Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.mft
File:                     vj-L34G2a07S4cdOtdX7AbX3dkE.mft (raw, json)
Hash identifier:          wNQrMTiI3fsPANuQsLiK7BUCY31tgGR/3glVkKadiXM=
Subject key identifier:   A6:34:63:7F:79:F4:43:5B:34:85:AA:01:B6:BF:57:27:F8:16:4E:1A
Authority key identifier: BE:3F:8B:DF:81:B6:6B:4E:D2:E1:C7:4E:B5:D5:FB:01:B5:F7:76:41
Certificate issuer:       /CN=A911DE88/serialNumber=BE3F8BDF81B66B4ED2E1C74EB5D5FB01B5F77641
Certificate serial:       01F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-L34G2a07S4cdOtdX7AbX3dkE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.mft
Manifest number:          01DE
Signing time:             Sat 23 Aug 2025 03:00:58 +0000
Manifest this update:     Sat 23 Aug 2025 03:00:58 +0000
Manifest next update:     Sat 30 Aug 2025 03:00:58 +0000
Files and hashes:         1: vj-L34G2a07S4cdOtdX7AbX3dkE.crl (hash: smOOMUFroBRrihWVuBRJh1frS6K34gl41dFi68cV6IY=)
                          2: 9D006D76ABFF11EFB2C29330C4F9AE02.roa (hash: sav0Vfh9ahqBtsGl4vXlcCzgGz1PO39Q+R+5OKHm5uw=)
                          3: 3D5EC616694B11EFABF9221EC4F9AE02.roa (hash: 8alxfWhIp7fRhom5siOZsw/HKgS/bAz4IL2gvyTSJPI=)
                          4: F6732580607111EF9102BD19C4F9AE02.roa (hash: wcbqbOVQnp7BuGlU2JxOrjCbdGxUZVyndV9A9ip3jUk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.crl
                          rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-L34G2a07S4cdOtdX7AbX3dkE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 03:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 500 (0x1f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DE88, serialNumber=BE3F8BDF81B66B4ED2E1C74EB5D5FB01B5F77641
        Validity
            Not Before: Aug 23 03:00:58 2025 GMT
            Not After : Aug 30 03:00:58 2025 GMT
        Subject: CN=68a92eea-6f11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:32:12:32:bc:78:60:3b:ed:b5:d4:fc:b1:0f:
                    35:19:0c:7d:b0:7e:bb:e6:a0:3c:15:c6:19:f8:3a:
                    3e:db:32:c3:53:b7:1d:46:82:cb:38:4e:2c:96:24:
                    6b:bb:e7:ed:d3:5e:9d:69:2a:d8:59:18:14:5e:08:
                    2f:fe:6f:5e:f0:9c:d6:fd:0e:d1:be:19:62:53:2e:
                    f4:bf:fc:97:87:19:69:77:dc:24:70:cb:49:fa:0c:
                    ba:d3:3d:b7:ef:01:b1:49:52:75:6e:65:30:da:ba:
                    b0:5c:b6:d3:b0:5b:56:57:4d:8c:8b:94:57:87:eb:
                    25:a3:b1:c6:5f:d0:d9:a1:34:ee:bc:2c:0a:fe:f5:
                    e6:cb:d1:cc:c4:f9:63:ea:a4:a6:7a:92:aa:00:d7:
                    c2:a9:56:38:66:ab:f2:0f:e2:b1:17:14:33:07:56:
                    6a:9e:cd:94:85:23:7c:86:f6:c7:a7:5e:13:e1:7e:
                    a4:57:41:4b:ec:46:76:52:fd:95:aa:a5:d5:e2:ee:
                    43:f0:73:08:f6:73:ff:e9:d3:d8:b3:9e:61:1d:2e:
                    69:76:96:be:3d:56:7f:f8:1e:f0:68:84:66:70:8c:
                    dd:f6:44:04:f4:75:87:32:09:dd:f4:e5:00:d2:83:
                    dd:3c:be:2e:b5:f7:b5:0f:95:4d:af:fc:fe:b6:49:
                    8a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:34:63:7F:79:F4:43:5B:34:85:AA:01:B6:BF:57:27:F8:16:4E:1A
            X509v3 Authority Key Identifier:
                keyid:BE:3F:8B:DF:81:B6:6B:4E:D2:E1:C7:4E:B5:D5:FB:01:B5:F7:76:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-L34G2a07S4cdOtdX7AbX3dkE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:6e:83:a7:79:37:1d:f2:03:63:d4:12:d4:80:f7:ce:ed:72:
         bf:ec:62:70:88:da:2a:db:0c:c5:92:f8:2d:cc:90:ae:00:14:
         11:2c:f9:a8:20:51:31:cf:71:f4:0d:cb:e8:cc:dc:da:37:4f:
         06:af:bb:30:ba:38:79:73:d0:dd:91:f9:7f:97:60:05:4d:8a:
         9d:1b:e8:94:60:f0:ea:b1:bb:43:79:d8:f1:fb:6b:f6:30:7a:
         50:2e:ef:ef:95:1d:2c:e8:1a:2b:38:41:66:dc:96:70:00:70:
         8f:9c:de:be:1b:b2:2a:d1:4f:c6:e9:9c:ad:b3:01:84:cc:83:
         82:0f:0c:8d:c0:3d:4a:96:50:17:9b:a2:bc:5f:4d:2f:cc:13:
         db:97:37:cb:3e:72:eb:d6:85:e7:d9:45:23:63:4b:f7:15:ae:
         9c:64:2e:95:c8:d6:27:c0:ce:a4:7c:96:f4:39:c5:9f:d9:6b:
         06:db:43:22:a4:d4:2a:fb:51:c4:57:4e:65:0d:db:2a:67:1e:
         12:ca:78:b2:ea:d1:45:e9:fe:c1:76:d4:0d:51:3a:68:84:8b:
         40:d9:4f:40:b9:50:c8:cd:c8:96:93:07:0a:c1:c5:ae:ee:dc:
         d4:d2:4f:e6:13:d6:16:6d:3f:3f:c5:b8:27:10:96:0e:5f:2b:
         c2:21:71:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:31:40 2025 by rpki-client