Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFBCB/CBC363D8FDBC11F0B93A5F71676F56BC/vmV8x_anGoEMa1JeGkxyucvU1u0.mft
File:                     vmV8x_anGoEMa1JeGkxyucvU1u0.mft (raw, json)
Hash identifier:          jp/zO5DL1C0m5HFgI8NGSAlHj35BnoUIYkkUbdbFM3M=
Subject key identifier:   A2:0A:DB:3C:32:11:6C:28:5D:CC:FB:92:26:93:77:AE:E7:CA:C0:A2
Authority key identifier: BE:65:7C:C7:F6:A7:1A:81:0C:6B:52:5E:1A:4C:72:B9:CB:D4:D6:ED
Certificate issuer:       /CN=A91CFBCB/serialNumber=BE657CC7F6A71A810C6B525E1A4C72B9CBD4D6ED
Certificate serial:       4A
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vmV8x_anGoEMa1JeGkxyucvU1u0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFBCB/CBC363D8FDBC11F0B93A5F71676F56BC/vmV8x_anGoEMa1JeGkxyucvU1u0.mft
Manifest number:          47
Signing time:             Fri 05 Jun 2026 08:50:42 +0000
Manifest this update:     Fri 05 Jun 2026 08:50:41 +0000
Manifest next update:     Fri 12 Jun 2026 08:50:41 +0000
Files and hashes:         1: vmV8x_anGoEMa1JeGkxyucvU1u0.crl (hash: zqMtAGRcMfR98ym8RgAbvWb61/whIWbahe7t+L07jTM=)
                          2: 2FA448EAFDBD11F083E9CE8F676F56BC.roa (hash: RcZ+8Tgkr/98lt0nqg0mgsZ2FAFTLU/F6UQiIHa5elE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFBCB/CBC363D8FDBC11F0B93A5F71676F56BC/vmV8x_anGoEMa1JeGkxyucvU1u0.crl
                          rsync://rpki.apnic.net/member_repository/A91CFBCB/CBC363D8FDBC11F0B93A5F71676F56BC/vmV8x_anGoEMa1JeGkxyucvU1u0.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vmV8x_anGoEMa1JeGkxyucvU1u0.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 08:50:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74 (0x4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFBCB, serialNumber=BE657CC7F6A71A810C6B525E1A4C72B9CBD4D6ED
        Validity
            Not Before: Jun  5 08:50:41 2026 GMT
            Not After : Jun 12 08:50:41 2026 GMT
        Subject: CN=6a228de1-d3e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8d:95:9a:4b:ae:83:f8:ad:41:b5:d4:fc:e7:
                    b9:1e:ae:30:44:58:68:72:1f:ae:7d:eb:af:31:a8:
                    2e:50:b2:30:d4:ab:c4:3f:f6:fd:02:c9:2e:56:8f:
                    36:04:42:cb:53:20:05:4e:51:07:61:59:23:28:16:
                    b8:da:6e:91:28:8e:4f:8e:ee:59:6d:7e:c3:d1:47:
                    99:52:d4:4a:2a:2d:eb:f6:aa:4f:65:47:f4:11:59:
                    8f:26:66:7c:14:97:e8:1a:7b:01:a0:f0:ab:c4:8e:
                    8f:16:c3:7c:56:ed:4d:f5:eb:0d:49:49:ef:a4:5a:
                    86:2b:8d:6d:8f:b0:a2:7c:b8:77:24:41:35:7d:af:
                    85:43:c0:74:4c:c1:9b:6a:61:3a:73:0d:33:27:24:
                    cc:68:b5:09:2e:be:28:13:a3:de:c6:8a:cd:b4:1f:
                    71:56:b2:05:3c:99:52:ae:62:cc:82:e5:1e:ab:62:
                    d1:1f:67:72:ed:06:5f:12:c8:8c:98:c1:05:a2:eb:
                    c6:03:72:26:a6:93:55:87:9a:0b:2b:59:77:91:c0:
                    5b:5f:97:e2:e6:31:dd:0d:ff:87:fc:ea:86:96:8f:
                    44:d4:90:1a:f5:53:8f:85:98:24:23:14:79:68:41:
                    7e:44:80:22:4f:ac:04:ee:82:e9:48:6e:93:4b:bf:
