Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7836/074F396E801611F18A76BD785BA30FBC/VSG7pLlnmYQnwoK61rZvfm22twc.mft
File:                     VSG7pLlnmYQnwoK61rZvfm22twc.mft (raw, json)
Hash identifier:          5rMbok9njWSglrO/wDXjuLNyhKxuIF4gdI76kmrgQd8=
Subject key identifier:   23:5E:B9:34:A4:2E:A9:D4:D7:B1:4C:96:5E:C8:7A:48:D9:01:26:9B
Authority key identifier: 55:21:BB:A4:B9:67:99:84:27:C2:82:BA:D6:B6:6F:7E:6D:B6:B7:07
Certificate issuer:       /CN=A91C7836/serialNumber=5521BBA4B967998427C282BAD6B66F7E6DB6B707
Certificate serial:       1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VSG7pLlnmYQnwoK61rZvfm22twc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7836/074F396E801611F18A76BD785BA30FBC/VSG7pLlnmYQnwoK61rZvfm22twc.mft
Manifest number:          1D
Signing time:             Thu 03 Sep 2026 09:09:41 +0000
Manifest this update:     Thu 03 Sep 2026 09:09:40 +0000
Manifest next update:     Thu 10 Sep 2026 09:09:40 +0000
Files and hashes:         1: VSG7pLlnmYQnwoK61rZvfm22twc.crl (hash: QV31ltygbMa3hZwLlPuxIh37G/bNGQQH3abpvHwYi84=)
                          2: 33A082DA948D11F1A5BE36406611F970.roa (hash: Zrbzfz5Z2TeRzK/kWg662lvjXfu9AESyGMfzdvdsjVE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7836/074F396E801611F18A76BD785BA30FBC/VSG7pLlnmYQnwoK61rZvfm22twc.crl
                          rsync://rpki.apnic.net/member_repository/A91C7836/074F396E801611F18A76BD785BA30FBC/VSG7pLlnmYQnwoK61rZvfm22twc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VSG7pLlnmYQnwoK61rZvfm22twc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 09:09:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7836, serialNumber=5521BBA4B967998427C282BAD6B66F7E6DB6B707
        Validity
            Not Before: Sep  3 09:09:40 2026 GMT
            Not After : Sep 10 09:09:40 2026 GMT
        Subject: CN=6a993955-f668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e1:50:54:c8:1b:71:bd:d4:dc:49:ab:76:44:
                    5c:09:d7:7d:53:79:13:a9:0c:fd:0f:99:a9:13:85:
                    6b:8e:84:33:60:11:6a:92:e9:bf:9c:dd:c5:7a:68:
                    a4:a3:9c:7b:fb:5e:1d:65:78:42:5c:5e:de:77:a1:
                    fe:ce:9b:6a:6c:1b:c4:cd:a5:ea:28:e9:34:4d:50:
                    05:18:05:e7:ea:a9:b0:f6:3b:ca:52:34:cf:1b:c1:
                    9b:e2:f6:61:35:42:5c:67:77:74:69:c2:93:0b:5f:
                    da:16:47:0d:34:ba:70:ba:ae:9a:80:ee:13:fb:de:
                    c6:40:af:68:e6:a6:9c:34:5f:d1:3a:13:f5:75:d4:
                    71:68:b8:87:d6:08:6f:c3:cd:f8:1f:1a:77:d3:26:
                    b5:4f:ee:98:08:89:a3:eb:ed:e4:cd:98:34:c2:89:
                    c3:6d:aa:0e:68:d6:b1:53:44:07:df:34:20:08:ca:
                    16:4f:c0:5a:96:b9:6d:e9:90:e8:00:43:ac:11:c7:
                    97:fb:3d:20:06:da:7a:1c:75:e5:be:8b:ee:75:df:
                    0d:0f:99:eb:32:f1:23:5f:9b:33:0f:13:73:0a:f1:
                    b9:93:e0:c7:20:44:88:1c:45:6b:1a:4a:41:07:78:
                    15:cb:2d:1c:8c:c6:a1:53:4c:93:45:59:9d:c7:fd:
                    0a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:5E:B9:34:A4:2E:A9:D4:D7:B1:4C:96:5E:C8:7A:48:D9:01:26:9B
            X509v3 Authority Key Identifier:
                keyid:55:21:BB:A4:B9:67:99:84:27:C2:82:BA:D6:B6:6F:7E:6D:B6:B7:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7836/074F396E801611F18A76BD785BA30FBC/VSG7pLlnmYQnwoK61rZvfm22twc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VSG7pLlnmYQnwoK61rZvfm22twc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7836/074F396E801611F18A76BD785BA30FBC/VSG7pLlnmYQnwoK61rZvfm22twc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:9c:64:0e:2f:fa:9e:08:bb:16:be:36:5c:59:af:25:48:cb:
         b5:df:1f:b3:c9:0c:15:7b:c3:75:4e:96:8e:63:5b:c0:53:de:
         60:d1:54:2f:45:8d:08:14:bf:42:3c:5a:b1:88:b4:75:f1:21:
         88:b2:15:eb:a4:7c:18:d4:d8:e9:22:85:c1:f3:dd:0b:b4:8f:
         45:29:73:4a:eb:ac:4c:00:e3:6d:b9:94:a4:34:2c:ac:8b:35:
         71:66:b9:2d:70:67:11:83:c0:50:63:2d:88:b4:e6:3d:45:36:
         77:8c:4f:89:cc:fc:3f:46:f8:68:c8:3a:cd:01:e1:2d:f3:ec:
         0b:68:d4:e9:19:6d:d2:3e:7d:bc:e9:f8:36:a6:d6:8f:c4:6e:
         b1:0f:5c:f0:02:fa:7a:bb:98:c8:90:a9:18:bf:09:82:c1:46:
         eb:c5:95:ff:cf:3d:79:fc:c7:fc:9e:e2:8e:32:56:fe:8b:0e:
         59:50:f4:90:75:d8:ee:b4:71:cb:a8:2c:b4:a5:a2:b9:ab:d8:
         f2:3c:8b:fe:b3:a3:f6:34:6c:1e:fa:f5:5d:ce:9a:c7:2f:16:
         72:52:0a:ee:26:dd:06:b0:d5:d3:4e:c7:66:c3:b0:ac:a9:a3:
         ff:97:8f:64:d5:30:27:7a:37:6d:af:d0:1c:f4:01:00:aa:1d:
         11:6f:63:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:40:34 2026 by rpki-client