Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft
File:                     VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft (raw, json)
Hash identifier:          ZFoccb7U5+RFYWmN8p2gRq36zKz5qNGY7dnWn4q9O78=
Subject key identifier:   28:F1:98:93:31:B4:E5:0C:4C:C7:21:63:6F:15:0E:EC:4C:1D:03:EB
Authority key identifier: 56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3
Certificate issuer:       /CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
Certificate serial:       072E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft
Manifest number:          0617
Signing time:             Mon 20 Apr 2026 23:32:56 +0000
Manifest this update:     Mon 20 Apr 2026 23:32:55 +0000
Manifest next update:     Mon 27 Apr 2026 23:32:55 +0000
Files and hashes:         1: VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl (hash: JpIlKC9dNrhR212RkWkvV/1FXq9eo39f6r8/H004j/U=)
                          2: 0D0517EE716911EDA03D4A50C4F9AE02.roa (hash: 44VXldbBCfEVQNtNcncHBjm9zUl5518bfQtv5Cwsbsk=)
                          3: 0C5EDCDA716911EDA03D4A50C4F9AE02.roa (hash: 1UzncEKSR5GFkiri+HSHWqbKXpOZsxz5QJtUjNS60dU=)
                          4: 041C4116C47C11F0A98A0F0AC4F9AE02.roa (hash: nbLqVcL0fTjqbIJwLUXiGBSckIhHY+gUWicA4Ejfd+c=)
                          5: D359E238716B11ED9F349A49C4F9AE02.roa (hash: go9QI7FpdmjkqqbhQxd+M3xHAwb/d4cfJkbfC6AyPpc=)
                          6: D4FCF92C716B11ED9F349A49C4F9AE02.roa (hash: XMmSyDgKxtH6qPeamyVCMMC+VcBd+O1+Cvw9Hsg5W7w=)
                          7: 9A1D8B2E867D11ED856A8E54C4F9AE02.roa (hash: fdYZt6jklY3bJQYs/J5vrVMo+1h7F5ICSVyf7ebtNOQ=)
                          8: 038A3E10C47C11F092370F0AC4F9AE02.roa (hash: PE30fEqW14AO5z9GLUYe95jY8ke+Jr+zM4xGnRRJLDM=)
                          9: 8DEEDC96E6B511EF9FEF6436C4F9AE02.roa (hash: g3gth29agU07YswlgFO81/ThxXY3l/MzAhQfGvaSf0I=)
                          10: ECC41AD2748A11ED80EF3436C4F9AE02.roa (hash: LmBb3E6ZOpW9OlLSpl9Xe8OqcU/Rwlz9J6Udb54EdW8=)
                          11: 6A05B7C8D34F11F0879CFC0EC4F9AE02.roa (hash: NSkewz1Nti6QKVykPaOpJXeaqBl6UeIoyg+Z+Emi77U=)
                          12: 48CB7422E27911ED88B5A641C4F9AE02.roa (hash: JnZNG5CGc8oHU0w2EbnMQvCrxn0rcrBgZn15GdSGzO0=)
                          13: B7342ECA555B11F0B35B1E0DC4F9AE02.roa (hash: 5Bt5jOSeH1ZirCo6XLSESzVh2uk9S+hEE8FWtq9svC0=)
                          14: 0BD4BBC2716911EDA03D4A50C4F9AE02.roa (hash: H3UyhkzzibOUYss8LsCthA0jqoyZZmdZqwto2ZgduQo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl
                          rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Apr 2026 23:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1838 (0x72e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD39D, serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
        Validity
            Not Before: Apr 20 23:32:55 2026 GMT
            Not After : Apr 27 23:32:55 2026 GMT
        Subject: CN=69e6b7a7-1039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:dc:ec:ab:52:45:2b:fe:1a:61:60:2f:3f:f6:
                    31:2d:cd:3c:7c:b8:72:99:64:c9:c0:3a:9a:c9:98:
                    02:fe:15:5b:e6:38:5b:d0:a5:f2:52:b7:28:af:84:
                    f3:8d:0b:30:f7:39:22:cc:07:7a:42:80:6d:6f:37:
                    2e:b4:5b:dd:a7:0f:22:7b:f8:73:a7:13:74:3b:f6:
                    67:f9:85:f3:cb:b8:80:35:c1:92:60:8b:85:e0:83:
                    ae:15:85:a4:28:d9:8d:88:ab:e8:aa:ca:b9:be:34:
