Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft
File:                     vNWr2ckcoefyxFVXBbKUBPUFvcU.mft (raw, json)
Hash identifier:          tml/STNUieVTS2m78j4hDO4n2ROPGTOJZ3kjfuKdc2c=
Subject key identifier:   67:E8:42:3D:DB:21:2B:96:A7:11:16:BC:F2:CE:CF:25:72:67:9E:2C
Authority key identifier: BC:D5:AB:D9:C9:1C:A1:E7:F2:C4:55:57:05:B2:94:04:F5:05:BD:C5
Certificate issuer:       /CN=A912F281/serialNumber=BCD5ABD9C91CA1E7F2C4555705B29404F505BDC5
Certificate serial:       98
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vNWr2ckcoefyxFVXBbKUBPUFvcU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft
Manifest number:          97
Signing time:             Sun 19 Oct 2025 09:36:52 +0000
Manifest this update:     Sun 19 Oct 2025 09:36:52 +0000
Manifest next update:     Sun 26 Oct 2025 09:36:52 +0000
Files and hashes:         1: vNWr2ckcoefyxFVXBbKUBPUFvcU.crl (hash: 9qCn0gfxEGwZqx3egmOVBNUk2VTzKRZyRNvPfh30+Jg=)
                          2: 89EA22F0C67011EFAE929D0DC4F9AE02.roa (hash: u5vjYU67JaqqsoNZI0S6g4tD4PgUnrgAcxaVH+69TsM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.crl
                          rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vNWr2ckcoefyxFVXBbKUBPUFvcU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 09:36:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 152 (0x98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F281, serialNumber=BCD5ABD9C91CA1E7F2C4555705B29404F505BDC5
        Validity
            Not Before: Oct 19 09:36:52 2025 GMT
            Not After : Oct 26 09:36:52 2025 GMT
        Subject: CN=68f4b134-d099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6f:17:29:9e:84:72:43:77:1f:0b:25:ac:83:
                    20:16:a9:91:5d:94:34:7a:23:ba:58:b3:12:be:8c:
                    ae:3e:4f:8a:c3:16:4d:fa:3e:bc:cb:cb:81:c5:4e:
                    c3:b5:a7:a9:20:e5:1a:a5:9e:bf:d7:f0:0b:6b:48:
                    f6:2b:63:37:1e:c7:f1:a0:7f:a1:3f:1c:57:57:6c:
                    95:b4:1d:59:e0:55:34:2c:c5:ba:fc:bc:f4:64:18:
                    a1:19:b6:17:d0:37:69:65:a6:c1:85:d3:20:bd:03:
                    43:31:2b:64:c4:44:e7:64:f2:7b:71:df:d7:cf:e1:
                    08:6b:be:6d:19:b4:11:a4:15:3b:52:36:de:59:94:
                    cf:8f:e9:08:3b:29:2a:a0:33:bf:79:b5:75:d7:31:
                    a0:8e:ce:e7:b7:d4:93:2d:4d:19:bf:48:b9:dd:ab:
                    41:c8:2a:f8:93:c9:fb:6e:0d:31:a0:df:c5:2f:06:
                    61:bd:74:d7:ca:e9:27:b2:97:a8:ec:01:f2:37:72:
                    8b:3a:59:32:e6:ed:8a:c7:51:4e:7f:7e:8c:c3:f6:
                    21:ff:c0:bb:c4:9b:93:8d:0c:a5:ac:c4:1b:8c:24:
                    1f:03:f7:1c:ac:81:bb:21:d0:9a:9f:ac:b7:16:f0:
                    4c:51:22:0a:94:78:c8:ef:1d:99:1c:87:db:5a:52:
                    24:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:E8:42:3D:DB:21:2B:96:A7:11:16:BC:F2:CE:CF:25:72:67:9E:2C
            X509v3 Authority Key Identifier:
                keyid:BC:D5:AB:D9:C9:1C:A1:E7:F2:C4:55:57:05:B2:94:04:F5:05:BD:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vNWr2ckcoefyxFVXBbKUBPUFvcU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:af:03:0f:7e:46:11:6f:6a:31:4f:29:72:ce:9c:3a:5f:1c:
         55:ea:f3:86:38:f7:4d:81:54:67:14:d7:47:80:2b:11:0f:7b:
         31:17:13:7c:53:9b:bf:ab:9a:58:2f:50:11:e5:8c:f0:ca:1c:
         86:35:20:e5:00:b0:56:dc:98:ca:d7:34:6c:db:57:2b:54:00:
         1d:ab:37:69:cc:a5:df:5e:e7:8e:9d:af:3f:b2:0b:73:ea:fb:
         3d:9d:60:ee:da:8a:3a:b9:ea:77:4f:9d:3e:30:8b:51:9b:73:
         1b:d6:be:21:f8:bf:ee:51:2f:37:ab:44:2a:df:43:0c:bb:2d:
         49:7c:b9:17:ee:5b:0c:12:39:cd:3b:8c:82:d1:64:bf:33:42:
         a6:c4:b7:ac:da:7d:ed:96:5d:48:38:bb:70:31:41:9d:05:61:
         60:f3:1e:84:c1:80:a0:e5:ab:a0:ce:41:c9:59:36:a1:f7:2f:
         75:39:ec:36:91:27:cb:97:6c:66:b0:c2:fa:a8:03:d9:d3:b4:
         3d:ac:5a:d5:be:1d:15:5e:bb:b0:fe:f1:4f:55:22:88:c7:e2:
         11:65:e7:eb:4f:93:77:c8:ea:a4:5f:5e:c2:69:a1:3c:ff:c2:
         d9:89:75:37:ab:05:04:e9:2b:93:2a:ef:49:73:ef:27:da:cc:
         53:8e:e2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:26:21 2025 by rpki-client