Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CFBCB/CBC363D8FDBC11F0B93A5F71676F56BC/vmV8x_anGoEMa1JeGkxyucvU1u0.mft
File:                     vmV8x_anGoEMa1JeGkxyucvU1u0.mft (raw, json)
Hash identifier:          JSRZJuU2gyZghvYsDA9z+1kAUMyUvj5Y4zo5fV7V0Yw=
Subject key identifier:   19:EB:62:8A:CA:8B:EF:42:32:89:36:36:F0:D6:AF:3B:F1:3D:F3:68
Authority key identifier: BE:65:7C:C7:F6:A7:1A:81:0C:6B:52:5E:1A:4C:72:B9:CB:D4:D6:ED
Certificate issuer:       /CN=A91CFBCB/serialNumber=BE657CC7F6A71A810C6B525E1A4C72B9CBD4D6ED
Certificate serial:       78
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vmV8x_anGoEMa1JeGkxyucvU1u0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFBCB/CBC363D8FDBC11F0B93A5F71676F56BC/vmV8x_anGoEMa1JeGkxyucvU1u0.mft
Manifest number:          75
Signing time:             Thu 03 Sep 2026 08:06:59 +0000
Manifest this update:     Thu 03 Sep 2026 08:06:58 +0000
Manifest next update:     Thu 10 Sep 2026 08:06:58 +0000
Files and hashes:         1: vmV8x_anGoEMa1JeGkxyucvU1u0.crl (hash: WVys/y/ZrhjFFE6eBFNND1qhn/CFl18236izJTC4//8=)
                          2: 2FA448EAFDBD11F083E9CE8F676F56BC.roa (hash: RcZ+8Tgkr/98lt0nqg0mgsZ2FAFTLU/F6UQiIHa5elE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFBCB/CBC363D8FDBC11F0B93A5F71676F56BC/vmV8x_anGoEMa1JeGkxyucvU1u0.crl
                          rsync://rpki.apnic.net/member_repository/A91CFBCB/CBC363D8FDBC11F0B93A5F71676F56BC/vmV8x_anGoEMa1JeGkxyucvU1u0.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vmV8x_anGoEMa1JeGkxyucvU1u0.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 08:06:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120 (0x78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFBCB, serialNumber=BE657CC7F6A71A810C6B525E1A4C72B9CBD4D6ED
        Validity
            Not Before: Sep  3 08:06:58 2026 GMT
            Not After : Sep 10 08:06:58 2026 GMT
        Subject: CN=6a992aa3-4687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:da:1d:f7:80:1e:da:6f:2c:a7:13:06:79:4a:
                    40:72:15:4a:ed:60:47:35:a1:21:13:96:54:74:18:
                    45:db:f3:18:27:e1:c4:9d:02:67:d0:76:20:71:56:
                    82:11:2a:d9:54:76:28:80:f0:6f:ce:f1:6e:00:2b:
                    2e:86:e6:31:80:5b:b2:cf:53:d9:d5:e7:e4:74:2d:
                    7e:d6:be:fb:3d:2c:5d:9d:ef:7c:32:a5:e5:1b:7b:
                    ce:6b:b5:05:42:44:47:d1:d2:f9:cd:db:13:34:39:
                    88:f6:65:e3:80:dd:6b:6b:9e:09:1c:ef:eb:d9:86:
                    b2:3f:7c:6a:d8:7a:8a:06:b2:d2:09:3e:27:d8:cc:
                    76:34:e6:8e:2a:c8:2a:d6:8a:46:b2:cf:5e:9d:6e:
                    6f:9b:63:37:dd:73:5c:6f:6d:dd:b6:cb:40:6c:37:
                    df:17:93:8e:f5:21:9a:03:3b:79:7f:f1:1c:c0:e6:
                    71:9f:0b:fa:04:c5:d1:b5:14:e8:dc:bd:60:34:48:
                    f0:fe:c9:c1:4f:fc:79:94:d7:0a:da:f4:1d:58:e8:
                    f5:36:94:60:67:e5:7a:85:07:15:aa:8c:30:9e:b2:
                    02:1a:85:20:f0:6a:7a:2d:d7:c4:d7:f3:12:6e:2f:
                    9c:9e:ba:fc:83:b6:7e:4e:f3:1f:a0:63:3e:b2:d3:
                    a8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:EB:62:8A:CA:8B:EF:42:32:89:36:36:F0:D6:AF:3B:F1:3D:F3:68
            X509v3 Authority Key Identifier:
                keyid:BE:65:7C:C7:F6:A7:1A:81:0C:6B:52:5E:1A:4C:72:B9:CB:D4:D6:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFBCB/CBC363D8FDBC11F0B93A5F71676F56BC/vmV8x_anGoEMa1JeGkxyucvU1u0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vmV8x_anGoEMa1JeGkxyucvU1u0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFBCB/CBC363D8FDBC11F0B93A5F71676F56BC/vmV8x_anGoEMa1JeGkxyucvU1u0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:54:c7:99:a5:f3:30:d9:f5:6b:78:ba:d6:08:d7:23:cf:96:
         f3:5f:10:70:ca:55:67:c8:bc:e4:a9:ad:11:6f:04:9b:8c:de:
         26:1f:e2:54:7c:cb:e1:f5:9b:c1:60:66:04:25:f7:07:33:50:
         67:bf:9d:6e:8e:b1:e3:dd:a0:1b:de:21:9d:a6:fc:e6:ae:46:
         ed:3b:d3:df:8c:ec:62:ac:c7:bd:59:8f:a2:79:62:b5:b8:1e:
         c3:75:95:db:59:21:72:69:22:70:ea:2c:21:8f:8f:f2:bb:af:
         09:3c:8e:01:0f:05:28:be:54:0b:17:a4:08:ab:81:ef:b2:e4:
         c7:68:84:d2:98:96:cf:23:6e:2c:8e:5e:1c:5f:14:82:90:5f:
         99:fc:3a:62:d4:07:40:ac:5b:5e:6f:9c:1e:da:33:64:34:03:
         eb:1b:21:93:5d:ed:14:bf:31:e3:b7:19:88:d0:d7:9a:33:f5:
         e5:88:42:77:40:ea:ec:ee:36:21:b2:75:55:2e:98:80:5b:5c:
         7f:4d:d3:52:8f:65:85:4b:ac:9d:3e:c9:a1:20:72:ce:de:49:
         bf:f9:49:d5:c6:0d:c2:7d:e4:cf:82:93:3a:65:16:91:ff:18:
         2c:9e:3f:11:99:1a:72:4f:05:c2:e1:a6:87:58:2a:23:4e:e7:
         de:8e:9a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:27:09 2026 by rpki-client