Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ECE92/80B9C16A380511F181A3677692833773/VArroLYHQFdp3kTXa34xC_VpIXI.mft
File:                     VArroLYHQFdp3kTXa34xC_VpIXI.mft (raw, json)
Hash identifier:          vzKhWqsbhiM3IsXqwXdfxXjkYx2KvBV7Ln/AtAJ1L0w=
Subject key identifier:   75:96:5E:9F:60:C3:56:DC:6A:33:6E:40:06:E6:27:3B:38:D9:F5:DA
Authority key identifier: 54:0A:EB:A0:B6:07:40:57:69:DE:44:D7:6B:7E:31:0B:F5:69:21:72
Certificate issuer:       /CN=A91ECE92/serialNumber=540AEBA0B607405769DE44D76B7E310BF5692172
Certificate serial:       56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VArroLYHQFdp3kTXa34xC_VpIXI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ECE92/80B9C16A380511F181A3677692833773/VArroLYHQFdp3kTXa34xC_VpIXI.mft
Manifest number:          55
Signing time:             Fri 25 Sep 2026 08:19:45 +0000
Manifest this update:     Fri 25 Sep 2026 08:19:45 +0000
Manifest next update:     Fri 02 Oct 2026 08:19:45 +0000
Files and hashes:         1: VArroLYHQFdp3kTXa34xC_VpIXI.crl (hash: F8I+9fAbwdWHkGrvuumMMPEai/I3Enq7rr2qUY/8L9U=)
                          2: 74F89580380611F1BFB0A69592833773.roa (hash: n/MqiU5VgC6av3CWTkFIHhSSjgNKYqsDRi2BiUC7EzQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ECE92/80B9C16A380511F181A3677692833773/VArroLYHQFdp3kTXa34xC_VpIXI.crl
                          rsync://rpki.apnic.net/member_repository/A91ECE92/80B9C16A380511F181A3677692833773/VArroLYHQFdp3kTXa34xC_VpIXI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VArroLYHQFdp3kTXa34xC_VpIXI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 08:19:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ECE92, serialNumber=540AEBA0B607405769DE44D76B7E310BF5692172
        Validity
            Not Before: Sep 25 08:19:45 2026 GMT
            Not After : Oct  2 08:19:45 2026 GMT
        Subject: CN=6ab62ea1-7c0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5e:d8:bb:f7:cc:87:c7:7d:99:90:ad:95:da:
                    cd:e8:18:88:ae:17:df:0e:25:70:3b:4a:68:d8:57:
                    b6:0d:3b:22:ed:a8:a4:10:a6:85:41:f2:7f:a3:ef:
                    e0:13:80:8b:12:de:56:d8:d6:a6:ea:4c:20:da:ad:
                    1c:51:af:36:25:e7:19:6e:b2:4e:95:3a:ef:8f:a1:
                    a0:a4:b1:ec:03:5a:77:fb:57:1c:11:8d:11:40:bd:
                    2e:50:e2:90:c3:76:fe:25:88:83:67:3b:31:8e:75:
                    f3:a8:dd:b3:a3:2a:2a:65:dc:f3:1d:cf:8d:e8:2c:
                    a0:e6:83:11:d0:0d:44:ea:ed:a3:73:8a:a6:52:21:
                    bf:30:fe:ee:73:b7:79:cf:fd:49:9c:a2:72:b9:37:
                    ba:3e:d9:08:e2:0c:09:03:ea:83:35:86:33:39:32:
                    cf:6f:b1:71:0c:83:83:2d:18:d5:62:08:ae:3a:6e:
                    b3:b2:91:c3:3c:6b:fa:68:08:63:f3:75:d2:34:75:
                    14:e2:a9:1b:99:6e:e0:d6:fe:b2:32:ab:c9:fe:9a:
                    43:c1:2b:03:e7:72:56:8b:b5:b3:15:f5:99:1a:8c:
                    2a:79:cb:99:18:ec:6f:7a:a2:e3:47:63:b3:61:07:
                    9d:94:07:3a:29:96:42:78:49:91:fc:6c:a2:f3:e6:
                    78:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:96:5E:9F:60:C3:56:DC:6A:33:6E:40:06:E6:27:3B:38:D9:F5:DA
            X509v3 Authority Key Identifier:
                keyid:54:0A:EB:A0:B6:07:40:57:69:DE:44:D7:6B:7E:31:0B:F5:69:21:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ECE92/80B9C16A380511F181A3677692833773/VArroLYHQFdp3kTXa34xC_VpIXI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VArroLYHQFdp3kTXa34xC_VpIXI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECE92/80B9C16A380511F181A3677692833773/VArroLYHQFdp3kTXa34xC_VpIXI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:ee:be:b7:9d:2d:53:8b:d6:fc:7d:07:9c:06:a6:65:b5:81:
         bd:44:8f:40:89:86:31:41:cc:16:ef:a6:2b:50:50:2b:af:ed:
         f0:36:61:3c:3b:b1:d5:55:32:1a:ce:af:92:9d:e4:eb:7f:e5:
         a9:45:2f:cf:12:c8:15:26:95:e0:87:f9:d7:d4:3b:87:a8:32:
         e1:87:4f:72:16:e1:0e:61:d6:48:88:9a:8a:d0:55:9e:f0:41:
         19:77:e6:3a:d1:1a:dd:47:ca:95:1e:e2:c6:3a:9e:54:5f:6b:
         cb:90:56:f1:59:41:84:95:41:11:bc:dc:ce:ba:35:ca:7b:d4:
         ee:f5:8b:e2:82:a6:0b:60:46:8b:37:5b:c3:44:a8:3d:fd:b7:
         09:ad:4e:99:a9:75:b6:68:c0:18:26:0d:a4:a9:10:af:9d:64:
         b0:12:fc:81:f9:f8:cc:59:5a:75:f9:1e:16:7e:61:e8:df:ce:
         4a:5e:74:bb:ea:cb:31:8c:6f:98:fc:5d:3e:0a:e1:03:21:97:
         1b:be:08:a8:ae:d8:42:ee:0d:01:f8:ea:6f:0e:e5:52:91:a8:
         2a:9f:8f:b6:32:ab:8a:1f:e7:02:1d:8f:17:89:d5:89:a3:88:
         2e:57:e3:c1:14:ce:1d:14:11:a2:74:59:12:26:db:6b:ee:1d:
         68:c6:e9:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:54:00 2026 by rpki-client