Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.mft
File:                     vhgzygFCXO9HWUXxmZieZUOzHmI.mft (raw, json)
Hash identifier:          Zy2/GTMSaNXxxwBIcPrvcr6UgC8fY/nUPZLXFO24P+A=
Subject key identifier:   F6:4D:04:07:8D:05:F5:21:7F:F9:A1:28:31:12:BE:CD:51:7A:8D:CC
Authority key identifier: BE:18:33:CA:01:42:5C:EF:47:59:45:F1:99:98:9E:65:43:B3:1E:62
Certificate issuer:       /CN=A91382E4/serialNumber=BE1833CA01425CEF475945F199989E6543B31E62
Certificate serial:       032D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhgzygFCXO9HWUXxmZieZUOzHmI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.mft
Manifest number:          0326
Signing time:             Tue 01 Jul 2025 02:07:39 +0000
Manifest this update:     Tue 01 Jul 2025 02:07:38 +0000
Manifest next update:     Tue 08 Jul 2025 02:07:38 +0000
Files and hashes:         1: vhgzygFCXO9HWUXxmZieZUOzHmI.crl (hash: jut/ZP4S4eQ02tlWZVAdBCVunWx3CLwFKGxnVPSVhy0=)
                          2: A05195B4633011ED9122442CC4F9AE02.roa (hash: AKU20NWnh/79/Cz6v2vomPpQO2CqirXMW3lldwtjfuI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.crl
                          rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhgzygFCXO9HWUXxmZieZUOzHmI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 02:07:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 813 (0x32d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91382E4, serialNumber=BE1833CA01425CEF475945F199989E6543B31E62
        Validity
            Not Before: Jul  1 02:07:38 2025 GMT
            Not After : Jul  8 02:07:38 2025 GMT
        Subject: CN=686342eb-6304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ca:80:bb:34:b3:a2:b4:6b:5e:2c:43:b3:e0:
                    cc:9b:75:46:de:65:84:e0:6a:4c:2e:58:05:0a:3b:
                    6c:50:cc:7e:f2:58:05:db:e3:0e:95:1c:1a:76:52:
                    26:fc:92:0d:15:91:ca:3d:b3:c2:f5:f3:d3:5b:ca:
                    56:07:4a:8a:13:d5:90:af:c8:71:de:9c:3f:3d:36:
                    94:73:08:b3:74:bf:31:0c:66:84:91:f2:c1:a6:1b:
                    61:8a:33:20:13:cb:67:a4:11:48:d3:ad:be:1e:68:
                    f5:4b:d9:1c:44:80:22:eb:39:5e:5c:43:05:5a:ca:
                    17:82:62:52:df:02:64:a8:3c:cf:cc:46:fd:f0:03:
                    58:a7:68:5e:97:63:20:68:bc:d9:4d:88:2e:3b:7c:
                    fd:32:9a:99:07:00:d6:5e:71:c8:a4:13:80:2c:7d:
                    f4:95:c2:a0:0c:e3:6b:d4:51:6f:7c:37:aa:0d:9e:
                    54:24:60:b8:08:cb:f0:41:42:5c:9a:c9:a5:51:56:
                    97:86:69:50:80:f3:95:4e:ec:7e:26:ce:73:f7:09:
                    af:43:f5:ca:1d:c6:29:ee:b5:a0:47:6e:97:76:0d:
                    46:23:1a:57:72:f6:57:3e:e5:31:83:74:72:de:26:
                    c0:3f:73:fa:6f:7f:0b:d4:59:16:21:93:9b:80:67:
                    7b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:4D:04:07:8D:05:F5:21:7F:F9:A1:28:31:12:BE:CD:51:7A:8D:CC
            X509v3 Authority Key Identifier:
                keyid:BE:18:33:CA:01:42:5C:EF:47:59:45:F1:99:98:9E:65:43:B3:1E:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhgzygFCXO9HWUXxmZieZUOzHmI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:fc:92:23:7a:5a:49:2d:35:ae:6c:07:b5:8c:e4:72:fe:30:
         88:74:89:31:2a:fa:af:d9:4f:8e:ee:0a:c7:f2:44:03:a5:14:
         13:70:b9:4e:13:8e:72:ab:31:9d:89:fe:07:c3:c2:c9:14:98:
         03:ee:29:25:a6:df:9f:1f:be:e7:c7:b5:af:53:40:70:3e:27:
         4c:4f:f5:66:d6:16:db:de:c3:35:24:c0:6e:a1:14:89:cb:79:
         d8:9f:f2:08:60:72:f4:94:50:6e:e4:78:80:ab:a1:f3:86:e0:
         9a:98:d1:28:85:cd:dc:1a:de:0a:40:63:57:82:41:0a:7b:63:
         8e:66:c1:22:c2:3b:01:c6:ed:31:fe:34:7d:d0:49:e4:38:89:
         06:40:91:42:04:d9:b3:36:70:ac:c0:99:4e:c4:44:d1:49:52:
         32:1d:a8:f8:b8:12:b0:aa:b1:08:af:e1:ea:a0:04:4a:de:7b:
         dd:81:af:01:82:24:85:76:80:b0:a4:fe:35:2e:f3:89:33:1c:
         f2:b7:dc:e2:33:82:74:ca:72:1c:12:3d:d7:39:cb:59:ee:30:
         ae:97:b9:63:7f:c9:22:97:ca:08:11:71:e1:dd:90:b0:c1:f0:
         f8:d2:d4:10:3f:c2:2f:dd:0f:33:96:9d:6b:63:7b:ce:d7:6d:
         ed:24:89:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 18:12:31 2025 by rpki-client