Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7836/074F396E801611F18A76BD785BA30FBC/VSG7pLlnmYQnwoK61rZvfm22twc.mft
File:                     VSG7pLlnmYQnwoK61rZvfm22twc.mft (raw, json)
Hash identifier:          nBlgty6N2U4NG99eo/gxRFtiW1pWVcbCw+7FnBI05b8=
Subject key identifier:   96:E6:FF:B6:B7:FB:09:95:90:0A:6E:BD:17:A7:80:91:FC:13:50:C7
Authority key identifier: 55:21:BB:A4:B9:67:99:84:27:C2:82:BA:D6:B6:6F:7E:6D:B6:B7:07
Certificate issuer:       /CN=A91C7836/serialNumber=5521BBA4B967998427C282BAD6B66F7E6DB6B707
Certificate serial:       38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VSG7pLlnmYQnwoK61rZvfm22twc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7836/074F396E801611F18A76BD785BA30FBC/VSG7pLlnmYQnwoK61rZvfm22twc.mft
Manifest number:          37
Signing time:             Sun 25 Oct 2026 08:58:28 +0000
Manifest this update:     Sun 25 Oct 2026 08:58:28 +0000
Manifest next update:     Sun 01 Nov 2026 08:58:28 +0000
Files and hashes:         1: VSG7pLlnmYQnwoK61rZvfm22twc.crl (hash: UQxwWAjMoHwAyazHQ7nindZw+TYYQ2vm9Ec92wAzvMM=)
                          2: 33A082DA948D11F1A5BE36406611F970.roa (hash: Zrbzfz5Z2TeRzK/kWg662lvjXfu9AESyGMfzdvdsjVE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7836/074F396E801611F18A76BD785BA30FBC/VSG7pLlnmYQnwoK61rZvfm22twc.crl
                          rsync://rpki.apnic.net/member_repository/A91C7836/074F396E801611F18A76BD785BA30FBC/VSG7pLlnmYQnwoK61rZvfm22twc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VSG7pLlnmYQnwoK61rZvfm22twc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Nov 2026 08:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7836, serialNumber=5521BBA4B967998427C282BAD6B66F7E6DB6B707
        Validity
            Not Before: Oct 25 08:58:28 2026 GMT
            Not After : Nov  1 08:58:28 2026 GMT
        Subject: CN=6addc4b4-efed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:82:2d:e0:17:47:60:4a:69:56:ac:60:b6:cf:
                    c4:d9:7f:c7:38:d6:c3:71:6e:c4:5c:bb:60:b6:ee:
                    ff:a7:29:d1:01:b9:68:d3:01:e8:c6:df:ca:38:01:
                    f6:3f:2d:7e:09:4c:78:37:d1:05:7c:7c:25:ab:a2:
                    a2:bb:14:fa:ad:fb:c5:8d:d1:6e:8f:5c:ba:cf:0c:
                    7e:ca:83:00:ca:cd:de:94:52:da:79:14:9b:02:03:
                    dc:7e:a7:7c:4a:17:28:39:9a:10:4e:41:e8:62:56:
                    35:79:24:53:d0:c6:2f:56:67:90:84:a4:1c:24:53:
                    3d:14:b8:d3:18:6c:76:a6:da:47:08:f0:21:54:4b:
                    d5:60:47:3a:cb:24:54:fa:45:b8:7c:74:77:41:10:
                    35:b4:30:ad:18:30:7d:c4:f1:d4:9f:57:90:53:7c:
                    c4:61:67:18:f6:02:0c:4c:d6:55:29:85:7b:27:16:
                    b3:fa:30:35:b1:3c:c4:86:27:c2:97:a0:eb:da:8e:
                    ec:ad:59:64:cb:2a:03:96:68:c0:c2:01:d9:34:49:
                    b3:e5:b2:ab:6f:65:6a:8c:79:d3:1d:ec:66:3a:9d:
                    d7:e1:a2:39:78:6c:cb:cf:79:c3:2a:43:2f:9f:6f:
                    a2:43:a4:ce:87:bc:9c:d1:cf:49:94:fb:77:3a:38:
                    da:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:E6:FF:B6:B7:FB:09:95:90:0A:6E:BD:17:A7:80:91:FC:13:50:C7
            X509v3 Authority Key Identifier:
                keyid:55:21:BB:A4:B9:67:99:84:27:C2:82:BA:D6:B6:6F:7E:6D:B6:B7:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7836/074F396E801611F18A76BD785BA30FBC/VSG7pLlnmYQnwoK61rZvfm22twc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VSG7pLlnmYQnwoK61rZvfm22twc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7836/074F396E801611F18A76BD785BA30FBC/VSG7pLlnmYQnwoK61rZvfm22twc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:a5:8c:db:b3:31:f3:ae:23:21:d1:09:53:38:09:c8:da:6d:
         b2:f2:bf:76:2a:52:c9:68:0d:47:b1:81:11:f0:58:5a:15:4e:
         03:af:71:32:c4:47:9b:ad:f3:6c:a4:b0:88:29:63:26:94:ef:
         28:09:b1:63:1e:ab:6c:ca:56:3e:29:66:1b:a2:0b:c1:2e:37:
         f9:ed:6b:27:b3:a9:f0:70:30:92:d1:f8:24:ea:4f:c0:d8:f3:
         a8:4d:61:4f:2c:17:89:85:0d:71:a1:07:c0:62:3c:46:2c:ba:
         68:e7:7b:44:91:66:4a:82:c0:09:e0:bd:98:6f:2f:8e:f8:9b:
         58:df:76:5a:25:87:93:51:70:d1:e5:5c:d4:76:39:20:cd:32:
         f4:1f:53:38:bc:22:d6:76:29:f9:84:ce:f3:7d:d5:55:2a:45:
         8a:44:00:4d:8a:f3:fd:91:e7:e5:5b:a4:bc:d2:89:74:dd:9f:
         1f:e8:1b:f7:4a:1c:ed:c7:b9:95:e7:59:75:7c:33:bb:b5:b4:
         99:a1:5a:09:80:4a:1a:13:0a:26:3b:d6:37:02:8f:3b:42:25:
         62:4c:4c:f2:e5:70:95:cd:9b:83:cc:8d:79:59:a5:50:30:55:
         00:77:59:13:6c:69:25:73:87:91:c6:7c:ea:2d:80:32:7e:83:
         2c:45:b7:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 07:36:24 2026 by rpki-client