Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914417A/752B65021DA111E2BC82A39308B02CD2/VR9-hn-vN0cJR19QtJbX_YhCb7E.mft
File:                     VR9-hn-vN0cJR19QtJbX_YhCb7E.mft (raw, json)
Hash identifier:          gTfxb9/Wi3HdzWRnqbET7jbaPas5BeDcCivK9yxjSms=
Subject key identifier:   13:91:62:BF:5F:DF:F7:22:8A:47:72:4E:90:BE:8A:85:FE:A6:60:B7
Authority key identifier: 55:1F:7E:86:7F:AF:37:47:09:47:5F:50:B4:96:D7:FD:88:42:6F:B1
Certificate issuer:       /CN=A914417A/serialNumber=551F7E867FAF374709475F50B496D7FD88426FB1
Certificate serial:       3537
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9-hn-vN0cJR19QtJbX_YhCb7E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914417A/752B65021DA111E2BC82A39308B02CD2/VR9-hn-vN0cJR19QtJbX_YhCb7E.mft
Manifest number:          3531
Signing time:             Thu 16 Apr 2026 15:03:42 +0000
Manifest this update:     Thu 16 Apr 2026 15:03:41 +0000
Manifest next update:     Thu 23 Apr 2026 15:03:41 +0000
Files and hashes:         1: VR9-hn-vN0cJR19QtJbX_YhCb7E.crl (hash: p14zT+TZ+FuM+LtYIej16qqSJSdbuOOQCuI7ZQnxGao=)
                          2: B4FD92C42C5211EEAD14C272C4F9AE02.roa (hash: FDw45yR+UbBpAGinSl1fAl1lgBy1+jOVmwDkOeQk0cg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914417A/752B65021DA111E2BC82A39308B02CD2/VR9-hn-vN0cJR19QtJbX_YhCb7E.crl
                          rsync://rpki.apnic.net/member_repository/A914417A/752B65021DA111E2BC82A39308B02CD2/VR9-hn-vN0cJR19QtJbX_YhCb7E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9-hn-vN0cJR19QtJbX_YhCb7E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 15:03:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13623 (0x3537)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914417A, serialNumber=551F7E867FAF374709475F50B496D7FD88426FB1
        Validity
            Not Before: Apr 16 15:03:41 2026 GMT
            Not After : Apr 23 15:03:41 2026 GMT
        Subject: CN=69e0fa4e-a6cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:51:f5:f2:2e:ee:b9:a4:d1:a6:7b:9b:2d:2f:
                    db:b9:3b:be:16:bd:d1:21:f3:e2:3c:b7:36:a9:53:
                    57:e9:70:2e:be:e5:91:87:5c:7f:f0:d4:82:15:b0:
                    dc:d0:29:d9:89:33:1a:3f:29:5d:5f:31:4a:40:58:
                    b4:9b:2b:16:40:40:d3:f0:1d:36:bc:f2:7c:7b:e8:
                    6f:40:1b:40:d0:74:39:4e:2b:48:23:59:28:67:f1:
                    4f:36:27:ba:39:87:4c:ac:e4:5c:7a:1d:65:88:a8:
                    9a:38:f8:02:e1:37:89:7f:4a:e2:c8:f6:17:35:8a:
                    7b:74:81:84:90:0f:bf:17:f4:5a:c2:65:ee:c0:c2:
                    cc:66:ca:6f:17:5a:de:c9:06:4a:3e:fa:69:0b:b3:
                    39:6a:d1:3d:72:7e:cb:5e:3f:b0:43:e1:ef:13:6e:
                    d8:41:27:b4:c8:d2:84:73:e4:a4:0f:f3:86:5f:72:
                    37:08:59:1c:49:95:6d:28:5a:0d:98:b5:02:66:af:
                    16:f3:9c:80:42:60:51:b4:7f:c4:1d:0b:b3:51:26:
                    bb:0a:9c:9e:4b:2d:55:da:0f:80:13:9d:98:f0:48:
                    4c:7d:11:1f:34:ba:5e:de:19:6f:7d:67:57:05:e0:
                    70:14:e4:00:a9:3a:05:d4:6f:2a:67:98:14:3e:73:
                    23:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:91:62:BF:5F:DF:F7:22:8A:47:72:4E:90:BE:8A:85:FE:A6:60:B7
            X509v3 Authority Key Identifier:
                keyid:55:1F:7E:86:7F:AF:37:47:09:47:5F:50:B4:96:D7:FD:88:42:6F:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914417A/752B65021DA111E2BC82A39308B02CD2/VR9-hn-vN0cJR19QtJbX_YhCb7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9-hn-vN0cJR19QtJbX_YhCb7E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914417A/752B65021DA111E2BC82A39308B02CD2/VR9-hn-vN0cJR19QtJbX_YhCb7E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:4c:80:4f:eb:42:d2:41:40:98:b6:84:2c:9c:73:66:9c:dd:
         24:ad:22:b4:da:2e:46:94:a8:c4:91:1f:fb:cb:a6:f2:97:70:
         e9:39:f3:5a:6e:3a:4d:39:63:1e:23:3b:1f:1c:0d:7f:5a:8e:
         7d:93:4a:8a:cf:c2:f4:a7:5c:e7:f7:8e:80:4b:96:23:b1:09:
         8a:74:3b:e8:97:f7:f9:1d:d8:f8:1d:fc:bf:9d:3b:85:b0:47:
         21:79:31:c5:a8:4a:32:4d:a9:8b:b2:e2:78:0c:95:54:6a:e7:
         43:88:9e:31:9b:88:c5:b6:cb:c5:fc:ac:0f:3f:28:48:d6:e6:
         65:a9:c5:31:b0:76:18:e6:f3:e3:0e:d7:b8:44:8c:c6:93:91:
         ff:06:bf:c5:c1:42:39:59:fb:ee:cc:7e:a2:e0:31:cc:f9:37:
         9c:2d:4c:d9:eb:37:f9:4d:14:06:0c:2e:e8:10:6d:f7:42:99:
         d1:d1:8f:99:84:cf:ca:83:8c:c2:ec:11:14:fd:7d:c2:36:3a:
         68:09:05:15:2b:65:45:ab:44:97:fa:f0:32:de:54:99:29:62:
         1a:c9:3a:cc:14:56:44:dc:a2:72:4a:3a:e3:ce:45:41:25:7e:
         f4:9f:6c:38:66:8c:27:bf:31:77:84:3b:f5:9b:f1:56:a8:a8:
         36:62:8c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:23:16 2026 by rpki-client