Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.mft
File:                     vphUuYSZNmQ-DUAVo7N7XkSErVo.mft (raw, json)
Hash identifier:          N29m/rPWc47QdwJtn/L9libXWOJVIsLWiQGIiWM6vMc=
Subject key identifier:   A9:74:D4:70:FF:0F:BF:88:B6:A5:FB:7C:EB:E3:6D:01:3B:E7:02:60
Authority key identifier: BE:98:54:B9:84:99:36:64:3E:0D:40:15:A3:B3:7B:5E:44:84:AD:5A
Certificate issuer:       /CN=A9123D19/serialNumber=BE9854B9849936643E0D4015A3B37B5E4484AD5A
Certificate serial:       29DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vphUuYSZNmQ-DUAVo7N7XkSErVo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.mft
Manifest number:          29C6
Signing time:             Wed 02 Jul 2025 15:42:43 +0000
Manifest this update:     Wed 02 Jul 2025 15:42:42 +0000
Manifest next update:     Wed 09 Jul 2025 15:42:42 +0000
Files and hashes:         1: vphUuYSZNmQ-DUAVo7N7XkSErVo.crl (hash: 4PeBflks4zW5DVTZTt60gKtZUmALbiRG2diV4xUjawI=)
                          2: 73E0191A967811EA92E45A27C4F9AE02.roa (hash: ShaJe6Lrds4HI5NQVrTj2+pnsM6ohcQYrpyOOxPkL24=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.crl
                          rsync://rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vphUuYSZNmQ-DUAVo7N7XkSErVo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 15:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10714 (0x29da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123D19, serialNumber=BE9854B9849936643E0D4015A3B37B5E4484AD5A
        Validity
            Not Before: Jul  2 15:42:42 2025 GMT
            Not After : Jul  9 15:42:42 2025 GMT
        Subject: CN=68655372-2db4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b7:1e:9f:76:c9:14:9b:53:eb:8b:cb:28:ed:
                    4a:4b:ca:c6:76:e5:3b:25:8a:68:30:22:99:0e:18:
                    4b:65:e1:a2:e1:ac:59:3d:b7:5e:14:29:3c:59:49:
                    dd:d5:bb:d5:8f:c0:f0:68:81:4c:7f:80:c3:dd:37:
                    83:67:b7:48:37:62:07:fc:59:ab:bf:1a:14:17:76:
                    5d:f7:50:79:9e:44:c1:15:45:b2:59:8b:12:55:fa:
                    24:0a:d1:5a:d9:e0:d0:d5:ad:5f:d1:17:89:f4:57:
                    26:21:c5:cb:f9:3c:df:31:fd:ed:53:cf:42:54:b8:
                    42:d3:bc:c6:d2:8a:a3:c8:dd:3b:31:40:8b:1c:f7:
                    ce:12:c2:d6:2a:07:70:4c:bb:58:0d:81:db:7a:93:
                    ef:e7:a2:d0:2b:b1:9c:62:d7:b4:28:1d:16:dc:04:
                    d5:63:99:3f:15:9e:98:eb:07:05:a7:64:32:40:05:
                    16:78:e6:54:47:c5:14:15:e0:5b:54:cd:79:4b:88:
                    63:e8:b2:b5:70:06:24:d6:e4:96:cc:6b:fb:0a:57:
                    bd:1a:f8:1f:72:24:40:c3:82:e6:59:3d:aa:e6:5e:
                    e6:fc:30:74:ed:10:1f:58:b0:7f:8d:1b:4a:91:28:
                    ae:27:9d:a5:6b:bb:50:2b:58:d1:71:d2:05:5b:90:
                    99:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:74:D4:70:FF:0F:BF:88:B6:A5:FB:7C:EB:E3:6D:01:3B:E7:02:60
            X509v3 Authority Key Identifier:
                keyid:BE:98:54:B9:84:99:36:64:3E:0D:40:15:A3:B3:7B:5E:44:84:AD:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vphUuYSZNmQ-DUAVo7N7XkSErVo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:1c:7b:6c:06:8f:84:56:1f:1e:55:3e:84:18:6d:4c:d6:70:
         e4:23:40:bd:ba:7a:39:54:52:eb:8f:03:e7:ec:ba:75:f1:11:
         a9:27:2b:fe:3e:50:93:ad:c3:83:cb:06:a2:98:62:f1:ce:e8:
         5d:83:7e:e7:dc:5b:88:f0:62:73:09:e8:f6:db:6e:ae:0d:a8:
         4e:58:f9:8c:69:ea:62:bd:80:fa:d7:35:30:26:28:79:13:c2:
         2a:20:72:3b:7a:a6:ea:94:d9:b9:94:8c:60:b1:7a:86:d0:2c:
         57:e5:2a:d0:88:e4:16:02:bf:cc:19:34:bf:15:17:70:9d:94:
         0c:52:ee:83:d3:60:03:a7:dc:43:b5:52:93:b9:42:2e:3a:8c:
         71:17:53:27:d6:fb:49:07:b4:86:d1:88:66:49:a4:c0:8c:e8:
         1b:02:47:79:d1:f7:76:f7:b6:34:24:32:de:8f:85:ec:a0:9f:
         ad:c6:3e:4c:1c:69:97:56:05:df:27:14:ba:97:d8:4e:2c:10:
         41:73:e9:89:e1:a2:ed:6d:39:10:e9:e2:d3:16:c2:9a:ea:b0:
         af:40:80:e2:67:02:9f:35:c5:75:fc:e8:6b:e8:ce:2b:ee:8f:
         83:41:24:e8:e3:b4:59:fd:8a:11:85:b0:71:4e:db:5b:81:7a:
         9d:c1:75:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:20:52 2025 by rpki-client