Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft
File:                     VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft (raw, json)
Hash identifier:          98gHSSbGWT1TMRPYn0soLoJ+qmq6ShLiaLwYuPVre5E=
Subject key identifier:   E0:F6:9F:7A:F9:39:52:61:64:EE:D0:05:FC:DC:72:76:3F:9A:8A:63
Authority key identifier: 56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3
Certificate issuer:       /CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
Certificate serial:       0D2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft
Manifest number:          0939
Signing time:             Fri 04 Sep 2026 23:11:07 +0000
Manifest this update:     Fri 04 Sep 2026 23:11:07 +0000
Manifest next update:     Fri 11 Sep 2026 23:11:07 +0000
Files and hashes:         1: VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl (hash: osaaVZU+bMB+Iew9Jc4O0kHk0e7D8FpFXNkltcUKmiw=)
                          2: 9A1D8B2E867D11ED856A8E54C4F9AE02.roa (hash: fdYZt6jklY3bJQYs/J5vrVMo+1h7F5ICSVyf7ebtNOQ=)
                          3: 733B2566778D11F1A5FCE36972A30FBC.roa (hash: Znbqdc9WP/kMnCSabpXnkWYjjjB6okw6IdxM3WgMkWA=)
                          4: 262EECF8623E11F1B19F70B27947A888.roa (hash: 7r8I/t3aD0KS64OG37TgSZks2BgxIbXwQjHGWmC2/98=)
                          5: 041C4116C47C11F0A98A0F0AC4F9AE02.roa (hash: nbLqVcL0fTjqbIJwLUXiGBSckIhHY+gUWicA4Ejfd+c=)
                          6: 0BD4BBC2716911EDA03D4A50C4F9AE02.roa (hash: H3UyhkzzibOUYss8LsCthA0jqoyZZmdZqwto2ZgduQo=)
                          7: 0D0517EE716911EDA03D4A50C4F9AE02.roa (hash: 44VXldbBCfEVQNtNcncHBjm9zUl5518bfQtv5Cwsbsk=)
                          8: 6A05B7C8D34F11F0879CFC0EC4F9AE02.roa (hash: 2nHmdjsLheK6hSW1EKT3AE21wyVC408TUSooZ3JbypA=)
                          9: D359E238716B11ED9F349A49C4F9AE02.roa (hash: go9QI7FpdmjkqqbhQxd+M3xHAwb/d4cfJkbfC6AyPpc=)
                          10: 48CB7422E27911ED88B5A641C4F9AE02.roa (hash: jMwNpKA88LeumyoMQZGXLbol05A6h1ENDFa5OJh7YoU=)
                          11: 03D31B6A775711F1A349736662A30FBC.roa (hash: r+MgVB10xTj3uOjt5PHyMmP7+YRUSFeokaPXw5FeL0Q=)
                          12: D4FCF92C716B11ED9F349A49C4F9AE02.roa (hash: XMmSyDgKxtH6qPeamyVCMMC+VcBd+O1+Cvw9Hsg5W7w=)
                          13: 0C5EDCDA716911EDA03D4A50C4F9AE02.roa (hash: 1UzncEKSR5GFkiri+HSHWqbKXpOZsxz5QJtUjNS60dU=)
                          14: 038A3E10C47C11F092370F0AC4F9AE02.roa (hash: PE30fEqW14AO5z9GLUYe95jY8ke+Jr+zM4xGnRRJLDM=)
                          15: ECC41AD2748A11ED80EF3436C4F9AE02.roa (hash: LmBb3E6ZOpW9OlLSpl9Xe8OqcU/Rwlz9J6Udb54EdW8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl
                          rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 23:11:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3370 (0xd2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD39D, serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
        Validity
            Not Before: Sep  4 23:11:07 2026 GMT
            Not After : Sep 11 23:11:07 2026 GMT
        Subject: CN=6a9b500b-c6f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bf:48:42:54:c1:1e:30:e4:d6:00:6d:6d:e7:
                    96:43:a8:a5:09:8a:70:f4:cc:d5:43:9d:1c:1f:82:
                    7d:ff:9f:01:9a:b6:3f:28:93:92:35:4f:2f:d9:64:
                    16:cc:64:88:92:7e:6e:75:5d:f7:21:94:3d:71:9a:
                    03:37:f3:a0:87:b5:0a:6c:05:ce:f6:f1:c2:db:ed:
                    27:ba:24:e6:5d:86:71:79:16:36:8c:61:89:9a:3c:
                    0d:e9:1b:7c:a1:e4:59:c9:21:0f:90:bb:36:52:92:
                    83:3a:03:07:6f:e1:79:12:2d:7e:af:8a:da:08:86:
                    32:32:d4:d4:01:37:67:3a:e5:a9:19:20:58:18:86:
                    c3:5a:41:f6:c6:87:d2:95:0e:4b:27:50:a2:84:f9:
                    9c:0a:fd:0d:be:d8:ee:00:85:41:e4:36:00:c2:3f:
                    f2:18:4c:f7:d2:12:92:7e:3a:b7:57:9d:60:1b:c8:
                    e9:64:12:0c:20:a7:a8:6c:54:12:c0:98:05:13:00:
                    b1:70:35:7a:d8:41:89:e1:f6:af:c8:8d:29:a1:d8:
                    b1:a1:02:47:28:bc:2b:4e:46:68:22:29:5e:c5:ea:
                    36:34:35:2c:01:07:37:78:5a:08:0e:3d:8f:36:e9:
                    59:0c:2a:67:5a:58:15:57:6e:06:a5:5b:ff:18:b8:
                    86:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:F6:9F:7A:F9:39:52:61:64:EE:D0:05:FC:DC:72:76:3F:9A:8A:63
            X509v3 Authority Key Identifier:
                keyid:56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:49:ee:bf:3e:2b:ce:6f:b1:32:06:e3:c1:c3:dc:ab:2a:26:
         09:e7:8a:d9:0d:0c:1f:06:f7:88:0a:5a:22:24:75:d2:82:44:
         0b:b6:aa:0c:93:74:38:90:fe:5a:11:2b:d4:d8:d8:8f:80:48:
         a8:47:01:a6:eb:aa:e3:45:98:02:2a:2d:1d:cf:e8:05:33:2d:
         3a:ab:9d:18:0e:8b:c4:55:2d:68:a5:3d:75:6f:ca:b1:9e:71:
         d7:9b:5c:8c:96:5e:2f:37:17:af:9b:e4:6c:61:eb:e3:1a:98:
         ca:6c:74:43:15:e8:49:54:5f:c4:fe:66:6d:77:bb:c1:e3:63:
         63:1a:35:e3:39:9c:af:81:f2:c3:d1:3e:23:62:97:ed:a5:c2:
         cc:d0:e6:ec:97:bb:8e:66:2e:96:18:33:79:2d:d6:10:63:99:
         79:57:62:ab:9f:9c:53:ce:f1:c8:81:bd:f3:5b:8d:80:c6:11:
         75:d9:c0:21:ee:af:52:0b:b5:87:6d:ed:08:5d:a9:6b:31:0c:
         a5:5a:a1:4d:8e:5d:d8:9a:de:66:b4:ce:8f:9e:07:1c:c7:38:
         ff:68:70:4b:7c:8d:7e:05:f0:83:77:f2:ad:d4:0a:ea:2c:2d:
         ab:0b:30:ee:47:98:77:6c:fa:22:8d:81:f9:2b:8c:9b:6e:fa:
         7b:eb:c2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:36:55 2026 by rpki-client