Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145884/61B0705ACDEB11EF8B5B301FC4F9AE02/vjv7J425oD3qOFbX_iKSGDdNj8A.mft
File:                     vjv7J425oD3qOFbX_iKSGDdNj8A.mft (raw, json)
Hash identifier:          YIiETLE1u0dHoMm9bxaX6jL4ireGHnipD9iT6AS0EUk=
Subject key identifier:   A7:20:35:A1:DF:A8:24:78:4F:71:D3:06:96:F8:82:0C:D6:3C:06:DB
Authority key identifier: BE:3B:FB:27:8D:B9:A0:3D:EA:38:56:D7:FE:22:92:18:37:4D:8F:C0
Certificate issuer:       /CN=A9145884/serialNumber=BE3BFB278DB9A03DEA3856D7FE229218374D8FC0
Certificate serial:       78
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjv7J425oD3qOFbX_iKSGDdNj8A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145884/61B0705ACDEB11EF8B5B301FC4F9AE02/vjv7J425oD3qOFbX_iKSGDdNj8A.mft
Manifest number:          76
Signing time:             Sat 23 Aug 2025 07:02:34 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:33 +0000
Manifest next update:     Sat 30 Aug 2025 07:02:33 +0000
Files and hashes:         1: vjv7J425oD3qOFbX_iKSGDdNj8A.crl (hash: wdPYCR86dhocClnN484DAiFajFyxzTxzxRnCLX8vaIM=)
                          2: FB1BCFB4CDEB11EF8115D720C4F9AE02.roa (hash: xoOr7mcziDhALfamVuTQnWFaiiFOCUXOClhl7nV0wbk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145884/61B0705ACDEB11EF8B5B301FC4F9AE02/vjv7J425oD3qOFbX_iKSGDdNj8A.crl
                          rsync://rpki.apnic.net/member_repository/A9145884/61B0705ACDEB11EF8B5B301FC4F9AE02/vjv7J425oD3qOFbX_iKSGDdNj8A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjv7J425oD3qOFbX_iKSGDdNj8A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 07:02:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120 (0x78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145884, serialNumber=BE3BFB278DB9A03DEA3856D7FE229218374D8FC0
        Validity
            Not Before: Aug 23 07:02:33 2025 GMT
            Not After : Aug 30 07:02:33 2025 GMT
        Subject: CN=68a96789-88e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:46:c3:4c:0b:74:d1:8a:62:4e:96:4d:ac:8c:
                    90:3a:56:67:b5:1c:e4:e8:aa:29:1f:f1:b3:1f:15:
                    01:bb:d2:4b:84:12:56:b1:e8:37:96:2e:ae:10:70:
                    3d:74:ae:dd:d0:4f:a0:09:a5:51:87:da:8d:4a:e9:
                    dd:7d:29:86:a6:be:7c:ce:d2:c1:da:4e:78:2d:a3:
                    06:56:c6:ba:d9:77:d8:a1:04:1f:de:05:ac:aa:58:
                    bf:2c:54:ff:10:25:bb:fd:1a:6c:e8:39:45:4b:0f:
                    92:59:31:13:9c:42:ac:ec:49:65:f5:7b:2f:28:1f:
                    b6:8e:41:ab:4a:d5:b0:48:1a:3c:08:59:af:7d:16:
                    41:4a:88:c4:a3:4e:82:51:3e:5a:6a:db:b2:22:2a:
                    13:e1:71:ac:9d:da:80:07:a9:56:56:2f:0c:5a:f9:
                    d5:50:92:5f:12:e3:9e:2c:ac:6d:9a:d2:19:15:0b:
                    8f:46:e9:61:3b:e0:a5:04:a5:e8:cf:05:0d:a3:69:
                    48:ec:d0:0e:74:0a:c1:cf:7e:87:7b:49:b5:a4:e0:
                    44:ac:db:e8:7b:43:aa:69:26:a0:b0:84:7e:51:41:
                    f1:f4:cf:a1:a1:08:7b:1f:9b:2b:ee:47:d4:d7:8a:
                    47:17:00:7a:c1:f2:1d:bf:6b:4f:40:80:9e:08:3c:
                    82:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:20:35:A1:DF:A8:24:78:4F:71:D3:06:96:F8:82:0C:D6:3C:06:DB
            X509v3 Authority Key Identifier:
                keyid:BE:3B:FB:27:8D:B9:A0:3D:EA:38:56:D7:FE:22:92:18:37:4D:8F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145884/61B0705ACDEB11EF8B5B301FC4F9AE02/vjv7J425oD3qOFbX_iKSGDdNj8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjv7J425oD3qOFbX_iKSGDdNj8A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145884/61B0705ACDEB11EF8B5B301FC4F9AE02/vjv7J425oD3qOFbX_iKSGDdNj8A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:74:36:9d:d2:39:f8:8e:d4:85:b3:f4:a0:69:96:d9:58:2e:
         c8:d9:4b:a7:ad:12:24:0f:ed:0f:8a:f0:64:cd:e4:25:9b:46:
         7e:a5:58:d5:c7:79:57:9e:2e:52:4c:96:ef:9e:67:31:4b:6a:
         b0:9a:de:52:00:a6:b2:2f:ff:a7:43:9b:b9:55:36:c8:9a:e9:
         00:95:91:c8:5d:8d:16:12:a3:3c:5d:6b:87:96:15:84:57:a6:
         a1:34:fd:b7:a0:ec:3e:9f:98:ae:da:a6:2c:50:ec:e2:fd:15:
         43:d9:23:11:de:0b:a3:2e:48:55:8a:ef:b8:8e:9b:04:fb:c9:
         e1:6f:f0:25:ae:3e:8a:53:43:6d:cb:96:e8:7d:79:55:e5:b6:
         42:6b:eb:19:25:a0:96:0a:81:96:36:0d:a4:81:1e:d0:a7:d0:
         a0:49:c3:a5:bd:f3:4e:68:28:80:d5:2a:a4:85:0d:1d:38:b1:
         39:b9:41:d9:db:6a:2e:64:fa:47:f5:90:d0:2f:c2:c7:af:1a:
         01:59:f5:40:0c:6f:ee:ad:5e:05:3e:f6:10:07:d8:74:5a:19:
         17:8b:bc:de:0f:15:97:9c:21:33:2b:27:3c:7d:34:91:25:78:
         04:63:a8:95:7f:43:da:26:9c:5f:6a:44:21:ae:7f:41:61:fb:
         23:6e:14:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:06:45 2025 by rpki-client