Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134167/B42267F43E8E11EF97A8557DC4F9AE02/VaNt8khLtGWsMwGcBws5J0UkAic.mft
File:                     VaNt8khLtGWsMwGcBws5J0UkAic.mft (raw, json)
Hash identifier:          7BV8bQqDPMDVy/C66Z5xLF8g72LOqq5LZdFWEWSZVa4=
Subject key identifier:   D9:12:32:DF:3F:3F:43:EE:52:AF:5F:5A:53:13:91:D2:C8:66:BA:E4
Authority key identifier: 55:A3:6D:F2:48:4B:B4:65:AC:33:01:9C:07:0B:39:27:45:24:02:27
Certificate issuer:       /CN=A9134167/serialNumber=55A36DF2484BB465AC33019C070B392745240227
Certificate serial:       F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VaNt8khLtGWsMwGcBws5J0UkAic.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134167/B42267F43E8E11EF97A8557DC4F9AE02/VaNt8khLtGWsMwGcBws5J0UkAic.mft
Manifest number:          F0
Signing time:             Sun 19 Oct 2025 08:15:14 +0000
Manifest this update:     Sun 19 Oct 2025 08:15:13 +0000
Manifest next update:     Sun 26 Oct 2025 08:15:13 +0000
Files and hashes:         1: VaNt8khLtGWsMwGcBws5J0UkAic.crl (hash: cftTE1GhsuQiYyP7oR/NgO9pxSaahMRRKi+eLgaW9CE=)
                          2: A1A1946E3E8F11EF90A1D97EC4F9AE02.roa (hash: RjGhvtiZ99qV/uWgf+fYP1U5NceB1zdotuSd44m3FNo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134167/B42267F43E8E11EF97A8557DC4F9AE02/VaNt8khLtGWsMwGcBws5J0UkAic.crl
                          rsync://rpki.apnic.net/member_repository/A9134167/B42267F43E8E11EF97A8557DC4F9AE02/VaNt8khLtGWsMwGcBws5J0UkAic.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VaNt8khLtGWsMwGcBws5J0UkAic.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 08:15:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 242 (0xf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134167, serialNumber=55A36DF2484BB465AC33019C070B392745240227
        Validity
            Not Before: Oct 19 08:15:13 2025 GMT
            Not After : Oct 26 08:15:13 2025 GMT
        Subject: CN=68f49e11-87fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8c:b3:d2:d3:fc:71:91:5d:e9:4c:82:aa:9a:
                    be:6b:7e:4b:7e:54:17:ea:2c:cf:00:82:16:33:08:
                    21:2f:29:24:cb:ff:b8:61:df:f8:41:2f:56:36:b9:
                    cc:fb:dd:d2:72:f4:01:4a:53:ec:e5:4f:ee:02:2b:
                    fc:8e:98:d1:d7:2c:37:ec:08:e7:41:c4:89:6d:c7:
                    e4:e4:d8:f3:b9:51:b6:9d:84:69:42:d0:45:bd:7e:
                    1d:e7:12:bf:33:c4:d4:c0:3b:f9:ad:89:51:c0:01:
                    b6:d6:dc:7d:6f:57:f5:0e:28:f1:4e:a3:ea:52:66:
                    e1:ac:5e:01:42:67:e3:87:bf:05:6e:1b:65:bd:cd:
                    71:7a:3a:76:d8:15:4c:a3:e0:d1:db:dc:08:0b:53:
                    a8:93:1f:89:3b:fd:63:2e:1b:29:34:24:8e:69:09:
                    b0:9a:0b:e6:4b:00:11:be:a5:a8:30:a0:3c:42:da:
                    cf:e6:0c:68:6f:5f:91:5a:cd:56:6b:31:b8:34:76:
                    cc:d5:33:fd:08:95:c7:90:71:f8:2f:8b:a1:af:78:
                    13:f3:18:23:fe:d7:38:4e:ad:d0:96:77:94:f6:c7:
                    1e:24:d6:e2:b8:f1:d5:51:b4:89:83:1a:ea:00:8a:
                    48:8f:38:f3:b4:10:2a:c1:e1:db:8f:30:80:9d:b1:
                    54:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:12:32:DF:3F:3F:43:EE:52:AF:5F:5A:53:13:91:D2:C8:66:BA:E4
            X509v3 Authority Key Identifier:
                keyid:55:A3:6D:F2:48:4B:B4:65:AC:33:01:9C:07:0B:39:27:45:24:02:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134167/B42267F43E8E11EF97A8557DC4F9AE02/VaNt8khLtGWsMwGcBws5J0UkAic.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VaNt8khLtGWsMwGcBws5J0UkAic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134167/B42267F43E8E11EF97A8557DC4F9AE02/VaNt8khLtGWsMwGcBws5J0UkAic.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:b8:b6:77:27:76:c1:27:f9:75:a4:ff:85:44:9d:f7:f0:90:
         78:c4:33:03:ba:2b:ec:be:bf:cb:dc:2a:7d:f2:78:a6:ba:33:
         13:6f:d8:56:35:33:b4:d3:00:17:1d:88:4d:4c:c2:3a:35:d9:
         c7:81:97:99:79:55:d7:c4:c9:e0:f4:66:28:ee:df:8f:88:72:
         fe:84:66:3c:68:34:71:f0:3d:a4:49:48:5a:93:ba:b6:42:c7:
         6e:86:58:29:bf:af:28:5d:ef:56:84:6e:35:a3:fe:45:e0:02:
         49:82:24:af:f3:b2:bb:f4:7a:0a:e6:e2:f6:62:09:02:08:45:
         4c:0b:5c:08:46:11:aa:71:41:5c:93:1c:ac:68:c3:3f:d2:1a:
         59:36:63:52:60:f9:48:65:4c:6b:ac:9e:81:63:c9:e1:12:d9:
         80:27:28:8a:2b:5e:0c:b5:83:35:4e:de:ec:99:03:81:09:2d:
         c9:10:f2:11:27:95:76:31:de:a0:75:30:3e:0f:d8:d5:e5:c6:
         f5:e0:2f:c7:1c:ae:21:62:4b:35:16:1d:30:04:9e:04:f0:7c:
         b2:fa:7a:c0:a2:ed:42:6b:99:fb:00:52:42:00:ed:b3:ac:13:
         13:47:cd:a2:cf:95:22:fe:55:6d:86:74:af:7b:72:e0:96:70:
         a0:67:78:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:43:58 2025 by rpki-client