Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CFBCB/CBC363D8FDBC11F0B93A5F71676F56BC/vmV8x_anGoEMa1JeGkxyucvU1u0.mft
File:                     vmV8x_anGoEMa1JeGkxyucvU1u0.mft (raw, json)
Hash identifier:          AhtqhmrA7bpaG0xCO4y313CF60mVVFh7qUs2hAf9Ho4=
Subject key identifier:   32:2A:10:1D:7A:77:98:AF:F2:CA:CE:B7:88:DB:E5:62:59:07:18:91
Authority key identifier: BE:65:7C:C7:F6:A7:1A:81:0C:6B:52:5E:1A:4C:72:B9:CB:D4:D6:ED
Certificate issuer:       /CN=A91CFBCB/serialNumber=BE657CC7F6A71A810C6B525E1A4C72B9CBD4D6ED
Certificate serial:       82
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vmV8x_anGoEMa1JeGkxyucvU1u0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFBCB/CBC363D8FDBC11F0B93A5F71676F56BC/vmV8x_anGoEMa1JeGkxyucvU1u0.mft
Manifest number:          7F
Signing time:             Wed 23 Sep 2026 07:31:04 +0000
Manifest this update:     Wed 23 Sep 2026 07:31:03 +0000
Manifest next update:     Wed 30 Sep 2026 07:31:03 +0000
Files and hashes:         1: vmV8x_anGoEMa1JeGkxyucvU1u0.crl (hash: aV2zOJwDpIElN16ODlIi8whet9CmVwNjJWbfjqiF41o=)
                          2: 2FA448EAFDBD11F083E9CE8F676F56BC.roa (hash: RcZ+8Tgkr/98lt0nqg0mgsZ2FAFTLU/F6UQiIHa5elE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFBCB/CBC363D8FDBC11F0B93A5F71676F56BC/vmV8x_anGoEMa1JeGkxyucvU1u0.crl
                          rsync://rpki.apnic.net/member_repository/A91CFBCB/CBC363D8FDBC11F0B93A5F71676F56BC/vmV8x_anGoEMa1JeGkxyucvU1u0.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vmV8x_anGoEMa1JeGkxyucvU1u0.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 07:31:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130 (0x82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFBCB, serialNumber=BE657CC7F6A71A810C6B525E1A4C72B9CBD4D6ED
        Validity
            Not Before: Sep 23 07:31:03 2026 GMT
            Not After : Sep 30 07:31:03 2026 GMT
        Subject: CN=6ab38038-17ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:91:05:5f:34:07:6e:ac:13:3f:49:0d:2b:0a:
                    d3:d1:11:c6:3e:31:bf:1a:d1:ea:71:5f:3b:be:73:
                    6c:74:e8:91:ac:63:43:8a:98:eb:77:1c:5d:2f:8b:
                    cb:b9:05:23:86:64:f9:b6:68:31:12:9d:cf:8e:cd:
                    19:1a:08:51:c0:11:b3:ea:6f:cb:36:73:b7:cb:cd:
                    3a:1a:4a:43:f3:55:95:ae:bd:7a:14:24:d3:5e:f4:
                    27:04:fe:e6:93:5d:18:59:b6:5b:fb:03:ca:89:a3:
                    01:7d:81:cf:02:c7:27:15:dd:3f:52:9f:f5:bf:09:
                    a7:83:cd:98:3e:67:75:43:57:78:14:5d:ca:54:50:
                    fc:99:60:89:0d:b0:56:32:d9:9f:82:a8:f1:b7:a1:
                    bd:c1:0b:c1:7a:1c:f4:2d:96:33:96:8a:fa:0f:61:
                    85:59:e1:a5:e7:6d:40:be:38:96:a5:cb:fe:fb:68:
                    43:53:b3:38:8a:5f:0a:b3:b3:69:bb:05:e6:20:51:
                    94:6c:77:7c:15:28:30:7d:72:1d:a8:38:46:53:9f:
                    c7:3e:ac:11:f8:88:9b:9d:79:95:c4:4f:57:ca:3c:
                    32:7b:92:1b:9a:d0:95:77:9d:64:fd:56:de:8f:b3:
                    b9:c5:09:98:d5:6f:ae:0d:b1:00:d5:e8:b5:8a:26:
                    66:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:2A:10:1D:7A:77:98:AF:F2:CA:CE:B7:88:DB:E5:62:59:07:18:91
            X509v3 Authority Key Identifier:
                keyid:BE:65:7C:C7:F6:A7:1A:81:0C:6B:52:5E:1A:4C:72:B9:CB:D4:D6:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFBCB/CBC363D8FDBC11F0B93A5F71676F56BC/vmV8x_anGoEMa1JeGkxyucvU1u0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vmV8x_anGoEMa1JeGkxyucvU1u0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFBCB/CBC363D8FDBC11F0B93A5F71676F56BC/vmV8x_anGoEMa1JeGkxyucvU1u0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:f0:b0:fd:5d:17:5d:f0:c2:01:95:04:e2:4d:69:22:a2:a6:
         ea:2e:4b:89:a4:8c:c2:eb:92:9d:1a:7f:be:f0:ae:57:29:27:
         d1:b7:f6:38:e1:b7:31:4f:ea:17:cf:4c:e4:2f:63:f5:46:46:
         d9:99:09:35:87:b4:97:8c:44:6a:a1:ca:d2:63:52:68:d1:c6:
         5a:d0:4d:f2:fa:a6:4a:fc:7e:c0:29:18:a5:50:e3:ac:bb:d1:
         ff:50:6c:42:9b:4a:a7:d2:fc:79:d6:93:0d:9c:fc:2a:43:16:
         fa:53:6e:7a:04:88:ad:30:4a:86:1c:04:3a:4d:f4:d7:56:56:
         c8:bf:b7:2b:62:39:13:b6:53:d7:61:27:51:b5:b6:8c:4d:46:
         84:1f:6c:61:0f:97:cf:2e:49:4b:38:a8:42:25:19:15:43:d8:
         5e:71:f5:18:87:ff:05:07:01:b4:72:11:e7:c3:1f:43:8c:2f:
         46:6b:c5:51:66:ed:c9:50:59:ae:60:8b:c2:08:18:8d:c1:36:
         90:12:21:2d:d6:ba:1c:ff:13:07:1c:d0:a0:e7:50:a4:b2:09:
         04:d7:1d:64:87:9d:7c:8e:3c:06:66:31:ad:d1:f8:35:2c:80:
         68:31:b2:15:41:d7:ea:86:3d:34:af:5b:e6:b6:01:64:64:e7:
         bb:4f:66:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:43:48 2026 by rpki-client