                    54:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:0A:DB:3C:32:11:6C:28:5D:CC:FB:92:26:93:77:AE:E7:CA:C0:A2
            X509v3 Authority Key Identifier:
                keyid:BE:65:7C:C7:F6:A7:1A:81:0C:6B:52:5E:1A:4C:72:B9:CB:D4:D6:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFBCB/CBC363D8FDBC11F0B93A5F71676F56BC/vmV8x_anGoEMa1JeGkxyucvU1u0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vmV8x_anGoEMa1JeGkxyucvU1u0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFBCB/CBC363D8FDBC11F0B93A5F71676F56BC/vmV8x_anGoEMa1JeGkxyucvU1u0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:4e:53:e3:28:32:f3:6e:39:cb:7a:3c:63:0e:bc:50:bb:ee:
         e8:e2:b4:af:88:0e:56:3b:57:63:b8:fb:1f:72:6f:e1:b6:c1:
         76:c4:5d:f3:5f:cb:7f:5e:24:57:0f:03:22:74:53:4a:eb:b5:
         48:dc:36:4c:a3:52:b0:aa:11:e7:ce:76:2a:37:a7:22:f1:ee:
         d9:87:9e:e9:48:e5:89:07:2a:6d:c1:a9:90:46:cb:b4:26:14:
         62:02:23:e9:3e:d7:b8:83:1f:23:63:ad:1f:cd:c0:d8:d8:31:
         0c:c8:d5:2e:74:e6:da:ff:10:8e:6e:a1:f7:65:7f:48:89:e6:
         ef:2e:23:d1:04:68:4c:ee:e2:7b:07:db:b5:1a:bd:34:ac:ad:
         47:b5:8b:37:38:07:81:7e:6f:6e:7d:1a:0b:4f:75:9f:18:9d:
         7d:95:61:cb:b2:06:75:07:c6:ee:24:f2:14:65:a7:04:e6:df:
         9e:03:91:7a:c0:30:56:26:49:6a:c6:2a:e2:1a:8e:2d:67:ea:
         bd:ea:d2:be:5d:64:16:f8:50:e9:68:1f:32:d1:74:29:27:ec:
         35:cf:7c:75:11:e7:c9:a6:bc:8f:6c:29:67:20:1b:b6:21:63:
         9e:26:41:af:aa:88:e4:2e:e5:e6:41:0e:72:d9:e5:e6:15:fb:
         1d:41:f3:ad
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
RkJDQjExMC8GA1UEBRMoQkU2NTdDQzdGNkE3MUE4MTBDNkI1MjVFMUE0QzcyQjlD
QkQ0RDZFRDAeFw0yNjA2MDUwODUwNDFaFw0yNjA2MTIwODUwNDFaMBgxFjAUBgNV
BAMTDTZhMjI4ZGUxLWQzZTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC8jZWaS66D+K1BtdT857kerjBEWGhyH659668xqC5QsjDUq8Q/9v0CyS5WjzYE
QstTIAVOUQdhWSMoFrjabpEojk+O7lltfsPRR5lS1EoqLev2qk9lR/QRWY8mZnwU
l+gaewGg8KvEjo8Ww3xW7U316w1JSe+kWoYrjW2PsKJ8uHckQTV9r4VDwHRMwZtq
YTpzDTMnJMxotQkuvigTo97Gis20H3FWsgU8mVKuYsyC5R6rYtEfZ3LtBl8SyIyY
wQWi68YDciamk1WHmgsrWXeRwFtfl+LmMd0N/4f86oaWj0TUkBr1U4+FmCQjFHlo
QX5EgCJPrATugulIbpNLv1TrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUogrbPDIR
bChdzPuSJpN3rufKwKIwHwYDVR0jBBgwFoAUvmV8x/anGoEMa1JeGkxyucvU1u0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNGQkNCL0NCQzM2M0Q4RkRC
QzExRjBCOTNBNUY3MTY3NkY1NkJDL3ZtVjh4X2FuR29FTWExSmVHa3h5dWN2VTF1
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvdm1WOHhfYW5Hb0VNYTFKZUdreHl1Y3ZVMXUwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNG
QkNCL0NCQzM2M0Q4RkRCQzExRjBCOTNBNUY3MTY3NkY1NkJDL3ZtVjh4X2FuR29F
TWExSmVHa3h5dWN2VTF1MC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCpTlPjKDLzbjnLejxjDrxQu+7o4rSviA5WO1djuPsfcm/htsF2xF3zX8t/XiRX
DwMidFNK67VI3DZMo1KwqhHnznYqN6ci8e7Zh57pSOWJByptwamQRsu0JhRiAiPp
Pte4gx8jY60fzcDY2DEMyNUudOba/xCObqH3ZX9IiebvLiPRBGhM7uJ7B9u1Gr00
rK1HtYs3OAeBfm9ufRoLT3WfGJ19lWHLsgZ1B8buJPIUZacE5t+eA5F6wDBWJklq
xiriGo4tZ+q96tK+XWQW+FDpaB8y0XQpJ+w1z3x1EefJpryPbClnIBu2IWOeJkGv
qojkLuXmQQ5y2eXmFfsdQfOt
-----END CERTIFICATE-----
Generated at Sat Jun 6 10:50:18 2026 by rpki-client