Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.mft
File:                     VAR9J873NG9Bde-sc0SUrbsFe1U.mft (raw, json)
Hash identifier:          5qSK2CTTv36V8/EVoy6j4m15pBafzp2UyMnUzSvdOSQ=
Subject key identifier:   14:B7:CE:1C:33:79:4D:03:EF:01:D1:CB:03:23:37:88:F8:EC:5E:06
Authority key identifier: 54:04:7D:27:CE:F7:34:6F:41:75:EF:AC:73:44:94:AD:BB:05:7B:55
Certificate issuer:       /CN=A91127C1/serialNumber=54047D27CEF7346F4175EFAC734494ADBB057B55
Certificate serial:       0A71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VAR9J873NG9Bde-sc0SUrbsFe1U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.mft
Manifest number:          0A67
Signing time:             Thu 16 Apr 2026 19:33:25 +0000
Manifest this update:     Thu 16 Apr 2026 19:33:25 +0000
Manifest next update:     Thu 23 Apr 2026 19:33:25 +0000
Files and hashes:         1: VAR9J873NG9Bde-sc0SUrbsFe1U.crl (hash: 3JLdubG2BnNDT4w02hRsedlIFV1wzKddlslQTmsZl+k=)
                          2: 3492D2F083BA11EA8728F076C4F9AE02.roa (hash: fSihFqalIKY6ytzAhc7OtqICrnfklHIgIa5bNBLtu/w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.crl
                          rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VAR9J873NG9Bde-sc0SUrbsFe1U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:33:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2673 (0xa71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91127C1, serialNumber=54047D27CEF7346F4175EFAC734494ADBB057B55
        Validity
            Not Before: Apr 16 19:33:25 2026 GMT
            Not After : Apr 23 19:33:25 2026 GMT
        Subject: CN=69e13985-997f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:fa:73:0f:68:3d:2d:11:ad:76:76:7f:c9:0d:
                    8b:1c:de:93:35:1b:18:55:d4:f3:f7:da:d4:97:6b:
                    3f:04:0f:5b:ed:f3:d8:f7:a9:91:6f:4c:3b:c2:8d:
                    0c:8d:1a:a6:8b:79:22:c1:70:bf:48:75:90:79:e5:
                    9a:ab:28:65:0e:1d:5d:a6:be:b1:d7:70:f8:70:00:
                    bd:dc:fd:85:e9:f5:47:1b:7f:c7:32:9e:59:f3:25:
                    98:48:af:a1:71:b6:ba:17:30:dd:46:89:6e:35:6b:
                    dd:c5:83:39:23:8e:5a:ea:6c:f0:a4:e0:5d:ad:6d:
                    1f:8a:ae:6f:0c:52:91:fa:62:da:e6:bc:49:85:9e:
                    cf:47:38:74:65:cf:e0:a4:30:4c:c0:87:78:cd:32:
                    2d:c7:cc:c3:fc:8c:cd:3f:9e:a2:13:86:80:76:c5:
                    73:b0:2c:7b:b3:0b:33:72:b2:b8:3e:10:0c:aa:9b:
                    b1:9d:f8:8f:fc:7d:6c:1c:3d:26:a7:77:b1:a2:d1:
                    49:ee:10:12:55:59:de:03:75:9b:3a:63:21:8c:07:
                    fa:69:73:e7:91:b4:ce:ed:dd:4b:02:05:a4:f6:92:
                    38:ce:25:e9:27:5e:c0:2c:63:45:38:0b:79:bb:03:
                    9e:a4:ce:83:1d:b0:85:11:61:ee:64:2e:2e:a7:32:
                    56:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:B7:CE:1C:33:79:4D:03:EF:01:D1:CB:03:23:37:88:F8:EC:5E:06
            X509v3 Authority Key Identifier:
                keyid:54:04:7D:27:CE:F7:34:6F:41:75:EF:AC:73:44:94:AD:BB:05:7B:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VAR9J873NG9Bde-sc0SUrbsFe1U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:f7:6d:ba:d8:29:23:68:6f:5f:0b:82:2d:14:64:51:22:4d:
         d2:bb:79:73:cd:28:34:97:e7:ed:27:f8:70:54:82:4a:88:ac:
         29:65:2e:a7:0a:b5:8f:34:28:fb:39:7e:4d:d0:5b:e7:f2:59:
         d8:80:b5:11:01:66:9a:69:5c:bc:8e:29:db:65:53:d3:4f:6b:
         dd:fa:cf:99:f0:97:52:c7:54:d4:b4:8b:e3:3e:a8:d3:f8:d2:
         f7:14:e2:34:41:70:6d:07:75:9e:7f:36:ff:03:bf:6a:1d:e4:
         ae:ed:8c:59:b4:74:07:f3:39:6f:c9:f2:e0:a3:92:20:72:4d:
         4a:c5:71:0a:2e:31:b1:b9:43:f5:39:e0:b4:e3:5b:1c:7d:0f:
         64:ba:43:21:99:92:98:4b:da:2f:46:9a:e2:19:80:73:74:fb:
         fc:e1:be:92:ed:0c:ad:7c:fd:30:fa:57:1f:9b:52:b4:7d:83:
         d6:97:1f:2f:2f:c8:85:4b:a2:6e:35:5e:e0:9e:e6:02:2e:6a:
         24:d8:f3:3f:78:46:e6:8e:71:41:ad:13:34:a5:be:1c:c4:74:
         d5:03:0d:c6:1c:aa:7b:9b:aa:9e:cd:a4:36:d0:56:9c:f3:51:
         0c:fb:bc:af:22:85:8f:bd:ea:08:26:9d:b3:52:12:c1:8d:89:
         42:56:08:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:50:23 2026 by rpki-client