Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914417A/752B65021DA111E2BC82A39308B02CD2/VR9-hn-vN0cJR19QtJbX_YhCb7E.mft
File:                     VR9-hn-vN0cJR19QtJbX_YhCb7E.mft (raw, json)
Hash identifier:          X8+ULq/E6PgjGOcN8+u64PqxloLBnA+OibphOGNFl08=
Subject key identifier:   28:6D:A7:2B:1D:A4:C6:54:75:5C:E6:6C:0B:13:6A:A9:18:A1:E7:89
Authority key identifier: 55:1F:7E:86:7F:AF:37:47:09:47:5F:50:B4:96:D7:FD:88:42:6F:B1
Certificate issuer:       /CN=A914417A/serialNumber=551F7E867FAF374709475F50B496D7FD88426FB1
Certificate serial:       3594
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9-hn-vN0cJR19QtJbX_YhCb7E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914417A/752B65021DA111E2BC82A39308B02CD2/VR9-hn-vN0cJR19QtJbX_YhCb7E.mft
Manifest number:          358E
Signing time:             Tue 06 Oct 2026 15:04:38 +0000
Manifest this update:     Tue 06 Oct 2026 15:04:38 +0000
Manifest next update:     Tue 13 Oct 2026 15:04:38 +0000
Files and hashes:         1: VR9-hn-vN0cJR19QtJbX_YhCb7E.crl (hash: PfqSFRLDbtF5mJTtt30KjYKPlI5pngFnyjtkOR3XEyg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914417A/752B65021DA111E2BC82A39308B02CD2/VR9-hn-vN0cJR19QtJbX_YhCb7E.crl
                          rsync://rpki.apnic.net/member_repository/A914417A/752B65021DA111E2BC82A39308B02CD2/VR9-hn-vN0cJR19QtJbX_YhCb7E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9-hn-vN0cJR19QtJbX_YhCb7E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 15:04:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13716 (0x3594)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914417A, serialNumber=551F7E867FAF374709475F50B496D7FD88426FB1
        Validity
            Not Before: Oct  6 15:04:38 2026 GMT
            Not After : Oct 13 15:04:38 2026 GMT
        Subject: CN=6ac50e06-16b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:90:9e:4b:89:15:de:c7:8b:35:2e:63:8a:9e:
                    b2:a6:25:45:ae:96:da:e5:dc:8f:80:50:6a:a0:38:
                    cc:36:99:ac:00:10:37:ef:39:7c:c8:fc:13:6e:fe:
                    11:95:5b:41:11:97:97:73:62:70:42:38:a7:75:08:
                    a9:f5:48:8e:11:81:5e:2b:f0:de:5f:f4:d9:03:8f:
                    a6:a2:14:ab:dd:84:58:a7:bc:0b:73:93:3e:44:0e:
                    52:04:31:47:1a:35:be:be:5a:44:99:52:33:99:9f:
                    45:21:9f:33:c2:f4:8a:61:b1:13:7d:ab:28:66:4b:
                    38:8f:c7:89:4d:e3:8c:34:f3:0b:dd:02:92:51:04:
                    6b:18:83:5e:19:94:c0:fd:4a:8a:ed:43:41:80:9d:
                    4b:d6:0a:57:f1:48:53:f8:e5:98:2e:58:09:34:00:
                    9c:34:69:82:04:7e:77:8c:05:5d:ee:5a:67:8a:e0:
                    f9:7f:8b:13:6f:fe:f9:5b:98:9d:3a:a6:1c:d9:17:
                    18:fa:f4:7c:4d:37:72:77:89:c3:93:4c:85:94:e4:
                    c7:12:33:03:14:ac:d3:7c:9c:e5:e4:3b:01:53:f5:
                    fc:10:97:95:88:1a:1c:eb:7e:af:a1:86:5c:c1:8a:
                    4d:d4:01:f6:2a:91:a7:de:8f:e8:d6:02:d8:f7:14:
                    2e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:6D:A7:2B:1D:A4:C6:54:75:5C:E6:6C:0B:13:6A:A9:18:A1:E7:89
            X509v3 Authority Key Identifier:
                keyid:55:1F:7E:86:7F:AF:37:47:09:47:5F:50:B4:96:D7:FD:88:42:6F:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914417A/752B65021DA111E2BC82A39308B02CD2/VR9-hn-vN0cJR19QtJbX_YhCb7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9-hn-vN0cJR19QtJbX_YhCb7E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914417A/752B65021DA111E2BC82A39308B02CD2/VR9-hn-vN0cJR19QtJbX_YhCb7E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:d2:9d:99:23:85:61:c3:a1:a0:9e:d0:c8:3e:64:39:75:74:
         96:c8:1d:9f:34:62:46:66:7f:ff:0a:dd:12:4c:5c:d6:d0:f1:
         9a:96:67:13:1d:f0:d1:21:8d:33:ce:32:52:0d:d4:90:b5:5a:
         f0:d4:36:81:7d:05:39:13:47:17:14:a5:cd:4f:6f:61:93:8b:
         1c:a5:61:fa:4c:32:0f:e5:55:ac:35:fb:62:3a:61:40:11:b9:
         cc:44:e0:a8:e2:19:c2:dd:a0:00:d5:3a:fa:3c:35:bf:fd:bd:
         13:a9:e1:cd:25:ae:df:d9:bc:12:46:35:81:89:e5:03:e2:e7:
         be:02:cb:48:7e:11:14:c9:e3:8a:48:60:42:7f:3c:20:99:39:
         c9:ad:08:67:a0:4f:7e:5c:ad:46:89:5f:9b:3a:1b:bb:b3:50:
         b9:37:12:b2:96:e9:e1:a9:c5:b4:b8:08:80:9b:88:fc:7f:43:
         bf:d6:d6:e5:07:71:da:b8:26:83:3c:c0:8a:d3:a3:56:84:5e:
         6b:23:4a:0e:8e:3d:3b:fd:e1:7b:c5:25:5b:44:3a:21:98:70:
         78:96:44:18:16:5c:10:fa:76:8a:7a:c1:3d:44:ad:2e:28:75:
         c0:1c:97:c7:3c:84:da:b8:72:6c:c2:d9:15:b4:8e:74:3b:f6:
         b6:16:83:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:19:39 2026 by rpki-client