Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft
File:                     VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft (raw, json)
Hash identifier:          Lw/ndeC1Ay3o4khPaJ/RDbKGDux6dRPVWdf+ZdCHyfo=
Subject key identifier:   94:5D:52:47:4E:F5:2E:88:C2:30:F6:E0:3B:23:BC:AA:C1:4B:95:A4
Authority key identifier: 56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3
Certificate issuer:       /CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
Certificate serial:       0B40
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft
Manifest number:          082F
Signing time:             Fri 12 Jun 2026 23:35:53 +0000
Manifest this update:     Fri 12 Jun 2026 23:35:53 +0000
Manifest next update:     Fri 19 Jun 2026 23:35:53 +0000
Files and hashes:         1: VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl (hash: lJBnE+xhvD+OGOX1tCbPALFVUttAdLipTHM90SVGKYY=)
                          2: 48CB7422E27911ED88B5A641C4F9AE02.roa (hash: JnZNG5CGc8oHU0w2EbnMQvCrxn0rcrBgZn15GdSGzO0=)
                          3: ECC41AD2748A11ED80EF3436C4F9AE02.roa (hash: LmBb3E6ZOpW9OlLSpl9Xe8OqcU/Rwlz9J6Udb54EdW8=)
                          4: 038A3E10C47C11F092370F0AC4F9AE02.roa (hash: PE30fEqW14AO5z9GLUYe95jY8ke+Jr+zM4xGnRRJLDM=)
                          5: 0C5EDCDA716911EDA03D4A50C4F9AE02.roa (hash: 1UzncEKSR5GFkiri+HSHWqbKXpOZsxz5QJtUjNS60dU=)
                          6: 041C4116C47C11F0A98A0F0AC4F9AE02.roa (hash: nbLqVcL0fTjqbIJwLUXiGBSckIhHY+gUWicA4Ejfd+c=)
                          7: 65D96DE85B5811F1B3A612C999833773.roa (hash: UebTigDBtg74PTYgKD6Y7XArYlcc1RqT/64y+ItPlyY=)
                          8: 0BD4BBC2716911EDA03D4A50C4F9AE02.roa (hash: H3UyhkzzibOUYss8LsCthA0jqoyZZmdZqwto2ZgduQo=)
                          9: 0D0517EE716911EDA03D4A50C4F9AE02.roa (hash: 44VXldbBCfEVQNtNcncHBjm9zUl5518bfQtv5Cwsbsk=)
                          10: D4FCF92C716B11ED9F349A49C4F9AE02.roa (hash: XMmSyDgKxtH6qPeamyVCMMC+VcBd+O1+Cvw9Hsg5W7w=)
                          11: 6A05B7C8D34F11F0879CFC0EC4F9AE02.roa (hash: YrM8DUmjGn2GbBECY7xskJhFFFBCjsL6kmEeytiHwsI=)
                          12: 262EECF8623E11F1B19F70B27947A888.roa (hash: 7r8I/t3aD0KS64OG37TgSZks2BgxIbXwQjHGWmC2/98=)
                          13: 9A1D8B2E867D11ED856A8E54C4F9AE02.roa (hash: fdYZt6jklY3bJQYs/J5vrVMo+1h7F5ICSVyf7ebtNOQ=)
                          14: 8DEEDC96E6B511EF9FEF6436C4F9AE02.roa (hash: +O9AqaWHpWw7dEyAVuZKI/A9uHPtggzdAPRe8tOBtj8=)
                          15: D359E238716B11ED9F349A49C4F9AE02.roa (hash: go9QI7FpdmjkqqbhQxd+M3xHAwb/d4cfJkbfC6AyPpc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl
                          rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 23:35:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2880 (0xb40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD39D, serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
        Validity
            Not Before: Jun 12 23:35:53 2026 GMT
            Not After : Jun 19 23:35:53 2026 GMT
        Subject: CN=6a2c97d9-bb2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4e:09:e6:cd:29:1a:67:d2:8b:69:78:5b:4a:
                    37:a7:c6:8d:33:0b:ef:53:fe:af:b1:e2:5d:57:96:
                    e4:8c:a5:8c:bb:44:6f:55:0f:37:3f:48:a9:f4:38:
                    9c:6b:53:86:ae:6e:1c:8e:13:14:2d:88:d4:3e:9f:
                    ec:b8:11:b1:c1:cd:4b:c8:02:2b:7a:d1:da:49:8c:
                    53:de:ae:35:63:1d:44:ce:41:83:4e:5e:be:61:c5:
                    14:a6:3c:81:65:3e:d1:2d:1e:0f:ce:0f:01:fd:66:
                    74:83:79:c1:06:09:af:d6:f9:fd:ee:54:50:75:b7:
                    a7:7d:bc:0a:ef:d7:ae:44:d5:49:67:ba:8b:7f:23:
                    f4:fc:16:b9:25:70:9c:d5:8a:45:06:8a:69:1d:c7:
                    d6:58:c3:5d:83:f1:a2:ae:27:a7:69:09:9c:67:b9:
                    b3:86:fd:15:fa:ae:69:5a:47:9c:2a:5b:3f:19:84:
                    79:72:9b:d7:06:47:b3:a6:1e:6a:41:1e:89:c2:fc:
                    95:ab:74:7c:49:82:c9:07:d9:ee:91:66:cf:2e:09:
                    30:58:05:5a:1b:02:33:61:e9:7f:b5:e4:48:c4:02:
                    92:0a:ee:e4:09:1e:62:3b:04:50:52:ef:9d:9b:7b:
                    23:90:fc:69:48:3d:87:91:09:25:bf:f1:84:65:fc:
                    59:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:5D:52:47:4E:F5:2E:88:C2:30:F6:E0:3B:23:BC:AA:C1:4B:95:A4
            X509v3 Authority Key Identifier:
                keyid:56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:1c:d7:b4:d6:f4:28:c7:f3:5c:cb:f6:0a:e6:c0:0f:d3:4b:
         0e:56:20:c1:c2:67:d2:f1:12:b6:7d:26:09:a3:0e:32:f7:d5:
         aa:f6:72:e7:cb:36:e4:59:20:18:51:24:18:29:22:85:1f:a0:
         18:e3:5c:88:58:d8:d5:ab:a2:c1:ce:66:b1:7f:58:20:1d:f6:
         2f:61:87:3a:f2:6f:71:be:73:69:50:8e:bb:20:28:bc:9a:a8:
         0e:bf:1f:79:87:8f:f1:3f:27:d6:5e:bb:31:18:1c:9b:3b:7c:
         21:c3:fe:fe:df:84:c6:50:bc:2d:f4:79:09:8b:97:fb:40:71:
         f0:b5:98:26:43:50:e1:05:4f:94:5a:4d:d0:f0:db:9e:bf:a1:
         4c:c6:ca:4b:25:15:a8:af:16:0a:9f:60:b7:53:54:7f:b4:06:
         e7:f3:12:43:7f:8d:ea:ff:33:4d:72:e4:c6:dd:b7:45:65:36:
         39:66:35:99:05:37:00:18:ac:2a:a7:a2:16:f3:93:4d:fb:cd:
         cf:ce:1c:3c:08:52:2d:9d:bd:56:94:c8:a2:83:da:28:d2:0c:
         70:e7:3a:cb:d6:d9:fb:25:5e:f7:68:59:df:1d:76:33:f5:df:
         dc:ae:1b:a3:53:fb:fb:36:2a:10:7c:25:66:8a:f9:67:95:fc:
         8e:44:d9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:27:05 2026 by rpki-client