Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914417A/752B65021DA111E2BC82A39308B02CD2/VR9-hn-vN0cJR19QtJbX_YhCb7E.mft
File:                     VR9-hn-vN0cJR19QtJbX_YhCb7E.mft (raw, json)
Hash identifier:          ia4UvKx/Cb4rMGZo9JcFkHyGeoQYkUdz7x6vd3Bzr7U=
Subject key identifier:   A0:D9:CE:B0:D1:CE:BD:91:58:9D:D6:52:FC:AE:6C:59:C4:79:0A:A7
Authority key identifier: 55:1F:7E:86:7F:AF:37:47:09:47:5F:50:B4:96:D7:FD:88:42:6F:B1
Certificate issuer:       /CN=A914417A/serialNumber=551F7E867FAF374709475F50B496D7FD88426FB1
Certificate serial:       349A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9-hn-vN0cJR19QtJbX_YhCb7E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914417A/752B65021DA111E2BC82A39308B02CD2/VR9-hn-vN0cJR19QtJbX_YhCb7E.mft
Manifest number:          3497
Signing time:             Mon 30 Jun 2025 15:08:22 +0000
Manifest this update:     Mon 30 Jun 2025 15:08:21 +0000
Manifest next update:     Mon 07 Jul 2025 15:08:21 +0000
Files and hashes:         1: VR9-hn-vN0cJR19QtJbX_YhCb7E.crl (hash: 5EGFaEa+kQtAJpWAtCEh02ov12rwwG5qqtUUbl5kuT8=)
                          2: B4FD92C42C5211EEAD14C272C4F9AE02.roa (hash: XM3PVoMMbS3VTscbpreh5POpvogKY4I2fM4yhrQjzPw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914417A/752B65021DA111E2BC82A39308B02CD2/VR9-hn-vN0cJR19QtJbX_YhCb7E.crl
                          rsync://rpki.apnic.net/member_repository/A914417A/752B65021DA111E2BC82A39308B02CD2/VR9-hn-vN0cJR19QtJbX_YhCb7E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9-hn-vN0cJR19QtJbX_YhCb7E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Jul 2025 15:08:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13466 (0x349a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914417A, serialNumber=551F7E867FAF374709475F50B496D7FD88426FB1
        Validity
            Not Before: Jun 30 15:08:21 2025 GMT
            Not After : Jul  7 15:08:21 2025 GMT
        Subject: CN=6862a865-c3f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:cf:9c:6c:71:c1:d3:c1:38:20:1e:a9:31:3a:
                    db:4b:e3:27:91:bf:38:2f:9a:a6:37:fc:2a:4c:70:
                    28:de:99:e0:0a:3a:ab:7c:7b:65:60:65:2f:ba:64:
                    e4:c8:a4:d2:40:59:b2:cb:9e:58:62:e3:57:1b:46:
                    90:99:87:b7:9e:e1:60:d3:05:a6:22:85:36:47:50:
                    35:f9:17:a7:f3:5b:fc:d8:44:56:5c:da:d7:7d:3e:
                    36:f3:e3:4f:52:c9:a8:46:77:5f:f5:e3:01:9b:6a:
                    46:9d:53:37:0b:b2:28:ed:6c:f9:c2:dc:62:1d:b3:
                    20:32:01:60:07:3a:6e:ba:f9:01:83:8c:33:4f:16:
                    8d:f0:ef:72:69:97:12:de:b0:2c:64:7a:f5:04:14:
                    16:be:e5:e1:eb:de:8e:72:ef:54:45:e4:55:e6:0f:
                    ab:24:3a:da:96:93:91:a1:5a:be:dc:e2:21:7f:6a:
                    d9:43:58:c9:45:02:8f:52:1c:8e:59:bd:88:dd:fd:
                    5c:a6:11:e5:ea:0a:24:c1:f6:c5:9b:1a:89:6d:30:
                    11:90:32:ea:5a:25:1f:aa:de:50:66:e5:aa:cf:c0:
                    e2:90:50:7c:42:d0:be:fa:fa:50:84:c2:a0:28:7f:
                    17:62:45:38:e3:38:a7:55:b2:5b:95:5b:4f:97:72:
                    8f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:D9:CE:B0:D1:CE:BD:91:58:9D:D6:52:FC:AE:6C:59:C4:79:0A:A7
            X509v3 Authority Key Identifier:
                keyid:55:1F:7E:86:7F:AF:37:47:09:47:5F:50:B4:96:D7:FD:88:42:6F:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914417A/752B65021DA111E2BC82A39308B02CD2/VR9-hn-vN0cJR19QtJbX_YhCb7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9-hn-vN0cJR19QtJbX_YhCb7E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914417A/752B65021DA111E2BC82A39308B02CD2/VR9-hn-vN0cJR19QtJbX_YhCb7E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:d0:73:4c:71:08:c6:cb:08:45:64:5c:84:ff:fc:d0:cf:49:
         4b:a9:09:5a:e2:da:c0:24:94:05:91:a7:2c:6f:bb:ef:2f:df:
         61:12:bc:17:e5:72:3e:b5:21:54:e6:ea:d0:2b:85:4d:7c:2e:
         6a:71:a9:85:3c:e4:5f:30:b4:a1:9f:8c:45:bb:f9:1b:a1:cc:
         44:4c:76:76:f7:ce:81:c7:4a:9b:94:27:47:34:c7:02:18:f1:
         3c:08:5f:0d:f1:d6:40:85:d7:40:26:0f:17:80:e4:ea:ec:c8:
         18:2e:09:de:22:1f:8e:79:5f:d1:7b:91:7e:cd:e7:f5:0a:3d:
         56:1f:1f:44:83:17:3e:6f:6f:ab:f1:16:5c:6d:8c:52:f6:e4:
         e7:52:af:c1:cc:36:01:16:b9:44:bd:2b:67:e1:cc:f1:61:9d:
         1f:ab:09:1f:5b:37:9e:8c:b4:fd:0d:a3:73:86:d7:ac:ec:bb:
         a7:32:97:c6:bc:61:16:4f:18:a9:a6:88:de:33:3b:41:ad:49:
         61:b2:a1:0a:b6:b9:a5:b0:6d:21:b3:5c:7a:84:ef:de:8f:3b:
         4d:12:a2:b8:64:fc:b8:9a:2d:06:11:8f:fa:20:9e:46:e3:68:
         8f:4a:bc:da:83:4e:c0:04:33:60:9a:17:7d:05:80:70:6c:27:
         9a:4f:95:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 07:04:40 2025 by rpki-client