Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft
File:                     vRTPGp8I9oE3_oEWzXdq29sv77Q.mft (raw, json)
Hash identifier:          HGpMa3pGauMkikuzPzPy9l8Hg0S3h3AnDCveypMkL3I=
Subject key identifier:   8A:39:1F:0F:14:16:53:8C:1F:BC:62:78:96:50:B4:23:A2:DE:DB:41
Authority key identifier: BD:14:CF:1A:9F:08:F6:81:37:FE:81:16:CD:77:6A:DB:DB:2F:EF:B4
Certificate issuer:       /CN=A9119A40/serialNumber=BD14CF1A9F08F68137FE8116CD776ADBDB2FEFB4
Certificate serial:       0401
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRTPGp8I9oE3_oEWzXdq29sv77Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft
Manifest number:          1082
Signing time:             Fri 22 Aug 2025 18:23:37 +0000
Manifest this update:     Fri 22 Aug 2025 18:23:37 +0000
Manifest next update:     Fri 29 Aug 2025 18:23:37 +0000
Files and hashes:         1: vRTPGp8I9oE3_oEWzXdq29sv77Q.crl (hash: CFBe0HYp+YCoItvJRTqPiDOpKURwZXH0MtEVC9AVHeI=)
                          2: D5DBA6BC63ED11ED851C647DC4F9AE02.roa (hash: Cu7mP4ScFcEgh99akamYEaBRClwxLE+oM+a0PvnQM0M=)
                          3: 5277F6368D2411EC816B4C70C4F9AE02.roa (hash: jmM2MyWVgkGoSl8m7eT/QohnLLhAgCt5V5ifbC8tFnE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.crl
                          rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRTPGp8I9oE3_oEWzXdq29sv77Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 18:23:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1025 (0x401)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119A40, serialNumber=BD14CF1A9F08F68137FE8116CD776ADBDB2FEFB4
        Validity
            Not Before: Aug 22 18:23:37 2025 GMT
            Not After : Aug 29 18:23:37 2025 GMT
        Subject: CN=68a8b5a9-2e19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8b:7d:7e:e8:93:a8:4d:28:e4:fd:44:f5:1f:
                    52:c6:4d:5e:81:5d:f1:60:1b:74:7e:16:fb:96:ab:
                    fa:a1:97:67:3c:4c:07:db:51:30:f7:2c:90:bc:56:
                    80:68:5a:2e:df:fd:53:0f:09:53:16:4e:6e:95:e0:
                    77:54:06:45:8b:5d:5d:c1:57:43:6f:42:57:dc:b2:
                    d5:c2:bd:b4:37:36:b4:b3:78:0b:06:1a:f0:a5:d6:
                    c2:13:e2:fb:71:22:f6:04:e7:ea:de:d8:d6:d2:d0:
                    51:b7:c3:62:1c:80:e6:00:72:bf:74:48:ef:d8:18:
                    1c:a5:c8:98:fc:56:0d:d4:91:f5:d7:32:d2:85:d3:
                    32:fc:b2:56:44:52:a7:95:62:64:c0:3a:4d:fc:44:
                    d9:e4:9e:3a:b0:42:e4:c1:9d:7c:71:6e:03:9e:ff:
                    d4:86:f2:8b:6d:17:8b:ec:11:6b:56:1f:6b:40:a6:
                    41:e1:87:3d:44:7d:68:c1:98:f3:35:7b:0b:84:a0:
                    7b:e5:ec:c1:a3:0b:70:21:93:07:c7:fc:b2:38:1a:
                    b9:15:55:da:22:2c:d6:10:1a:4d:da:57:a1:64:27:
                    58:f3:91:dd:09:15:ff:26:f8:a2:59:d6:e7:6d:ce:
                    fa:66:07:e9:01:07:be:2c:89:16:c6:5a:48:16:e1:
                    11:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:39:1F:0F:14:16:53:8C:1F:BC:62:78:96:50:B4:23:A2:DE:DB:41
            X509v3 Authority Key Identifier:
                keyid:BD:14:CF:1A:9F:08:F6:81:37:FE:81:16:CD:77:6A:DB:DB:2F:EF:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRTPGp8I9oE3_oEWzXdq29sv77Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:3e:50:ed:e8:b1:37:8b:4a:2d:5c:ee:a0:d4:09:71:05:90:
         aa:53:de:0f:3c:62:7a:34:fc:bc:dc:3e:85:3d:42:84:3d:5e:
         20:97:19:66:be:0b:ce:0b:7b:3c:49:31:53:a8:77:ea:ea:52:
         2d:20:98:2b:ae:29:8c:1c:d5:1f:a5:85:ae:9e:ab:3e:2b:e6:
         c2:b9:d4:4d:fe:12:68:2f:5d:5f:bb:27:3d:e5:07:07:7e:fb:
         ca:6d:69:56:59:8f:77:be:d4:7c:b7:99:d2:cf:0f:8b:fe:6b:
         81:46:c0:97:30:97:55:88:6f:26:64:79:26:89:41:df:cf:c8:
         35:f3:c9:92:9b:04:82:c7:b9:1a:03:21:b6:4a:15:a9:0c:a9:
         ba:9f:83:68:32:29:42:e3:22:73:c2:c0:23:e6:50:0d:3d:16:
         63:96:b3:d7:b0:12:e4:fc:3d:0f:9a:e3:37:ae:18:f1:83:58:
         dd:69:4b:65:29:ec:65:f5:dd:22:83:29:14:9c:21:f1:a0:a2:
         d0:13:1e:e8:94:2a:e0:e0:dc:16:89:46:8b:db:f5:df:ec:cf:
         29:31:9a:64:e7:c6:af:f7:fc:50:f3:50:1d:e2:b6:a9:b9:65:
         12:51:35:d0:d2:9c:7b:97:6a:b9:cc:82:7d:7a:87:82:fa:9f:
         2f:27:e9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:55:05 2025 by rpki-client