Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A192/B22391A011DF11ECA2E9BE43C4F9AE02/vejnZNDzasWboDNpTTo883QGugk.mft
File:                     vejnZNDzasWboDNpTTo883QGugk.mft (raw, json)
Hash identifier:          GvgKjMFYpxwAinfWiflgiUTLml5bPBp15i3lzMA9w5Y=
Subject key identifier:   9A:A6:76:10:B7:DD:56:95:4D:C4:06:22:CC:2A:18:B6:04:DD:68:3F
Authority key identifier: BD:E8:E7:64:D0:F3:6A:C5:9B:A0:33:69:4D:3A:3C:F3:74:06:BA:09
Certificate issuer:       /CN=A914A192/serialNumber=BDE8E764D0F36AC59BA033694D3A3CF37406BA09
Certificate serial:       050B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vejnZNDzasWboDNpTTo883QGugk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A192/B22391A011DF11ECA2E9BE43C4F9AE02/vejnZNDzasWboDNpTTo883QGugk.mft
Manifest number:          0507
Signing time:             Sat 05 Jul 2025 00:05:46 +0000
Manifest this update:     Sat 05 Jul 2025 00:05:46 +0000
Manifest next update:     Sat 12 Jul 2025 00:05:45 +0000
Files and hashes:         1: vejnZNDzasWboDNpTTo883QGugk.crl (hash: otm8BOKsaJ8/HKXLnSJvRu/OQvkjo5P7tfrD2EVoXa4=)
                          2: 361EE54811E211ECAF7EDA48C4F9AE02.roa (hash: L8/HXBwqySwlOhLxO82Zr1Wb19RHvnnX8QYHJjZFrIQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A192/B22391A011DF11ECA2E9BE43C4F9AE02/vejnZNDzasWboDNpTTo883QGugk.crl
                          rsync://rpki.apnic.net/member_repository/A914A192/B22391A011DF11ECA2E9BE43C4F9AE02/vejnZNDzasWboDNpTTo883QGugk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vejnZNDzasWboDNpTTo883QGugk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1291 (0x50b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A192, serialNumber=BDE8E764D0F36AC59BA033694D3A3CF37406BA09
        Validity
            Not Before: Jul  5 00:05:46 2025 GMT
            Not After : Jul 12 00:05:45 2025 GMT
        Subject: CN=68686c5a-29b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b2:67:00:b7:fa:f4:48:a8:dd:11:6a:95:d9:
                    ab:cf:ef:59:c6:fe:65:2b:77:c2:07:c8:e3:62:1a:
                    1b:ad:db:92:67:97:34:a1:12:f8:4f:7c:b1:81:ba:
                    75:4d:28:dd:5f:be:f9:62:57:57:61:d0:8f:0f:70:
                    99:3a:aa:7e:0b:b0:5e:1e:45:da:55:f0:c4:02:a2:
                    52:66:15:7e:19:44:bc:13:75:d5:57:a1:e5:66:0e:
                    1b:c3:19:75:6d:18:dd:bd:86:b0:b9:6d:82:13:6d:
                    69:65:59:38:e0:93:f0:08:36:c8:63:89:a1:98:b0:
                    c3:a3:ee:57:16:e4:9e:de:cc:e0:3c:63:b3:97:78:
                    d5:b1:3a:95:15:68:55:ab:2f:f7:6d:95:11:3f:a0:
                    86:3a:40:08:00:2e:1a:a7:76:04:57:51:a8:ac:f6:
                    3e:fd:89:c7:b8:2f:08:2c:79:da:1c:2c:b4:19:68:
                    86:db:14:b9:ad:0f:b4:56:e1:ff:cd:83:87:c1:17:
                    aa:30:65:ca:5c:ac:46:8a:9c:55:84:e1:13:54:cd:
                    27:f1:86:a9:59:f7:6d:e1:44:75:87:c3:c3:94:8d:
                    6a:72:6e:91:50:f9:83:3a:86:72:d2:4e:90:e7:f2:
                    e2:af:f9:31:8e:b2:5c:69:b4:8c:a4:cd:3a:33:78:
