Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.mft
File:                     VAR9J873NG9Bde-sc0SUrbsFe1U.mft (raw, json)
Hash identifier:          5LX04+aL/NJpeMWWlz4sm1c8CJPSh5f+T7oBEHjFtAU=
Subject key identifier:   0A:E1:8A:82:F0:81:62:9E:A9:D5:30:B2:7C:4B:15:8F:A4:C2:C3:5E
Authority key identifier: 54:04:7D:27:CE:F7:34:6F:41:75:EF:AC:73:44:94:AD:BB:05:7B:55
Certificate issuer:       /CN=A91127C1/serialNumber=54047D27CEF7346F4175EFAC734494ADBB057B55
Certificate serial:       0AA5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VAR9J873NG9Bde-sc0SUrbsFe1U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.mft
Manifest number:          0A9B
Signing time:             Tue 28 Jul 2026 19:51:16 +0000
Manifest this update:     Tue 28 Jul 2026 19:51:16 +0000
Manifest next update:     Tue 04 Aug 2026 19:51:16 +0000
Files and hashes:         1: VAR9J873NG9Bde-sc0SUrbsFe1U.crl (hash: vrYMIuAYdnWaUE+U/t2I7keyjFrQeXr+xNK/YqZZrR0=)
                          2: 3492D2F083BA11EA8728F076C4F9AE02.roa (hash: fSihFqalIKY6ytzAhc7OtqICrnfklHIgIa5bNBLtu/w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.crl
                          rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VAR9J873NG9Bde-sc0SUrbsFe1U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 19:51:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2725 (0xaa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91127C1, serialNumber=54047D27CEF7346F4175EFAC734494ADBB057B55
        Validity
            Not Before: Jul 28 19:51:16 2026 GMT
            Not After : Aug  4 19:51:16 2026 GMT
        Subject: CN=6a690834-260e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:27:1e:37:cd:f3:3d:23:65:26:8a:a9:0e:ad:
                    9c:48:dd:23:db:8c:53:24:ce:fe:87:66:9e:b3:f0:
                    5c:f0:47:ba:de:13:1b:0f:fa:27:4d:37:08:2b:eb:
                    8c:24:0e:0e:64:89:11:81:c9:85:2c:fb:95:73:d9:
                    d8:12:a7:a8:ff:21:e1:28:f6:6d:3c:2a:26:1c:65:
                    0e:b9:94:8a:0e:41:c4:6d:13:48:d5:e5:43:1e:ff:
                    7f:85:e9:6e:22:80:31:26:45:7f:6f:d6:c5:a2:0d:
                    87:3d:d0:3f:3c:a2:db:42:e9:e7:e4:40:7d:e2:a1:
                    2c:17:18:08:4e:0b:9b:dd:2f:d9:7b:93:c8:ab:fe:
                    39:e3:5b:33:32:28:1b:0b:e3:cc:48:36:13:4a:ff:
                    55:c3:92:37:a2:64:84:9a:11:05:b3:21:b3:a4:82:
                    42:01:da:1a:53:92:ef:34:9c:68:9d:5b:92:3f:4e:
                    9b:8a:6c:6f:dd:e8:fe:b2:6d:ba:a4:97:a8:88:78:
                    27:99:ef:56:15:da:59:61:82:eb:5a:ba:9b:6b:29:
                    0a:cc:50:34:ee:51:6a:1d:3d:10:88:98:40:30:cc:
                    6b:ff:ea:3f:8d:fd:c1:8b:25:a9:12:66:7f:f5:c1:
                    ce:40:20:9c:08:a3:8f:96:41:99:12:83:dc:2d:ae:
                    12:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:E1:8A:82:F0:81:62:9E:A9:D5:30:B2:7C:4B:15:8F:A4:C2:C3:5E
            X509v3 Authority Key Identifier:
                keyid:54:04:7D:27:CE:F7:34:6F:41:75:EF:AC:73:44:94:AD:BB:05:7B:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VAR9J873NG9Bde-sc0SUrbsFe1U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:81:74:8f:d9:34:76:b3:15:b1:1f:97:c4:15:1c:98:c3:e1:
         4b:14:a2:5a:bb:26:9d:41:39:9c:a6:78:03:e2:b9:32:46:ff:
         ad:c1:bc:e3:b0:bf:80:ac:a3:a0:36:4f:45:22:e9:4a:1b:49:
         d5:ee:7b:6d:07:1e:fd:d3:6b:b6:ce:a0:0d:4f:68:2a:d8:a6:
         2b:2a:d8:f5:33:79:44:80:e1:df:96:4d:60:3d:40:65:2f:c3:
         5c:52:dd:65:c4:e2:e8:3f:50:38:16:43:fc:24:75:57:51:a1:
         f6:67:1a:f1:95:29:40:79:6a:c7:82:f8:80:4e:0a:2f:9a:6a:
         f6:5d:73:c5:0a:c9:a7:ad:a3:ba:76:5e:a9:a2:b1:25:38:a8:
         83:43:48:31:0c:24:a4:bf:76:31:62:05:b1:4c:7d:78:29:41:
         04:96:d4:99:73:64:08:98:f9:2b:50:cf:0f:65:1a:06:98:17:
         97:be:c2:a2:5e:85:76:93:fa:a2:d8:cd:c4:42:e9:4d:de:ca:
         5e:f7:79:82:a8:3c:05:3b:4b:22:38:ba:74:97:38:94:1f:c7:
         95:65:c5:27:ac:1c:f5:c6:90:67:d3:55:79:50:a1:5c:8e:7f:
         5d:d0:62:6e:fd:56:a6:16:d9:1f:2c:86:bf:9b:11:3f:7c:5d:
         a4:1a:f5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 19:05:53 2026 by rpki-client