Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.mft
File:                     VXcPY6DmX0wvyWrxmLxXhNznikY.mft (raw, json)
Hash identifier:          KhadFAP1w8QAPAVN0zyGNkJ7sLyF5OvILMPxnUmfjsQ=
Subject key identifier:   96:EE:0D:23:7D:23:AB:2E:6F:AD:AA:86:88:15:2D:AD:3C:7E:40:0D
Authority key identifier: 55:77:0F:63:A0:E6:5F:4C:2F:C9:6A:F1:98:BC:57:84:DC:E7:8A:46
Certificate issuer:       /CN=A912B75A/serialNumber=55770F63A0E65F4C2FC96AF198BC5784DCE78A46
Certificate serial:       AF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXcPY6DmX0wvyWrxmLxXhNznikY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.mft
Manifest number:          AA
Signing time:             Thu 03 Jul 2025 06:20:40 +0000
Manifest this update:     Thu 03 Jul 2025 06:20:40 +0000
Manifest next update:     Thu 10 Jul 2025 06:20:40 +0000
Files and hashes:         1: VXcPY6DmX0wvyWrxmLxXhNznikY.crl (hash: 6t6h7s/h7pMQqlkix7mHHJn+PLKhQSRQsvKjCU8XM7E=)
                          2: 3590B0F65B9B11EFB90EBF42C4F9AE02.roa (hash: 969jdHyGdAb1flnXmcu6oMyF0jGTp5cUzC4c61xE+18=)
                          3: 887E73265B9A11EF80F47C41C4F9AE02.roa (hash: CexljjC7wRSe/lloivtx612T1a6cjKsaqz6uhDTMArU=)
                          4: 8A54B9326F0C11EF866A7A83C4F9AE02.roa (hash: 4E2LrZlO3ISS0nbt57DW68xHKT/RNp0hNVMadZS9u+U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.crl
                          rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXcPY6DmX0wvyWrxmLxXhNznikY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 175 (0xaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B75A, serialNumber=55770F63A0E65F4C2FC96AF198BC5784DCE78A46
        Validity
            Not Before: Jul  3 06:20:40 2025 GMT
            Not After : Jul 10 06:20:40 2025 GMT
        Subject: CN=68662138-185f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2a:08:b7:c4:5c:94:20:21:25:83:8b:25:2f:
                    57:a6:60:b3:9c:b1:34:81:c9:98:ca:bf:67:4e:e2:
                    c3:69:d4:5d:c0:82:26:85:2c:85:1b:4a:5f:46:24:
                    c3:b7:cb:55:a8:d0:31:73:91:2b:9a:8f:07:c4:9b:
                    10:b5:df:db:44:df:c5:ff:ee:f0:62:82:4f:db:ea:
                    62:c0:5d:70:9d:33:f6:8c:db:6a:a7:60:72:d0:34:
                    f8:ee:97:19:8e:72:64:5c:39:db:59:8a:19:3a:4d:
                    8a:57:bc:42:85:0a:fc:87:f4:fa:13:9c:aa:db:7f:
                    18:b1:81:49:a8:e9:1d:62:0a:ed:7c:7f:a7:c5:b6:
                    7e:97:c8:43:1a:d4:9e:51:07:45:76:be:a0:5a:37:
                    6c:7c:a8:64:8d:25:9e:6a:a1:4d:21:61:71:31:75:
                    d1:d9:02:92:1a:e6:77:3c:4f:07:04:48:29:68:43:
                    ea:32:b0:b5:07:b5:91:0f:4c:40:bf:83:d8:9f:ca:
                    be:ff:f2:57:44:40:5c:bf:96:07:74:a4:58:1b:9c:
                    77:b5:aa:58:e2:60:93:2a:7e:46:b7:df:b1:19:78:
                    65:e4:18:ea:24:91:dc:62:cd:15:28:86:aa:81:4a:
                    33:94:84:90:b0:35:9c:4e:3a:c2:76:50:e0:6c:16:
                    75:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:EE:0D:23:7D:23:AB:2E:6F:AD:AA:86:88:15:2D:AD:3C:7E:40:0D
            X509v3 Authority Key Identifier:
                keyid:55:77:0F:63:A0:E6:5F:4C:2F:C9:6A:F1:98:BC:57:84:DC:E7:8A:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXcPY6DmX0wvyWrxmLxXhNznikY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:87:da:28:4a:97:89:54:b3:1f:84:c1:7d:4a:e3:c4:95:48:
         d6:f5:55:39:20:b4:ee:52:1e:3e:db:3c:08:be:3d:79:f4:20:
         0a:ed:6f:77:cb:48:a8:59:09:31:87:a5:60:83:dc:6c:9e:be:
         bd:0f:18:26:3b:7f:1c:49:2b:91:fb:8d:c6:84:8a:7f:5d:fa:
         8e:80:0d:39:e8:62:f8:38:c7:91:e2:25:25:43:6e:9d:c8:e2:
         bc:15:b9:dd:33:39:e0:2e:de:a3:e2:ac:92:37:bf:ac:d8:4e:
         3d:c1:51:17:f5:c9:1c:75:81:31:54:92:e9:95:3f:46:fb:4f:
         ef:c2:96:42:bb:58:a6:41:2c:98:ff:b4:cd:15:c8:eb:07:28:
         2b:6f:bf:45:09:fa:e7:ee:6d:d8:24:e2:6a:f8:21:de:e1:18:
         8b:69:88:97:0b:14:b9:4c:79:d7:eb:fb:28:4a:34:b4:b3:8c:
         91:ef:48:3e:c9:39:fd:39:32:22:e3:46:bf:97:31:62:35:e3:
         d0:e1:4f:b0:10:2c:78:13:86:ea:19:57:c4:6a:91:63:d2:74:
         3f:d5:28:32:9b:5e:fc:b2:2d:36:4e:a1:d2:5c:b2:47:58:bf:
         18:de:52:7c:be:c5:29:35:1d:c9:45:a6:59:1e:11:df:64:08:
         76:b4:b5:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 06:34:08 2025 by rpki-client