Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFBCB/CBC363D8FDBC11F0B93A5F71676F56BC/vmV8x_anGoEMa1JeGkxyucvU1u0.mft
File:                     vmV8x_anGoEMa1JeGkxyucvU1u0.mft (raw, json)
Hash identifier:          vXxCplrP9G/GkbInzf00EvsumaIOtwRvpvNyhqYH10M=
Subject key identifier:   A0:E3:2A:F5:D8:F5:9A:03:92:53:CC:CB:3C:3F:E0:F6:60:7C:B4:FF
Authority key identifier: BE:65:7C:C7:F6:A7:1A:81:0C:6B:52:5E:1A:4C:72:B9:CB:D4:D6:ED
Certificate issuer:       /CN=A91CFBCB/serialNumber=BE657CC7F6A71A810C6B525E1A4C72B9CBD4D6ED
Certificate serial:       25
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vmV8x_anGoEMa1JeGkxyucvU1u0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFBCB/CBC363D8FDBC11F0B93A5F71676F56BC/vmV8x_anGoEMa1JeGkxyucvU1u0.mft
Manifest number:          22
Signing time:             Wed 25 Mar 2026 08:03:53 +0000
Manifest this update:     Wed 25 Mar 2026 08:03:53 +0000
Manifest next update:     Wed 01 Apr 2026 08:03:53 +0000
Files and hashes:         1: vmV8x_anGoEMa1JeGkxyucvU1u0.crl (hash: yhvI+O5sqdPACLQ4AVtLQCWMyREc2xzD3ZyvI3EJ5Dc=)
                          2: 2FA448EAFDBD11F083E9CE8F676F56BC.roa (hash: RcZ+8Tgkr/98lt0nqg0mgsZ2FAFTLU/F6UQiIHa5elE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFBCB/CBC363D8FDBC11F0B93A5F71676F56BC/vmV8x_anGoEMa1JeGkxyucvU1u0.crl
                          rsync://rpki.apnic.net/member_repository/A91CFBCB/CBC363D8FDBC11F0B93A5F71676F56BC/vmV8x_anGoEMa1JeGkxyucvU1u0.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vmV8x_anGoEMa1JeGkxyucvU1u0.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 08:03:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFBCB, serialNumber=BE657CC7F6A71A810C6B525E1A4C72B9CBD4D6ED
        Validity
            Not Before: Mar 25 08:03:53 2026 GMT
            Not After : Apr  1 08:03:53 2026 GMT
        Subject: CN=69c396e9-71ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:65:d1:51:80:1f:54:98:09:44:e7:df:e2:3e:
                    5b:32:51:05:29:58:51:db:16:38:1b:3d:71:b0:b0:
                    d1:5f:d3:ed:84:f2:09:98:b0:ce:49:fe:89:d9:01:
                    22:76:fc:54:15:44:b2:c2:26:9e:1e:c3:84:7e:3a:
                    d7:04:33:6e:af:9d:f5:70:dd:fe:13:9e:67:53:f8:
                    4c:e4:9f:01:83:0a:ef:1d:a0:ba:3e:71:da:14:a3:
                    74:17:40:96:8c:3c:76:49:a9:46:66:73:cb:89:65:
                    3a:da:ae:0f:39:42:5c:2e:57:31:df:1c:02:72:23:
                    12:90:25:72:aa:f6:e2:0c:3a:e7:cc:e2:ec:52:6a:
                    8a:50:58:66:6d:06:9c:86:14:05:f8:54:b3:7e:91:
                    87:fb:88:b5:82:7b:50:3b:7c:d6:f7:23:2b:54:df:
                    db:5f:59:5e:57:c2:60:7c:67:be:89:dc:d8:d8:6d:
                    c9:84:28:31:48:b0:d4:ae:37:f9:55:26:bd:68:cb:
                    4e:c0:94:a7:d9:ca:f9:c4:f5:7a:1b:29:02:8c:2f:
                    66:46:d3:cd:d8:1b:df:14:25:3b:3e:83:b1:3e:e1:
                    72:aa:8d:b7:98:fd:2e:d0:33:a9:ea:74:de:bf:bc:
                    67:62:bb:fc:7a:b6:68:2a:55:ca:7a:be:ff:9c:df:
                    2d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:E3:2A:F5:D8:F5:9A:03:92:53:CC:CB:3C:3F:E0:F6:60:7C:B4:FF
            X509v3 Authority Key Identifier:
                keyid:BE:65:7C:C7:F6:A7:1A:81:0C:6B:52:5E:1A:4C:72:B9:CB:D4:D6:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFBCB/CBC363D8FDBC11F0B93A5F71676F56BC/vmV8x_anGoEMa1JeGkxyucvU1u0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vmV8x_anGoEMa1JeGkxyucvU1u0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFBCB/CBC363D8FDBC11F0B93A5F71676F56BC/vmV8x_anGoEMa1JeGkxyucvU1u0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:ec:9d:52:44:f8:a2:15:b3:93:c3:07:7c:44:76:d1:e4:cd:
         29:10:6d:f4:27:73:e7:91:19:ea:9c:4a:89:33:bc:77:7e:96:
         b6:b5:af:39:c3:af:03:6a:af:4d:03:a3:84:a3:b4:75:5a:ec:
         fe:54:00:7b:69:ad:c7:2c:c5:db:8b:c1:15:38:b2:52:1b:18:
         5a:bc:3e:7e:47:19:73:49:e6:b1:58:c5:bd:a4:b9:e5:53:cf:
         cf:7e:0e:fc:e9:9c:c8:3b:4e:20:48:60:ef:53:8f:42:89:6a:
         47:54:92:a7:7e:19:8f:a3:b0:c5:51:ec:cb:c9:49:4d:89:f9:
         21:d3:be:04:6f:81:7b:1a:56:b3:6d:74:2d:31:e2:2c:2a:95:
         ac:dd:7a:8b:b0:d9:82:77:5e:9f:91:5e:15:3f:4b:08:c6:cc:
         e6:e1:88:12:af:8e:e2:76:3f:87:a5:03:b1:57:b7:c0:d9:8d:
         de:e6:8a:46:06:d9:33:63:fe:d1:56:4a:e4:3e:20:88:86:ad:
         bd:8e:8d:b1:c4:bb:72:06:d6:cb:af:4b:2a:0c:ac:b7:bb:18:
         80:a7:31:9f:04:9a:f6:9c:7e:ea:05:10:8e:dd:b6:ce:76:1f:
         c4:ee:12:bb:cf:26:7b:72:d6:60:8c:52:8b:59:b8:98:be:0a:
         8d:26:c7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:58:20 2026 by rpki-client