Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.mft
File:                     VvkoxypXKMF6mCUQm7u3IQMTu8o.mft (raw, json)
Hash identifier:          xt5utw3eN02XVAMuituZxifzF55A8dT50Vth+sKBi0s=
Subject key identifier:   5A:2F:F5:CA:5F:43:8B:40:02:EA:43:69:AF:3D:2A:E9:6A:7A:4F:B6
Authority key identifier: 56:F9:28:C7:2A:57:28:C1:7A:98:25:10:9B:BB:B7:21:03:13:BB:CA
Certificate issuer:       /CN=A91229A5/serialNumber=56F928C72A5728C17A9825109BBBB7210313BBCA
Certificate serial:       0173
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VvkoxypXKMF6mCUQm7u3IQMTu8o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.mft
Manifest number:          0164
Signing time:             Sat 23 Aug 2025 04:18:46 +0000
Manifest this update:     Sat 23 Aug 2025 04:18:46 +0000
Manifest next update:     Sat 30 Aug 2025 04:18:46 +0000
Files and hashes:         1: VvkoxypXKMF6mCUQm7u3IQMTu8o.crl (hash: vLNXemXDN1/UM0yngNBK3dKG9IDCiog/VMQXYDtDg9Q=)
                          2: 22C2DBA66E7511EFA80C0F12C4F9AE02.roa (hash: c53/pjhIZaLo3ZYn7NmlwhctciJl6CH40hWP1FAxHnA=)
                          3: EE44E774314411EF956C0046C4F9AE02.roa (hash: tpBZHVCLnDE9hPXx1rzX1HnhPRZpMRzJTTstJm0BIGI=)
                          4: 0BB29428314511EF9B1F4B46C4F9AE02.roa (hash: H2sLs/hJoaPZU0Z/0qHdW66zEdj635m4qaU5cpHkB3A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.crl
                          rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VvkoxypXKMF6mCUQm7u3IQMTu8o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 04:18:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 371 (0x173)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91229A5, serialNumber=56F928C72A5728C17A9825109BBBB7210313BBCA
        Validity
            Not Before: Aug 23 04:18:46 2025 GMT
            Not After : Aug 30 04:18:46 2025 GMT
        Subject: CN=68a94126-ed0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:98:4d:48:4a:e4:f1:7b:50:2f:a6:78:59:c2:
                    3f:b7:93:4d:38:63:39:75:93:e6:3e:d2:c1:f9:e8:
                    b7:52:b6:ed:83:76:cd:76:df:79:24:cb:c7:a5:2d:
                    c9:9d:55:75:6d:71:80:46:e9:74:dd:b4:31:4f:11:
                    da:57:05:55:d5:33:a3:55:e0:e7:15:52:7e:3f:f4:
                    cc:cc:75:d6:91:85:2f:e5:d5:f9:f6:37:f3:86:82:
                    ed:58:e2:76:18:7f:54:62:2e:d9:26:12:c5:dd:c4:
                    07:00:52:c1:35:a3:3a:23:7c:1e:4f:d1:58:24:f3:
                    dc:15:95:20:f4:25:bf:62:77:e2:80:3d:3e:90:45:
                    a8:0f:7d:5d:68:7e:98:8e:62:32:0a:32:b3:62:fe:
                    7d:8d:a8:f5:a5:81:9c:a8:7d:f0:98:a6:ee:63:7e:
                    bc:32:6d:64:9e:ba:c1:d0:fe:b3:53:f3:03:9a:6f:
                    93:fb:0a:69:9a:3f:04:2c:67:90:9a:a2:86:70:9c:
                    27:97:b4:47:ca:5a:c7:b3:6a:e8:3b:d5:e2:76:d2:
                    7b:2e:a0:a9:65:a7:61:7f:82:56:8a:90:78:4f:8f:
                    76:87:33:9e:42:20:bb:54:83:eb:9f:08:cd:e2:66:
                    e5:55:31:52:d8:06:d3:eb:b0:be:f3:b2:09:8c:92:
                    1f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:2F:F5:CA:5F:43:8B:40:02:EA:43:69:AF:3D:2A:E9:6A:7A:4F:B6
            X509v3 Authority Key Identifier:
                keyid:56:F9:28:C7:2A:57:28:C1:7A:98:25:10:9B:BB:B7:21:03:13:BB:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VvkoxypXKMF6mCUQm7u3IQMTu8o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:96:9b:82:31:1a:c2:f9:1f:65:bb:9e:64:14:9f:d5:79:09:
         23:a6:70:9a:60:41:9e:f4:af:88:10:dd:e2:06:85:4f:69:ef:
         16:c1:18:cf:0c:26:3b:f2:f4:5e:ea:83:21:20:f4:60:7c:91:
         8d:9b:65:be:a9:55:89:62:c9:10:43:1a:31:2f:ff:f5:c1:53:
         b0:bb:0a:9b:f3:86:59:68:f4:24:3f:90:87:dd:a2:0d:52:c6:
         6d:f5:69:1e:8e:ec:a4:f3:12:be:dd:23:65:df:c6:45:84:ce:
         7c:ed:4d:4b:ca:d0:58:b1:4a:e7:8a:7f:10:15:73:16:43:0d:
         1d:59:02:61:a6:1b:2a:f8:92:d4:17:78:c5:43:c6:a0:98:aa:
         45:74:03:f5:84:a9:7b:5f:4b:36:95:b6:56:bc:9f:a8:f6:1b:
         42:2c:54:ad:a6:c5:ea:3e:c0:8d:1d:3a:65:ee:d9:5b:2d:3b:
         5a:27:10:8b:66:03:e1:e1:59:e3:77:e1:5e:ea:fa:d5:97:62:
         0b:4c:76:7c:f8:ee:c6:4b:16:7a:bc:13:89:2d:a0:f1:dc:02:
         c6:b9:2d:f4:9a:30:f0:28:73:3b:6d:d6:49:d8:ba:03:c2:2b:
         31:10:77:8c:08:f6:77:0e:05:df:69:1a:39:8f:71:c3:31:81:
         72:9a:2c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:41:13 2025 by rpki-client