                    c3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:A6:76:10:B7:DD:56:95:4D:C4:06:22:CC:2A:18:B6:04:DD:68:3F
            X509v3 Authority Key Identifier:
                keyid:BD:E8:E7:64:D0:F3:6A:C5:9B:A0:33:69:4D:3A:3C:F3:74:06:BA:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A192/B22391A011DF11ECA2E9BE43C4F9AE02/vejnZNDzasWboDNpTTo883QGugk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vejnZNDzasWboDNpTTo883QGugk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A192/B22391A011DF11ECA2E9BE43C4F9AE02/vejnZNDzasWboDNpTTo883QGugk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:0f:59:17:d2:40:fb:de:ce:99:e4:46:cf:e4:48:7e:68:c8:
         ae:68:bc:bd:99:8c:b5:b2:18:e2:df:f0:60:f3:37:af:41:7d:
         60:30:a5:84:35:c7:6f:1e:ca:8b:c5:67:75:9b:06:cd:37:e0:
         0d:04:81:10:ad:30:1b:29:d3:f6:cb:4d:39:55:06:d5:fc:33:
         10:d0:c1:64:38:eb:c2:ef:c5:86:6e:22:16:3a:f4:ab:33:84:
         8b:a0:60:58:b6:53:e6:8d:e1:03:d1:ee:29:a2:66:59:34:16:
         40:de:9e:5d:62:cc:fc:71:b3:91:1b:fe:20:5d:91:9b:86:58:
         e0:43:42:32:8c:b6:8c:f9:27:18:2d:7c:79:8c:e1:1c:4d:e8:
         a7:54:e9:fc:9d:cf:0c:d1:eb:31:84:38:e4:b9:db:1c:53:aa:
         a6:ab:b1:2b:23:14:02:08:c6:b3:96:e4:72:04:ad:5a:a6:29:
         b2:7b:5f:38:1d:e0:0f:b9:04:36:72:25:4f:7b:c1:1f:58:c7:
         66:72:4f:84:f8:a0:cb:a3:d7:0f:94:d7:6f:94:be:62:00:d8:
         77:1c:8f:61:51:74:3b:f3:bb:1a:2e:e0:36:fe:02:1a:65:49:
         c2:e5:14:4e:79:fe:36:24:d0:00:2e:1e:79:aa:dc:43:82:8e:
         ca:09:ba:85
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEExOTIxMTAvBgNVBAUTKEJERThFNzY0RDBGMzZBQzU5QkEwMzM2OTREM0EzQ0Yz
NzQwNkJBMDkwHhcNMjUwNzA1MDAwNTQ2WhcNMjUwNzEyMDAwNTQ1WjAYMRYwFAYD
VQQDEw02ODY4NmM1YS0yOWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1rJnALf69Eio3RFqldmrz+9Zxv5lK3fCB8jjYhobrduSZ5c0oRL4T3yxgbp1
TSjdX775YldXYdCPD3CZOqp+C7BeHkXaVfDEAqJSZhV+GUS8E3XVV6HlZg4bwxl1
bRjdvYawuW2CE21pZVk44JPwCDbIY4mhmLDDo+5XFuSe3szgPGOzl3jVsTqVFWhV
qy/3bZURP6CGOkAIAC4ap3YEV1GorPY+/YnHuC8ILHnaHCy0GWiG2xS5rQ+0VuH/
zYOHwReqMGXKXKxGipxVhOETVM0n8YapWfdt4UR1h8PDlI1qcm6RUPmDOoZy0k6Q
5/Lir/kxjrJcabSMpM06M3jDcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJqmdhC3
3VaVTcQGIswqGLYE3Wg/MB8GA1UdIwQYMBaAFL3o52TQ82rFm6AzaU06PPN0BroJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTE5Mi9CMjIzOTFBMDEx
REYxMUVDQTJFOUJFNDNDNEY5QUUwMi92ZWpuWk5EemFzV2JvRE5wVFRvODgzUUd1
Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Zlam5aTkR6YXNXYm9ETnBUVG84ODNRR3Vnay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QTE5Mi9CMjIzOTFBMDExREYxMUVDQTJFOUJFNDNDNEY5QUUwMi92ZWpuWk5EemFz
V2JvRE5wVFRvODgzUUd1Z2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBOD1kX0kD73s6Z5EbP5Eh+aMiuaLy9mYy1shji3/Bg8zevQX1gMKWE
NcdvHsqLxWd1mwbNN+ANBIEQrTAbKdP2y005VQbV/DMQ0MFkOOvC78WGbiIWOvSr
M4SLoGBYtlPmjeED0e4pomZZNBZA3p5dYsz8cbORG/4gXZGbhljgQ0IyjLaM+ScY
LXx5jOEcTeinVOn8nc8M0esxhDjkudscU6qmq7ErIxQCCMazluRyBK1apimye184
HeAPuQQ2ciVPe8EfWMdmck+E+KDLo9cPlNdvlL5iANh3HI9hUXQ787saLuA2/gIa
ZUnC5RROef42JNAALh55qtxDgo7KCbqF
-----END CERTIFICATE-----
Generated at Sun Jul 6 01:06:58 2025 by rpki-client