Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.mft
File:                     VAR9J873NG9Bde-sc0SUrbsFe1U.mft (raw, json)
Hash identifier:          nFEj5LwOyZt4YyqFIjRmUgh3XGLQEy6+/iZ/ADDjAbU=
Subject key identifier:   70:97:C1:56:06:03:4E:D8:A6:11:40:73:87:93:70:6A:DB:AC:21:F4
Authority key identifier: 54:04:7D:27:CE:F7:34:6F:41:75:EF:AC:73:44:94:AD:BB:05:7B:55
Certificate issuer:       /CN=A91127C1/serialNumber=54047D27CEF7346F4175EFAC734494ADBB057B55
Certificate serial:       0A82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VAR9J873NG9Bde-sc0SUrbsFe1U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.mft
Manifest number:          0A78
Signing time:             Wed 20 May 2026 19:38:09 +0000
Manifest this update:     Wed 20 May 2026 19:38:08 +0000
Manifest next update:     Wed 27 May 2026 19:38:08 +0000
Files and hashes:         1: VAR9J873NG9Bde-sc0SUrbsFe1U.crl (hash: P9bN6HCuaTxKhE4lkrcELhiCblCL2Tj79rz2H9fttCE=)
                          2: 3492D2F083BA11EA8728F076C4F9AE02.roa (hash: fSihFqalIKY6ytzAhc7OtqICrnfklHIgIa5bNBLtu/w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.crl
                          rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VAR9J873NG9Bde-sc0SUrbsFe1U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 19:38:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2690 (0xa82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91127C1, serialNumber=54047D27CEF7346F4175EFAC734494ADBB057B55
        Validity
            Not Before: May 20 19:38:08 2026 GMT
            Not After : May 27 19:38:08 2026 GMT
        Subject: CN=6a0e0da0-3f4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c6:40:85:0f:ff:2a:8c:15:87:35:6c:95:9a:
                    df:e5:49:c2:15:87:99:c4:0d:c0:72:3d:0c:7b:4f:
                    b1:f3:ca:d9:95:46:b3:d8:88:0b:b4:41:14:ae:a7:
                    f4:5e:09:cf:e7:a5:40:fa:f1:6a:bc:18:ad:68:22:
                    32:36:1e:c5:2b:2e:ec:bd:fa:16:dd:7e:5d:e8:07:
                    79:61:51:5d:e5:2e:5c:e9:ab:9c:0b:0d:85:df:49:
                    9e:01:74:1c:81:7a:22:d1:41:28:2c:cf:be:f4:89:
                    1b:70:db:2e:67:ce:dd:da:2e:01:a0:c8:d0:e6:65:
                    4c:d3:a2:44:d5:85:31:30:82:fc:a9:c2:a9:7b:1c:
                    35:14:01:1c:b3:31:21:18:77:b0:82:68:7f:80:12:
                    f2:b8:37:f1:6f:f0:62:60:33:e5:fa:83:61:1b:d9:
                    41:00:f3:82:e9:11:ce:fe:11:91:0b:87:b3:0e:60:
                    03:3b:c9:4a:a9:2c:bd:2f:c8:49:73:80:a0:61:78:
                    ff:da:c3:3c:d0:b4:0e:8e:34:c6:7a:bd:58:3e:33:
                    07:f1:76:34:f4:57:90:7c:ae:eb:cc:02:cc:5c:2f:
                    b4:6c:53:04:5c:4a:90:2d:ef:c6:2d:1e:e0:71:cf:
                    13:60:d9:de:4e:77:48:bd:f4:4a:97:21:f4:31:32:
                    51:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:97:C1:56:06:03:4E:D8:A6:11:40:73:87:93:70:6A:DB:AC:21:F4
            X509v3 Authority Key Identifier:
                keyid:54:04:7D:27:CE:F7:34:6F:41:75:EF:AC:73:44:94:AD:BB:05:7B:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VAR9J873NG9Bde-sc0SUrbsFe1U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:21:d9:81:30:72:4a:0c:26:a2:f9:7d:1b:eb:9c:e3:52:5b:
         71:00:86:4e:04:77:db:55:2b:55:97:00:8f:c4:89:0e:92:98:
         1f:fd:fd:40:3c:41:00:64:59:3a:21:63:71:3d:74:d3:f2:f8:
         b0:75:f5:4c:06:b7:6a:7f:67:bc:27:ad:df:88:7b:1d:92:e0:
         fb:c9:d3:5e:3c:80:5e:49:77:a8:d6:e2:4f:5e:56:1d:e1:95:
         03:67:6e:e4:61:32:12:4a:d4:0c:14:63:3e:60:57:e0:d4:88:
         34:eb:3e:62:fa:a1:ce:2d:49:b5:d0:0d:4a:b1:df:fd:f4:e0:
         ab:b6:14:98:49:0a:32:32:f7:fd:ec:99:5e:95:b7:ab:e2:75:
         ed:07:2f:d3:37:05:25:ae:db:81:2e:b2:4b:0b:2e:16:1c:c4:
         19:b6:cb:38:f6:96:6f:b8:52:7a:fe:b4:c3:fd:74:fa:a4:6f:
         03:86:53:85:da:32:64:71:ac:4f:2f:f1:7a:ac:41:30:74:14:
         be:81:e1:d2:2c:41:d7:50:ca:a1:a7:a6:8a:1a:75:8d:57:3a:
         2f:35:94:c9:97:7b:0d:fd:7b:f4:6a:b8:1a:1f:52:e3:2c:46:
         b4:44:29:7c:de:a0:2e:e2:c3:fb:b9:9c:f4:53:e9:c9:e7:ee:
         d9:16:6f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:20:48 2026 by rpki-client