Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.mft
File:                     vpHAXiGMfmbqb5T50kV3cEGRveI.mft (raw, json)
Hash identifier:          u9Ocwfea/wVnMr5dbhP2LAIWmK0nEGXqvKOTphfqoXw=
Subject key identifier:   B4:3C:D3:2D:9A:27:59:75:CE:C5:63:ED:7E:A6:64:31:8B:57:3E:68
Authority key identifier: BE:91:C0:5E:21:8C:7E:66:EA:6F:94:F9:D2:45:77:70:41:91:BD:E2
Certificate issuer:       /CN=A912FCBB/serialNumber=BE91C05E218C7E66EA6F94F9D24577704191BDE2
Certificate serial:       C8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vpHAXiGMfmbqb5T50kV3cEGRveI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.mft
Manifest number:          C6
Signing time:             Sat 23 Aug 2025 05:55:16 +0000
Manifest this update:     Sat 23 Aug 2025 05:55:16 +0000
Manifest next update:     Sat 30 Aug 2025 05:55:16 +0000
Files and hashes:         1: vpHAXiGMfmbqb5T50kV3cEGRveI.crl (hash: Vv/9W2U9dW3PGNzNLYecitmn8ohf2tSl2iSyboGzk1I=)
                          2: 8F80C48E531211EFAB0B8726C4F9AE02.roa (hash: kqqxAXnrRR7qW3plZHXyG8tkzcmd2G3d0enNBzRXcMc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.crl
                          rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vpHAXiGMfmbqb5T50kV3cEGRveI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 05:55:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 200 (0xc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912FCBB, serialNumber=BE91C05E218C7E66EA6F94F9D24577704191BDE2
        Validity
            Not Before: Aug 23 05:55:16 2025 GMT
            Not After : Aug 30 05:55:16 2025 GMT
        Subject: CN=68a957c4-a6c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0b:3d:2e:4a:25:7c:09:e7:1c:ab:5e:55:e6:
                    5f:ac:77:25:50:73:8c:0c:b4:bc:85:11:59:c3:93:
                    db:25:3a:a7:7a:d6:64:5a:78:e8:05:bd:8b:94:3d:
                    96:e6:5c:d1:fe:1d:53:b9:43:e4:12:88:3c:4b:ee:
                    11:11:7a:90:43:92:e1:72:8c:6f:70:c9:ff:3e:82:
                    99:45:2b:97:e5:90:09:b6:26:2c:38:5e:92:8d:45:
                    f0:5c:ea:b6:9d:b6:af:84:e8:18:18:24:8b:6b:ab:
                    b3:78:da:e8:dc:ee:c5:5a:68:c1:f7:fd:50:31:75:
                    d5:81:90:8f:0a:63:16:67:e4:35:23:a8:ec:89:1d:
                    cf:cd:43:d9:c5:e5:e9:58:06:09:6e:35:fa:d9:30:
                    1c:0a:0b:cd:5c:74:06:31:4b:09:68:b4:b6:1c:d5:
                    b4:b4:34:45:09:e3:10:41:0b:e1:97:a2:c1:62:07:
                    74:f9:62:38:4e:82:1e:2d:fe:fb:1d:9f:ce:ba:55:
                    0d:1c:f6:48:20:de:28:88:4e:06:d2:2c:08:67:d5:
                    9d:1b:0a:c1:09:d8:a6:f4:8c:80:03:95:e5:6d:82:
                    7b:37:aa:8e:c0:45:66:77:a2:1c:ae:64:6e:e3:9c:
                    66:77:3d:90:99:ec:fd:b4:12:ce:e7:cc:96:00:13:
                    72:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:3C:D3:2D:9A:27:59:75:CE:C5:63:ED:7E:A6:64:31:8B:57:3E:68
            X509v3 Authority Key Identifier:
                keyid:BE:91:C0:5E:21:8C:7E:66:EA:6F:94:F9:D2:45:77:70:41:91:BD:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vpHAXiGMfmbqb5T50kV3cEGRveI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:16:85:e2:bd:4e:5b:84:b5:31:06:82:70:8f:58:79:3d:9c:
         13:6e:76:fa:86:b7:b3:7b:1a:a4:05:af:5c:1c:88:88:14:6c:
         9b:de:f9:99:13:d0:5e:54:7a:6d:61:f1:a3:57:5e:d7:23:c5:
         27:52:c0:d0:05:9f:47:ba:12:25:b8:29:bb:d5:e0:bb:e0:4b:
         5c:4a:ff:7d:49:84:f4:d7:36:4f:23:a2:16:f2:56:0b:fd:b3:
         7a:ff:25:cf:c3:36:8f:63:73:d1:7e:d1:4e:15:52:ee:02:a1:
         9e:c9:c5:3a:6e:48:73:21:dd:bc:09:35:ab:37:22:50:ff:83:
         1c:d8:c7:93:60:cf:74:c4:94:41:bc:4b:5e:96:b3:1d:f8:07:
         69:4f:c4:6a:f1:6a:b1:e6:3a:bf:cc:1b:9e:93:ed:61:c0:87:
         fd:4f:93:70:f9:4d:28:c0:f1:16:04:b4:5e:05:55:b7:06:84:
         a9:c6:84:5d:88:1b:16:e9:04:d7:9f:b7:9c:5d:9e:59:5d:3d:
         c6:36:1f:a1:f4:f3:b7:34:88:b3:27:70:4b:b6:ef:0e:93:7c:
         0d:05:da:63:a9:b0:c0:0f:c2:25:97:86:72:93:3d:2a:80:f6:
         69:a7:85:3a:48:1b:6b:d6:1c:17:38:bf:0d:dc:0a:12:06:1d:
         5a:3b:10:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:41:54 2025 by rpki-client