Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CFBCB/CBC363D8FDBC11F0B93A5F71676F56BC/vmV8x_anGoEMa1JeGkxyucvU1u0.mft
File:                     vmV8x_anGoEMa1JeGkxyucvU1u0.mft (raw, json)
Hash identifier:          yD3DMgHpGA7TpwUJardr9nNHRD6UgNQZxYzf1HJr5ck=
Subject key identifier:   03:F4:27:42:58:AC:6B:E7:FD:E5:60:A0:45:99:4E:CA:58:53:A2:AC
Authority key identifier: BE:65:7C:C7:F6:A7:1A:81:0C:6B:52:5E:1A:4C:72:B9:CB:D4:D6:ED
Certificate issuer:       /CN=A91CFBCB/serialNumber=BE657CC7F6A71A810C6B525E1A4C72B9CBD4D6ED
Certificate serial:       9D
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vmV8x_anGoEMa1JeGkxyucvU1u0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFBCB/CBC363D8FDBC11F0B93A5F71676F56BC/vmV8x_anGoEMa1JeGkxyucvU1u0.mft
Manifest number:          9A
Signing time:             Sun 15 Nov 2026 07:38:12 +0000
Manifest this update:     Sun 15 Nov 2026 07:38:11 +0000
Manifest next update:     Sun 22 Nov 2026 07:38:11 +0000
Files and hashes:         1: vmV8x_anGoEMa1JeGkxyucvU1u0.crl (hash: JffG1N3OhDdUUkDbK0cp25VvIn5asn5ioODzsE6tkzg=)
                          2: 2FA448EAFDBD11F083E9CE8F676F56BC.roa (hash: RcZ+8Tgkr/98lt0nqg0mgsZ2FAFTLU/F6UQiIHa5elE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFBCB/CBC363D8FDBC11F0B93A5F71676F56BC/vmV8x_anGoEMa1JeGkxyucvU1u0.crl
                          rsync://rpki.apnic.net/member_repository/A91CFBCB/CBC363D8FDBC11F0B93A5F71676F56BC/vmV8x_anGoEMa1JeGkxyucvU1u0.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vmV8x_anGoEMa1JeGkxyucvU1u0.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 07:38:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 157 (0x9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFBCB, serialNumber=BE657CC7F6A71A810C6B525E1A4C72B9CBD4D6ED
        Validity
            Not Before: Nov 15 07:38:11 2026 GMT
            Not After : Nov 22 07:38:11 2026 GMT
        Subject: CN=6af96164-aed7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:02:26:5d:f1:41:56:fc:2d:b2:6b:22:79:8f:
                    3c:23:0a:1f:2a:f9:48:40:14:78:26:86:8c:00:84:
                    51:c3:cf:27:7c:5c:a2:bc:0f:c3:81:18:e1:aa:8a:
                    22:62:72:96:f2:18:df:b9:62:2d:3d:85:3e:a9:65:
                    f3:52:97:0d:fe:55:1f:d3:a6:3c:27:b2:25:ab:99:
                    74:a6:95:56:9a:b8:91:b5:af:52:1e:3d:8f:d7:9c:
                    b0:a1:ff:22:96:fc:88:bb:e2:3c:3f:eb:54:3b:bb:
                    33:54:13:ed:67:c9:a4:8b:fb:74:4a:3d:5a:f6:fe:
                    1f:18:77:ca:3a:2d:bc:c2:0c:3c:70:56:96:39:b8:
                    79:1a:6c:be:f2:0f:3a:9c:aa:d2:06:5c:db:de:aa:
                    ce:ce:fc:bd:b6:cd:2b:ea:61:ce:f6:92:a1:1b:9b:
                    18:8e:5b:46:2a:c3:6b:62:6a:c2:64:8c:68:2f:3d:
                    91:31:6c:38:50:1a:86:db:c1:89:42:35:25:d1:2e:
                    d5:1b:c0:81:ea:03:5c:0a:82:ed:92:fe:fe:6a:ad:
                    ce:1f:94:4a:ab:ec:55:7f:47:b3:3f:92:e9:94:94:
                    35:ef:e1:d5:87:f7:5b:8b:9e:e1:71:e7:ea:70:20:
                    5a:c2:b7:a1:31:c5:81:a5:b1:6e:05:ca:20:0a:4a:
                    64:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F4:27:42:58:AC:6B:E7:FD:E5:60:A0:45:99:4E:CA:58:53:A2:AC
            X509v3 Authority Key Identifier:
                keyid:BE:65:7C:C7:F6:A7:1A:81:0C:6B:52:5E:1A:4C:72:B9:CB:D4:D6:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFBCB/CBC363D8FDBC11F0B93A5F71676F56BC/vmV8x_anGoEMa1JeGkxyucvU1u0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vmV8x_anGoEMa1JeGkxyucvU1u0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFBCB/CBC363D8FDBC11F0B93A5F71676F56BC/vmV8x_anGoEMa1JeGkxyucvU1u0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:27:06:52:1e:f4:79:6c:9e:08:01:6c:7d:16:70:be:ac:05:
         5a:3b:0a:9b:17:3e:80:d3:cb:d8:3a:59:49:20:2f:83:1e:63:
         d0:0f:08:74:b3:59:62:cd:ae:b2:7d:aa:95:84:c3:66:45:30:
         de:28:a3:6a:fd:ec:b7:42:9e:37:26:c6:00:1f:0d:7b:eb:f0:
         de:db:35:a3:8b:ae:a8:6c:3d:64:05:61:ba:4c:eb:e1:80:2e:
         f1:4c:ca:4a:ce:22:65:16:d7:2e:56:5c:58:8b:d1:1e:45:dc:
         de:da:03:c0:10:09:f5:8c:74:c7:c7:2d:29:2f:2a:0a:cd:0e:
         e5:dc:c9:43:7a:c6:6f:bc:2c:66:6c:14:4c:cf:fe:93:a8:34:
         18:b5:28:a7:42:bc:cd:50:89:74:b8:b5:30:57:63:e4:95:b1:
         da:98:06:fd:fe:ad:e7:07:e8:69:5d:fd:2b:f3:42:11:90:70:
         a9:8e:2f:6f:ac:6a:b0:7a:38:1d:50:0f:2d:42:fb:2f:7f:58:
         b9:d9:16:fa:28:8e:33:98:3a:c1:e2:ad:f3:5d:a9:ec:2d:5a:
         c1:99:79:d5:ab:df:1c:d0:4c:1b:f2:96:1d:c1:34:19:14:d5:
         a5:fd:84:f4:c6:87:39:dc:f4:ec:6a:44:12:de:5b:ff:6d:a1:
         33:e5:65:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:22:30 2026 by rpki-client