Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CFBCB/CBC363D8FDBC11F0B93A5F71676F56BC/vmV8x_anGoEMa1JeGkxyucvU1u0.mft
File:                     vmV8x_anGoEMa1JeGkxyucvU1u0.mft (raw, json)
Hash identifier:          RLkMkDaGxAkP2+yLmSk88qFq/4yfiKHe/ocCHXre2sg=
Subject key identifier:   15:E4:22:86:C3:83:93:80:73:AE:27:F3:53:95:73:F5:42:D1:EA:A3
Authority key identifier: BE:65:7C:C7:F6:A7:1A:81:0C:6B:52:5E:1A:4C:72:B9:CB:D4:D6:ED
Certificate issuer:       /CN=A91CFBCB/serialNumber=BE657CC7F6A71A810C6B525E1A4C72B9CBD4D6ED
Certificate serial:       81
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vmV8x_anGoEMa1JeGkxyucvU1u0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFBCB/CBC363D8FDBC11F0B93A5F71676F56BC/vmV8x_anGoEMa1JeGkxyucvU1u0.mft
Manifest number:          7E
Signing time:             Mon 21 Sep 2026 07:46:29 +0000
Manifest this update:     Mon 21 Sep 2026 07:46:29 +0000
Manifest next update:     Mon 28 Sep 2026 07:46:29 +0000
Files and hashes:         1: vmV8x_anGoEMa1JeGkxyucvU1u0.crl (hash: WTWejcF4OWCmMLDceghjpTnxCoaQ6U1jeKu0paSS+7M=)
                          2: 2FA448EAFDBD11F083E9CE8F676F56BC.roa (hash: RcZ+8Tgkr/98lt0nqg0mgsZ2FAFTLU/F6UQiIHa5elE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFBCB/CBC363D8FDBC11F0B93A5F71676F56BC/vmV8x_anGoEMa1JeGkxyucvU1u0.crl
                          rsync://rpki.apnic.net/member_repository/A91CFBCB/CBC363D8FDBC11F0B93A5F71676F56BC/vmV8x_anGoEMa1JeGkxyucvU1u0.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vmV8x_anGoEMa1JeGkxyucvU1u0.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:46:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129 (0x81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFBCB, serialNumber=BE657CC7F6A71A810C6B525E1A4C72B9CBD4D6ED
        Validity
            Not Before: Sep 21 07:46:29 2026 GMT
            Not After : Sep 28 07:46:29 2026 GMT
        Subject: CN=6ab0e0d5-fa06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fa:47:72:e5:c7:c8:e2:87:e7:47:a5:da:0f:
                    76:40:7c:34:c7:81:81:8b:a6:f5:7a:51:7b:a3:bb:
                    f2:67:72:3c:ce:50:ad:c3:a4:ee:b5:41:80:d0:15:
                    d9:a7:8d:83:7d:a8:77:ee:14:3f:cf:6d:f4:f2:3e:
                    e4:66:39:bc:11:96:3b:45:6f:45:c3:83:39:e4:82:
                    e7:67:45:13:a0:8a:17:cc:6c:0d:8a:e6:56:87:4a:
                    78:af:63:27:97:00:43:e3:1c:3e:3f:b9:0e:aa:a5:
                    3a:2b:1a:ea:99:29:d7:38:a4:2a:52:17:f9:f9:d2:
                    c1:90:7e:e0:8f:bf:dd:78:40:bc:0c:28:3b:12:be:
                    78:c6:5e:03:81:d8:10:de:67:ee:19:2d:cc:47:88:
                    08:bd:46:85:3d:9a:fa:bb:04:4a:79:96:e7:83:24:
                    ba:b2:02:de:d1:82:8d:49:da:c3:99:03:4d:b4:ce:
                    97:8b:77:21:88:27:c1:09:e1:6c:30:84:c4:12:de:
                    15:fe:2a:8a:96:ca:e6:8b:b6:18:2d:eb:6d:56:86:
                    61:9a:8b:06:2d:c4:e5:00:97:39:e1:90:2f:c0:59:
                    99:8c:28:9b:db:55:83:e3:6e:a0:4e:6c:f0:cf:44:
                    48:2e:5a:09:f8:54:a2:fc:03:0b:c0:6d:fa:d3:6a:
                    20:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E4:22:86:C3:83:93:80:73:AE:27:F3:53:95:73:F5:42:D1:EA:A3
            X509v3 Authority Key Identifier:
                keyid:BE:65:7C:C7:F6:A7:1A:81:0C:6B:52:5E:1A:4C:72:B9:CB:D4:D6:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFBCB/CBC363D8FDBC11F0B93A5F71676F56BC/vmV8x_anGoEMa1JeGkxyucvU1u0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vmV8x_anGoEMa1JeGkxyucvU1u0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFBCB/CBC363D8FDBC11F0B93A5F71676F56BC/vmV8x_anGoEMa1JeGkxyucvU1u0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:7d:15:88:c0:03:fa:fe:3f:92:41:0c:26:8a:df:8c:93:9f:
         89:54:49:98:df:63:f6:1a:23:8a:36:ae:cd:33:2e:5c:9b:0f:
         b0:0d:82:e6:90:6d:94:02:2f:f8:18:2b:34:4b:cc:a9:77:2f:
         b3:91:17:cc:55:a0:e4:4a:b2:29:ca:f3:54:a0:76:37:d2:af:
         c1:7f:17:c9:70:b8:a7:47:dc:3a:c8:93:a8:4b:60:2c:5f:b9:
         14:ec:e6:34:e3:11:e7:d7:eb:1a:b0:33:b4:3a:3b:df:f7:7b:
         73:c6:f6:db:9a:82:a9:ed:e4:4d:aa:2b:4f:e3:e1:1a:38:0e:
         b4:53:4d:12:c8:11:14:fe:b7:93:72:43:47:2d:d7:ce:16:cc:
         eb:10:6b:2b:a6:7f:5e:c1:5e:2c:97:ac:86:2a:a6:b9:b6:eb:
         eb:04:c5:e5:cb:f5:8c:ed:41:6a:60:8e:35:e2:96:4e:3a:86:
         06:83:e9:a0:3a:ba:30:c6:c0:5e:89:d9:2b:b6:d1:81:a0:1e:
         9c:92:68:46:fd:2a:f5:76:6b:17:8a:ee:e3:17:86:c4:88:8d:
         c6:92:9d:54:0c:82:91:0a:9b:48:2c:99:20:4e:3d:54:43:f9:
         3e:6d:aa:2e:3a:5f:db:a0:ce:88:62:ac:42:2a:77:d6:e6:d7:
         e4:b5:40:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 00:06:10 2026 by rpki-client