:6d:c0:45:71:b0:e4:
                    6e:64:b3:aa:59:7e:6c:b5:31:c3:9e:f5:1c:34:5a:
                    16:04:4c:f2:f4:f1:c1:ff:5c:a5:c9:47:88:5d:a7:
                    94:3f:80:95:f0:88:2f:b2:20:9a:f1:51:20:d6:8d:
                    e3:fd:ac:19:c4:ce:bf:2c:55:03:6d:ea:db:00:f9:
                    39:27:3e:f2:04:2d:1d:4e:6c:0e:1d:34:6a:67:7a:
                    8b:26:3c:64:9f:23:ea:97:e3:d5:63:53:5b:a9:48:
                    06:85:52:85:7b:1a:0f:23:0b:ff:7e:a9:ac:5d:36:
                    54:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:2B:A3:0C:FF:9D:7C:2F:4B:50:AC:6D:C6:C3:A7:06:55:63:63:1D
            X509v3 Authority Key Identifier:
                keyid:56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:64:a7:69:4d:88:96:ac:9b:69:05:e5:c2:39:dc:d5:0d:4b:
         ee:fd:42:2e:0d:d9:d0:2c:a9:15:b8:01:79:32:56:d9:36:a0:
         59:24:b2:82:2b:1f:07:1b:f9:bc:2b:08:16:4e:41:8e:62:96:
         d3:34:27:3a:04:a9:f8:47:16:97:6c:42:b8:7d:c9:12:04:5d:
         44:c2:57:7a:fe:46:05:09:f0:66:29:95:61:bd:d3:ba:e5:75:
         91:11:a5:38:07:62:89:97:27:1a:18:e3:be:5a:e2:67:87:97:
         38:56:cd:7d:37:0b:4c:99:c8:6c:d0:1e:7f:21:52:56:21:2e:
         ff:a8:37:75:24:06:8d:f0:e5:05:d5:50:52:a6:2a:61:c1:cd:
         02:45:3c:1b:b6:52:76:5c:ac:bd:db:37:a0:16:45:5e:14:a2:
         f8:e5:45:9f:b7:00:5b:bf:68:e8:1a:58:c5:18:b7:0d:81:18:
         bc:de:8c:c6:3c:0f:04:a2:52:ae:36:50:e7:94:82:3a:88:b8:
         ab:16:aa:e2:b8:42:90:5e:c6:5e:0e:e2:36:f4:ce:58:57:bb:
         85:e0:6e:f5:9f:b3:cf:99:00:74:f7:05:35:0a:bc:91:6a:4d:
         dc:21:69:f4:86:11:95:73:1e:38:ca:7e:f5:6b:aa:41:d2:c8:
         ef:eb:be:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:47:55 2026 by rpki-client