Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFBCB/CBC363D8FDBC11F0B93A5F71676F56BC/vmV8x_anGoEMa1JeGkxyucvU1u0.mft
File:                     vmV8x_anGoEMa1JeGkxyucvU1u0.mft (raw, json)
Hash identifier:          9+/7O4GIgQt14Qk3w8K8xXa4405vXbO/9HuGH03E82Q=
Subject key identifier:   C0:FF:50:75:5C:6A:9E:FB:FC:5D:C2:99:68:C4:EB:80:DB:B8:51:15
Authority key identifier: BE:65:7C:C7:F6:A7:1A:81:0C:6B:52:5E:1A:4C:72:B9:CB:D4:D6:ED
Certificate issuer:       /CN=A91CFBCB/serialNumber=BE657CC7F6A71A810C6B525E1A4C72B9CBD4D6ED
Certificate serial:       61
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vmV8x_anGoEMa1JeGkxyucvU1u0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFBCB/CBC363D8FDBC11F0B93A5F71676F56BC/vmV8x_anGoEMa1JeGkxyucvU1u0.mft
Manifest number:          5E
Signing time:             Tue 21 Jul 2026 09:59:31 +0000
Manifest this update:     Tue 21 Jul 2026 09:59:30 +0000
Manifest next update:     Tue 28 Jul 2026 09:59:30 +0000
Files and hashes:         1: vmV8x_anGoEMa1JeGkxyucvU1u0.crl (hash: yQCfs58Uztk+QGsiIt8RRYr8PcNLn4jNseonm/0R5PI=)
                          2: 2FA448EAFDBD11F083E9CE8F676F56BC.roa (hash: RcZ+8Tgkr/98lt0nqg0mgsZ2FAFTLU/F6UQiIHa5elE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFBCB/CBC363D8FDBC11F0B93A5F71676F56BC/vmV8x_anGoEMa1JeGkxyucvU1u0.crl
                          rsync://rpki.apnic.net/member_repository/A91CFBCB/CBC363D8FDBC11F0B93A5F71676F56BC/vmV8x_anGoEMa1JeGkxyucvU1u0.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vmV8x_anGoEMa1JeGkxyucvU1u0.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 09:59:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97 (0x61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFBCB, serialNumber=BE657CC7F6A71A810C6B525E1A4C72B9CBD4D6ED
        Validity
            Not Before: Jul 21 09:59:30 2026 GMT
            Not After : Jul 28 09:59:30 2026 GMT
        Subject: CN=6a5f4303-a5f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:19:d4:cb:34:95:df:80:2e:fa:7b:19:a1:8d:
                    ce:79:45:6e:1e:5a:09:b9:ac:ae:d4:b3:b2:d9:26:
                    94:79:69:dd:5e:2d:5d:85:b8:c4:9e:50:39:29:66:
                    d6:7d:55:34:a0:32:91:d1:be:50:27:35:ba:9f:0b:
                    52:cf:6a:71:b0:44:ff:cf:e7:f0:f2:f8:ec:30:22:
                    4c:a4:c1:9d:52:ba:fc:75:74:b5:81:7a:97:32:1a:
                    82:81:bf:ad:0f:2f:96:f7:3a:62:7f:74:83:98:9b:
                    07:e4:41:e0:bb:4a:79:22:77:cf:ce:de:12:d2:df:
                    ed:d6:70:f7:c8:86:61:d0:d0:2c:41:f3:25:0f:5d:
                    61:cd:c8:73:84:79:55:ca:24:b4:59:1b:ea:91:85:
                    a1:e9:6a:57:16:fc:08:89:2c:24:78:23:80:25:ab:
                    b3:ec:e7:cf:25:a6:d7:5f:bd:2d:18:ed:c3:97:01:
                    90:d2:40:61:54:7c:a0:a6:d6:ea:d5:e0:c8:11:92:
                    55:28:30:2f:f5:20:c1:37:31:9d:22:ce:b6:3e:f4:
                    f6:80:47:5d:93:7e:4a:fa:84:6e:cc:39:9f:39:f6:
                    d0:0b:8f:b4:18:67:dd:66:75:2f:91:3b:8d:46:62:
                    2c:b6:62:04:a7:05:9d:72:d7:b0:e0:97:23:22:17:
                    7a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:FF:50:75:5C:6A:9E:FB:FC:5D:C2:99:68:C4:EB:80:DB:B8:51:15
            X509v3 Authority Key Identifier:
                keyid:BE:65:7C:C7:F6:A7:1A:81:0C:6B:52:5E:1A:4C:72:B9:CB:D4:D6:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFBCB/CBC363D8FDBC11F0B93A5F71676F56BC/vmV8x_anGoEMa1JeGkxyucvU1u0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vmV8x_anGoEMa1JeGkxyucvU1u0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFBCB/CBC363D8FDBC11F0B93A5F71676F56BC/vmV8x_anGoEMa1JeGkxyucvU1u0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:17:5c:37:e7:c9:ab:cd:75:85:a1:53:c9:f0:47:c2:c6:59:
         23:b5:d1:d9:e3:46:dc:4a:cc:e0:3f:12:cd:1d:33:67:69:13:
         c9:76:10:b1:1d:a0:2b:31:5b:c2:91:d5:a6:1a:c5:c8:8f:ef:
         2a:1d:54:e7:1e:40:c5:72:f8:e9:e4:73:47:f7:da:f8:e2:47:
         e1:43:5f:c3:52:4d:07:95:77:36:bd:fe:a8:59:bb:18:b6:46:
         45:02:1a:ec:ef:f5:68:ae:54:de:d5:9c:5e:6f:18:31:f5:20:
         af:3a:41:6b:01:7f:e8:1b:2d:69:25:22:7b:d9:72:d4:d7:0f:
         27:28:81:d1:cc:b1:5b:14:55:fe:4a:7f:f0:a0:99:83:8f:7c:
         a0:72:2b:38:68:eb:ce:fe:3e:8d:30:bf:7b:12:b5:da:39:83:
         2a:76:13:e1:ac:41:dc:ea:c1:2c:b3:56:cb:cb:c0:ba:d7:68:
         de:68:05:10:20:b0:33:ba:b4:33:64:3d:e0:6e:f4:76:d8:7c:
         84:15:a2:6c:d8:46:85:44:b2:f4:7a:df:79:24:77:80:73:9e:
         43:47:38:cd:c1:09:95:e4:ed:08:8b:fb:19:7b:10:de:d0:f9:
         4b:c3:9a:3b:e4:e3:f1:78:3c:7b:e8:07:b6:b0:c2:cc:83:b2:
         1c:46:90:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:50:38 2026 by rpki-client