Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft
File:                     vRTPGp8I9oE3_oEWzXdq29sv77Q.mft (raw, json)
Hash identifier:          7G7fM0TtuXOmKv70zC8zaPvhx8iJKLWsFtoNIwILa20=
Subject key identifier:   D5:3F:2E:17:7A:F9:AD:53:F2:10:0C:02:54:33:27:68:8D:AA:B9:02
Authority key identifier: BD:14:CF:1A:9F:08:F6:81:37:FE:81:16:CD:77:6A:DB:DB:2F:EF:B4
Certificate issuer:       /CN=A9119A40/serialNumber=BD14CF1A9F08F68137FE8116CD776ADBDB2FEFB4
Certificate serial:       03E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRTPGp8I9oE3_oEWzXdq29sv77Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft
Manifest number:          104E
Signing time:             Wed 02 Jul 2025 18:31:33 +0000
Manifest this update:     Wed 02 Jul 2025 18:31:33 +0000
Manifest next update:     Wed 09 Jul 2025 18:31:33 +0000
Files and hashes:         1: vRTPGp8I9oE3_oEWzXdq29sv77Q.crl (hash: +4gffrFe025OYcF9lSjBzyO/zyabsMFtTylDE+vBtDc=)
                          2: D5DBA6BC63ED11ED851C647DC4F9AE02.roa (hash: Cu7mP4ScFcEgh99akamYEaBRClwxLE+oM+a0PvnQM0M=)
                          3: 5277F6368D2411EC816B4C70C4F9AE02.roa (hash: jmM2MyWVgkGoSl8m7eT/QohnLLhAgCt5V5ifbC8tFnE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.crl
                          rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRTPGp8I9oE3_oEWzXdq29sv77Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 18:31:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 999 (0x3e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119A40, serialNumber=BD14CF1A9F08F68137FE8116CD776ADBDB2FEFB4
        Validity
            Not Before: Jul  2 18:31:33 2025 GMT
            Not After : Jul  9 18:31:33 2025 GMT
        Subject: CN=68657b05-fd85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:bf:a8:de:9c:71:9d:21:01:d5:6c:dc:f5:63:
                    62:7f:17:ce:0c:46:a6:f2:79:af:5e:eb:50:72:39:
                    ce:1f:f6:0b:27:2f:5f:88:75:38:b2:8a:ee:62:c5:
                    5f:57:dc:a1:1e:44:31:ee:0b:b5:7b:58:82:89:3a:
                    f6:5f:27:95:59:ff:9d:19:62:ec:e8:69:bb:a4:c2:
                    08:fe:ed:94:cd:36:65:79:42:91:1a:ad:21:8c:8f:
                    95:0b:5e:89:76:05:eb:37:89:fa:86:98:c9:38:57:
                    a6:ed:a9:e3:a1:56:19:c0:b0:92:bb:81:df:74:97:
                    f2:d3:0f:d2:16:05:c4:9e:52:73:d3:20:61:20:be:
                    0d:60:28:1c:40:12:b8:11:c9:22:25:21:2f:ac:22:
                    dc:f7:a0:0a:d5:45:48:15:f5:59:58:00:48:7b:dc:
                    54:ee:dd:6d:b8:65:55:51:a5:e8:56:1e:91:32:39:
                    e5:f8:7e:95:95:07:1e:a4:7e:c1:dd:71:80:ca:d3:
                    f9:24:e5:03:33:98:54:a7:1f:46:82:88:ae:c2:8b:
                    05:14:8f:e2:27:eb:85:28:bf:37:76:99:94:78:b7:
                    0f:cc:d4:08:50:8c:b3:92:09:54:59:94:36:f9:e2:
                    a8:cf:22:06:2b:0d:51:6f:9a:6a:d0:22:46:c4:53:
                    35:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:3F:2E:17:7A:F9:AD:53:F2:10:0C:02:54:33:27:68:8D:AA:B9:02
            X509v3 Authority Key Identifier:
                keyid:BD:14:CF:1A:9F:08:F6:81:37:FE:81:16:CD:77:6A:DB:DB:2F:EF:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRTPGp8I9oE3_oEWzXdq29sv77Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:95:42:10:28:bb:17:36:c5:e7:05:9b:04:6a:6d:66:61:d0:
         96:d3:5b:d4:27:bd:24:7f:7d:07:20:94:4d:09:61:ae:2d:f1:
         53:f0:ee:ae:3b:6e:08:96:77:5d:8a:9e:52:8b:61:ba:e5:95:
         a6:f9:58:53:5b:52:6f:69:6b:51:b6:44:a8:5b:27:47:72:b9:
         33:6e:23:34:fd:f4:7d:c8:fe:e0:f2:c7:a0:79:d1:82:3c:f2:
         25:42:c7:db:03:a7:ee:a8:9e:30:57:65:26:64:2c:4e:0a:98:
         6d:6d:a3:d1:89:8c:9c:2d:d8:9d:d0:79:7b:8e:5b:e9:6c:61:
         df:7c:cd:4c:ee:d3:6d:d9:a5:c2:67:96:cf:1f:13:c2:8b:5b:
         7c:e4:a5:ea:f5:fa:65:11:aa:9a:32:67:32:53:60:76:7f:07:
         0b:f5:1e:2d:e0:7e:fb:d5:67:3b:2c:4e:81:86:e3:6d:ab:74:
         4b:7c:19:c7:1e:fb:93:8a:ed:1e:3b:b8:65:ce:0d:ab:64:d0:
         02:85:5d:8d:77:9f:5b:d4:79:89:cd:6c:6d:bb:94:82:57:53:
         f7:c1:00:78:03:df:07:44:dc:72:2f:4f:3d:7d:9d:b1:01:36:
         a8:db:a5:54:1c:35:3d:c2:b8:53:b7:76:e0:25:75:84:33:96:
         98:6d:98:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 17:41:04 2025 by rpki-client