Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft
File:                     8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft (raw, json)
Hash identifier:          C4Mc70BJJEKBgQrGkstIrPJABbJJZAjByb0GHNdQFHE=
Subject key identifier:   DF:63:26:32:1C:28:48:03:8E:16:0E:B1:84:B3:AF:96:2F:12:C3:E8
Authority key identifier: F1:59:AC:04:B5:B8:93:79:05:E6:9D:1B:F2:5F:4D:53:B3:54:5C:97
Certificate issuer:       /CN=A91DC8F3/serialNumber=F159AC04B5B8937905E69D1BF25F4D53B3545C97
Certificate serial:       084A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VmsBLW4k3kF5p0b8l9NU7NUXJc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft
Manifest number:          083E
Signing time:             Sat 14 Nov 2026 20:58:27 +0000
Manifest this update:     Sat 14 Nov 2026 20:58:26 +0000
Manifest next update:     Sat 21 Nov 2026 20:58:26 +0000
Files and hashes:         1: 8VmsBLW4k3kF5p0b8l9NU7NUXJc.crl (hash: xOvWppZECr1Pxqc3UJ7JUUx2bR42j910F07wFk3nHuQ=)
                          2: ADE3F5B635D611EB8466D634C4F9AE02.roa (hash: vYMmHvHFJOFq0uMQC5KcOS3qLta0AmHawAY34Z2J+Lc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.crl
                          rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VmsBLW4k3kF5p0b8l9NU7NUXJc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 14:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2122 (0x84a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC8F3, serialNumber=F159AC04B5B8937905E69D1BF25F4D53B3545C97
        Validity
            Not Before: Nov 14 20:58:26 2026 GMT
            Not After : Nov 21 20:58:26 2026 GMT
        Subject: CN=6af8cb73-26e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4f:ba:7a:61:32:8c:4d:cd:bd:16:58:db:2f:
                    40:1c:b4:4e:66:fd:e4:f8:81:56:a6:cc:1f:4d:b4:
                    b6:e7:f0:fa:85:02:bf:96:c3:de:39:3c:22:de:ec:
                    e3:ed:ad:b7:67:9c:d3:46:57:84:43:8f:f1:15:2e:
                    42:ca:69:02:48:aa:80:fb:9b:92:e8:ec:55:a8:97:
                    51:46:b2:fe:ba:ad:e9:9f:0f:26:ac:90:3e:cc:5d:
                    02:f2:3c:d9:6f:f2:71:e7:86:2f:84:6b:6b:01:dd:
                    a3:13:84:5b:55:bb:c2:97:55:6d:cb:b1:50:7d:0e:
                    ff:4a:22:0d:f5:b8:29:29:f9:82:76:6a:cc:39:32:
                    fa:db:38:69:c7:50:1d:02:a8:4d:44:d5:f9:00:94:
                    2d:6c:d6:be:82:7c:eb:25:e9:8e:17:35:3c:b1:03:
                    15:b1:06:22:d8:78:7a:9c:c0:c2:bf:ca:ea:82:cb:
                    87:d2:dd:57:09:8e:30:d4:1e:6c:c1:3b:df:5a:4f:
                    50:93:11:d6:4c:f4:35:ed:d9:cb:89:47:61:44:d2:
                    5f:11:9f:77:a1:8f:51:c5:8c:34:97:ce:53:d0:ca:
                    75:41:18:7d:ba:65:7c:91:e2:6c:7d:7e:8f:59:34:
                    a4:ef:01:16:4d:f1:82:20:9f:95:70:f3:5f:ab:67:
                    3e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:63:26:32:1C:28:48:03:8E:16:0E:B1:84:B3:AF:96:2F:12:C3:E8
            X509v3 Authority Key Identifier:
                keyid:F1:59:AC:04:B5:B8:93:79:05:E6:9D:1B:F2:5F:4D:53:B3:54:5C:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VmsBLW4k3kF5p0b8l9NU7NUXJc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:78:0a:0d:51:cd:20:f1:1c:f6:dd:ea:ac:74:c9:2a:ca:00:
         f3:a0:56:b0:40:95:94:9f:49:cc:8e:57:47:d3:85:a0:be:18:
         5b:75:a4:10:0e:a3:89:9f:5f:0b:2f:aa:8c:1f:13:41:00:99:
         e3:1d:96:cc:e9:c8:4a:bd:f4:f5:c6:c6:7b:1e:56:53:09:e8:
         63:24:c8:ae:07:a1:10:07:40:74:14:27:cc:6c:96:60:7c:5e:
         18:0a:6b:e7:2e:61:57:f1:ff:8e:b7:57:95:93:c3:88:00:98:
         3f:05:11:24:c9:50:d1:d7:a2:67:57:9e:5a:f5:13:98:06:72:
         82:b8:03:c9:a6:d8:f8:10:40:93:d3:eb:ab:28:49:4b:00:ac:
         f1:fe:e3:e6:3f:aa:00:ed:d7:4f:0a:7e:db:14:4c:e9:74:52:
         14:1b:c1:d6:fc:3a:84:89:46:eb:c2:8b:7f:85:b6:7c:70:ea:
         37:6c:b9:c0:62:b6:96:c0:1f:07:e4:3b:d8:91:53:c9:c9:08:
         10:c6:75:20:26:96:ca:80:d3:eb:37:cd:8f:e0:af:42:6b:7a:
         1f:03:83:b8:46:15:4d:55:5a:34:05:05:28:70:fe:1a:10:a4:
         1c:b4:9b:31:88:14:ad:f4:23:4c:22:a4:6a:78:1f:41:cc:09:
         82:42:89:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 06:32:33 2026 by rpki-client