Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft
File:                     VRHewp3K7aF782u_M5UycVnxSoE.mft (raw, json)
Hash identifier:          cbao5UILaWtX0oS4OmZhjz/GX+evQhfPlJhFNudBHHU=
Subject key identifier:   15:77:BE:08:9B:EF:3F:A2:0E:B7:C3:13:F2:56:38:A1:26:25:52:57
Authority key identifier: 55:11:DE:C2:9D:CA:ED:A1:7B:F3:6B:BF:33:95:32:71:59:F1:4A:81
Certificate issuer:       /CN=A9192248/serialNumber=5511DEC29DCAEDA17BF36BBF3395327159F14A81
Certificate serial:       0D64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRHewp3K7aF782u_M5UycVnxSoE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft
Manifest number:          0D4A
Signing time:             Tue 28 Jul 2026 18:11:15 +0000
Manifest this update:     Tue 28 Jul 2026 18:11:15 +0000
Manifest next update:     Tue 04 Aug 2026 18:11:15 +0000
Files and hashes:         1: VRHewp3K7aF782u_M5UycVnxSoE.crl (hash: VIleY2uio0hHdGnW35wMnhKmQDYKnSmMAoiCVc5YsVY=)
                          2: F2B52DF6CBB611EB94FE6E68C4F9AE02.roa (hash: Xmjn71gL/YQIzR03KwfjQ2azJG6B5XbTMAuZDitsX1c=)
                          3: F3E543B4CBB611EB94FE6E68C4F9AE02.roa (hash: wX/LG4PCY+hN9kkQeun4KuKXF3q4iW90Y5Az5gpzISI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.crl
                          rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRHewp3K7aF782u_M5UycVnxSoE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 18:11:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3428 (0xd64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192248, serialNumber=5511DEC29DCAEDA17BF36BBF3395327159F14A81
        Validity
            Not Before: Jul 28 18:11:15 2026 GMT
            Not After : Aug  4 18:11:15 2026 GMT
        Subject: CN=6a68f0c3-a3f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7a:70:f6:51:61:bf:b8:23:6b:a5:56:59:55:
                    7a:ce:06:c1:40:03:9f:a3:06:73:6c:91:4a:ad:6b:
                    b1:13:47:91:1e:dc:a1:73:2d:38:0e:23:cc:03:a7:
                    b1:b9:64:9c:40:66:45:2b:82:fd:50:a3:67:35:96:
                    1e:6c:5f:10:9d:e4:e3:ff:79:c2:d8:3d:ed:9d:10:
                    40:9a:27:d6:02:66:78:7f:f9:35:5f:c2:e4:7b:5a:
                    76:aa:3f:b3:41:f1:17:cf:18:38:10:a6:19:e7:3b:
                    6b:df:2f:bf:7b:e9:45:ba:cc:f7:2a:15:be:d0:c7:
                    5b:4f:1c:69:57:e5:c8:25:25:1b:27:9b:97:dd:d9:
                    43:e8:40:16:ff:c9:66:99:62:4d:9b:be:b5:6c:0b:
                    7f:2b:b1:0c:f0:71:06:4f:ef:c0:a4:12:cf:c7:c6:
                    a8:7a:9c:ac:17:de:55:d3:b1:19:85:b9:b6:f5:15:
                    b9:d8:09:3a:e8:6a:31:e5:87:d1:1b:9f:e5:15:b7:
                    57:60:47:97:35:bb:15:da:4f:1f:4b:4e:6e:f0:c5:
                    84:79:fa:a6:fb:6f:c1:df:ca:de:fd:df:cc:80:b7:
                    37:64:a3:f6:4a:ab:da:ad:68:09:c1:df:99:ce:3c:
                    f3:71:42:fd:8b:9f:7b:c2:48:db:4d:29:66:4e:63:
                    ec:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:77:BE:08:9B:EF:3F:A2:0E:B7:C3:13:F2:56:38:A1:26:25:52:57
            X509v3 Authority Key Identifier:
                keyid:55:11:DE:C2:9D:CA:ED:A1:7B:F3:6B:BF:33:95:32:71:59:F1:4A:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRHewp3K7aF782u_M5UycVnxSoE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:9b:bf:c1:17:94:f0:56:ff:6e:ef:fe:e1:aa:06:af:0e:cb:
         25:9a:45:67:8b:da:e9:77:8a:70:c1:e2:cb:18:6f:8e:a3:61:
         01:0f:72:0f:66:cb:ea:a3:9f:f2:ad:47:0b:8c:dd:9c:ac:96:
         0d:b0:84:d8:bd:2a:d4:bb:f9:74:fc:78:30:f0:c1:df:03:51:
         df:5e:20:e3:82:7c:90:17:ec:2a:ff:fc:3f:38:9d:80:ca:07:
         c7:78:de:d2:05:4c:3d:cf:fc:3c:01:10:7e:6d:c3:4e:43:3b:
         c2:be:8d:91:88:95:c2:34:f0:fc:70:21:c8:29:1a:d2:9f:83:
         8f:b2:4d:8e:dd:54:a1:a8:a5:92:aa:0e:c9:07:8d:f3:9e:f2:
         ad:b3:b2:05:ca:3f:7e:8a:7d:94:52:02:e0:7a:5c:f3:24:cd:
         ef:23:9b:17:29:aa:a9:71:e8:c1:e5:03:a9:ce:7f:47:28:fc:
         02:bd:7e:28:cc:f2:9e:09:ba:4a:51:f5:24:a4:b0:69:c2:02:
         eb:1c:56:13:6a:44:ce:75:94:40:a7:2c:5a:09:e0:7b:9f:0b:
         78:d9:89:95:21:2a:53:39:d6:d8:5b:bd:f9:d8:df:6c:9c:2f:
         93:fb:fe:62:01:ab:7c:f8:4c:98:32:61:7d:68:6d:c9:64:cb:
         f9:29:fd:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:10:34 2026 by rpki-client