Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft
File:                     VTOnxXv02x5Tj5534LSGi4-QxYI.mft (raw, json)
Hash identifier:          Igv5RNYq0StJjSBGrz6+yA+k4WT5m4doe/tVDwIHe1U=
Subject key identifier:   09:BF:84:29:B4:90:CF:4D:00:C1:B4:08:2F:7C:00:DB:1E:54:BE:26
Authority key identifier: 55:33:A7:C5:7B:F4:DB:1E:53:8F:9E:77:E0:B4:86:8B:8F:90:C5:82
Certificate issuer:       /CN=A91276FA/serialNumber=5533A7C57BF4DB1E538F9E77E0B4868B8F90C582
Certificate serial:       CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft
Manifest number:          C7
Signing time:             Sun 19 Oct 2025 08:56:55 +0000
Manifest this update:     Sun 19 Oct 2025 08:56:54 +0000
Manifest next update:     Sun 26 Oct 2025 08:56:54 +0000
Files and hashes:         1: VTOnxXv02x5Tj5534LSGi4-QxYI.crl (hash: JUZL/Vao6PeasdCWd0qNt9owWlcbYhR7eBrBLrETlEo=)
                          2: 5D8DFB5684CA11EF9F92574DC4F9AE02.roa (hash: APURPczfV1ii5Oz3jn5uLGx4X2/aeoAU9n96jwy9b0A=)
                          3: 7EC9705C84CA11EFA41F8D4DC4F9AE02.roa (hash: utVxhZKF0BG0gKmfkjY5U3UQKAW2XCaaTxVRnaQMDbE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.crl
                          rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 08:56:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 205 (0xcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91276FA, serialNumber=5533A7C57BF4DB1E538F9E77E0B4868B8F90C582
        Validity
            Not Before: Oct 19 08:56:54 2025 GMT
            Not After : Oct 26 08:56:54 2025 GMT
        Subject: CN=68f4a7d7-d138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:94:85:dc:d2:61:40:91:3f:60:2d:10:bb:72:
                    84:01:c0:a0:89:26:57:db:fc:6b:ff:cf:cd:f7:5e:
                    22:29:f3:34:37:8d:72:f9:45:6f:78:c9:68:bc:01:
                    69:d8:37:d5:df:74:91:be:77:12:96:2b:f0:6d:da:
                    b7:f2:90:f1:a1:16:6a:9d:38:93:3a:6a:32:bd:55:
                    b9:ec:e2:2e:2a:a5:fd:ff:9b:15:3a:5e:af:e0:cc:
                    bd:47:70:00:b9:d8:51:f0:a0:1a:65:5f:1e:a1:08:
                    cb:63:dc:91:62:e6:d2:27:32:3f:c1:7c:e2:9f:c7:
                    66:ef:c5:45:b7:05:31:68:29:fb:a6:92:a1:ca:c0:
                    5a:1d:6d:a7:ae:64:fe:1c:93:36:7d:26:fc:5d:33:
                    75:77:f4:6b:96:18:d0:1b:3e:f1:8d:d4:6b:1b:47:
                    a8:d7:f4:c3:e7:a4:6f:32:9f:f6:a6:f5:29:ed:02:
                    cc:88:49:81:6a:18:09:c7:0c:f9:02:99:a0:7d:f0:
                    19:4c:ac:fd:7d:30:e6:70:fa:2f:d5:a4:88:e6:7c:
                    7a:bd:68:cc:e8:89:a7:14:94:7c:55:11:ee:2f:79:
                    4a:a8:bb:a4:a9:be:74:66:22:27:6d:bb:29:19:c1:
                    b1:ef:21:24:c5:ea:d0:fe:fa:bb:c9:9f:71:7c:b3:
                    6d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:BF:84:29:B4:90:CF:4D:00:C1:B4:08:2F:7C:00:DB:1E:54:BE:26
            X509v3 Authority Key Identifier:
                keyid:55:33:A7:C5:7B:F4:DB:1E:53:8F:9E:77:E0:B4:86:8B:8F:90:C5:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:40:9c:d2:3f:41:3d:ae:5f:30:60:27:c2:a9:19:c0:e1:0f:
         51:d6:32:cb:99:db:29:db:35:02:50:e7:82:e7:13:91:b6:fa:
         fb:2e:9a:71:33:31:b4:50:f1:a6:2f:30:8f:fc:ee:40:1c:0b:
         20:c7:e7:80:04:cd:a9:08:66:3c:0b:52:0b:d0:3e:b8:2a:6f:
         e0:d9:33:da:f5:63:5e:74:ce:de:a8:80:a1:4d:33:e3:a6:5f:
         0d:43:1a:cd:57:29:36:93:00:d9:7c:05:cc:9f:27:48:9f:c0:
         a5:ab:bc:c0:9d:49:09:4c:4d:c0:1c:fc:08:0f:fe:f5:fc:8b:
         79:46:b8:d2:3a:46:97:71:3e:f5:ed:4f:9c:9f:a4:7a:07:79:
         d8:c1:c1:b8:ca:a2:1f:86:d6:3b:de:a1:bc:9a:7d:7d:3a:00:
         8f:d2:d1:a5:62:09:83:1e:f2:9f:0f:15:a7:ce:ae:bc:fa:69:
         0e:00:a6:7f:d2:9c:b6:dd:c7:4d:da:cc:67:bf:b5:91:6c:18:
         7d:99:10:18:5c:c7:5d:b4:fa:4d:5e:94:d1:aa:10:86:dd:92:
         c5:f3:7a:4f:d3:7e:15:4a:81:32:11:61:d2:76:2f:4a:58:7d:
         0f:44:db:cd:89:78:9b:0e:4c:ae:62:fe:9c:ec:72:b4:35:0e:
         d8:c9:c6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:47:37 2025 by rpki-client