                    01:22:e2:3e:39:39:4a:0c:8d:57:ce:a6:8d:33:4b:
                    86:69:79:3d:a4:53:ff:b1:44:65:a6:9a:d2:c1:28:
                    8c:b5:6a:ec:49:98:78:54:7c:b9:f5:46:10:67:e0:
                    32:44:59:f9:90:60:94:08:94:b4:80:95:b8:86:fc:
                    81:5f:f1:e5:8c:7a:81:5b:67:c8:94:14:4a:ee:6e:
                    d0:74:10:9e:a8:79:b6:65:2c:16:46:93:8e:2e:9b:
                    78:3d:f7:9a:8f:41:a9:49:6f:56:23:e9:a3:44:79:
                    ca:dc:5a:30:4b:ca:cc:35:08:9f:55:52:5b:6d:bb:
                    6f:c7:74:70:fb:d7:37:49:e5:b7:f9:52:2a:83:3f:
                    3e:0a:02:b0:b3:6f:6a:c8:e0:61:be:cd:98:c8:0e:
                    08:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:F1:98:93:31:B4:E5:0C:4C:C7:21:63:6F:15:0E:EC:4C:1D:03:EB
            X509v3 Authority Key Identifier:
                keyid:56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:e8:3f:e2:2c:95:62:c5:0d:52:82:24:84:15:ab:06:85:f4:
         53:d1:da:13:40:d8:d2:85:55:c5:f1:9f:76:99:c6:dc:c6:94:
         78:bd:a3:e1:ce:23:9b:14:09:26:49:2f:08:90:93:cc:03:69:
         3e:dc:e1:63:82:bf:c8:34:36:05:75:59:45:c1:df:a3:c9:d5:
         27:be:14:3a:f8:3b:89:59:3c:a4:0c:89:b9:af:d2:d8:ae:54:
         6a:e9:e1:b5:8a:4f:3d:18:cd:46:5c:13:d0:77:43:d8:45:f9:
         31:c3:21:35:49:40:d0:33:27:ad:e5:1f:b2:c9:09:58:5c:c2:
         4a:a8:ef:21:4e:fe:89:fe:81:7c:d5:00:64:01:9b:0e:90:42:
         e0:15:0c:f0:37:69:de:b0:11:f1:43:7b:58:53:67:41:44:cc:
         3c:d6:ad:cf:85:37:23:7d:28:fe:86:26:60:40:16:3c:ba:44:
         c2:73:66:b8:e2:51:95:27:7d:3a:74:16:d1:c0:1a:59:d9:f1:
         64:29:b6:11:a8:f4:a8:bc:6b:04:d0:17:46:7b:ab:57:7e:b0:
         24:4b:6d:3c:d0:e6:91:15:dc:a0:5a:2f:91:c9:00:f7:db:b2:
         70:2a:3f:10:01:a0:c3:89:24:e3:e8:fa:f9:80:e9:9e:b1:92:
         d2:63:c2:a6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBy4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0QzOUQxMTAvBgNVBAUTKDU2Qjk4M0U0NkJDQkExMTVGRjIyNjVGRTQ5MTkwOUM3
RDc0MTQ3RjMwHhcNMjYwNDIwMjMzMjU1WhcNMjYwNDI3MjMzMjU1WjAYMRYwFAYD
VQQDEw02OWU2YjdhNy0xMDM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArNzsq1JFK/4aYWAvP/YxLc08fLhymWTJwDqayZgC/hVb5jhb0KXyUrcor4Tz
jQsw9zkizAd6QoBtbzcutFvdpw8ie/hzpxN0O/Zn+YXzy7iANcGSYIuF4IOuFYWk
KNmNiKvoqsq5vjQBIuI+OTlKDI1XzqaNM0uGaXk9pFP/sURlpprSwSiMtWrsSZh4
VHy59UYQZ+AyRFn5kGCUCJS0gJW4hvyBX/HljHqBW2fIlBRK7m7QdBCeqHm2ZSwW
RpOOLpt4Pfeaj0GpSW9WI+mjRHnK3FowS8rMNQifVVJbbbtvx3Rw+9c3SeW3+VIq
gz8+CgKws29qyOBhvs2YyA4IvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCjxmJMx
tOUMTMchY28VDuxMHQPrMB8GA1UdIwQYMBaAFFa5g+Rry6EV/yJl/kkZCcfXQUfz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDM5RC9ERTdEMkY5NDRF
NzYxMUVDQTU3MjBCNzlDNEY5QUUwMi9Wcm1ENUd2TG9SWF9JbVgtU1JrSng5ZEJS
X00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZybUQ1R3ZMb1JYX0ltWC1TUmtKeDlkQlJfTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RDM5RC9ERTdEMkY5NDRFNzYxMUVDQTU3MjBCNzlDNEY5QUUwMi9Wcm1ENUd2TG9S
WF9JbVgtU1JrSng5ZEJSX00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAwug/4iyVYsUNUoIkhBWrBoX0U9HaE0DY0oVVxfGfdpnG3MaUeL2j4c4jmxQJ
JkkvCJCTzANpPtzhY4K/yDQ2BXVZRcHfo8nVJ74UOvg7iVk8pAyJua/S2K5Uaunh
tYpPPRjNRlwT0HdD2EX5McMhNUlA0DMnreUfsskJWFzCSqjvIU7+if6BfNUAZAGb
DpBC4BUM8Ddp3rAR8UN7WFNnQUTMPNatz4U3I30o/oYmYEAWPLpEwnNmuOJRlSd9
OnQW0cAaWdnxZCm2Eaj0qLxrBNAXRnurV36wJEttPNDmkRXcoFovkckA99uycCo/
EAGgw4kk4+j6+YDpnrGS0mPCpg==
-----END CERTIFICATE-----
Generated at Wed Apr 22 00:08:33 2026 by rpki-client