Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/vNgnSl8YLOQAgCwIPo0VQi-bthE.mft
File:                     vNgnSl8YLOQAgCwIPo0VQi-bthE.mft (raw, json)
Hash identifier:          zniSlGGvtengukIsydZDBJo62a3By3aG1QcVcvsgC2s=
Subject key identifier:   EB:4A:90:C0:C6:60:5C:69:49:AD:D3:50:04:FE:B8:E6:22:48:60:F7
Authority key identifier: BC:D8:27:4A:5F:18:2C:E4:00:80:2C:08:3E:8D:15:42:2F:9B:B6:11
Certificate issuer:       /CN=A91554E6/serialNumber=BCD8274A5F182CE400802C083E8D15422F9BB611
Certificate serial:       02FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNgnSl8YLOQAgCwIPo0VQi-bthE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/vNgnSl8YLOQAgCwIPo0VQi-bthE.mft
Manifest number:          0454
Signing time:             Sat 23 Aug 2025 01:30:34 +0000
Manifest this update:     Sat 23 Aug 2025 01:30:33 +0000
Manifest next update:     Sat 30 Aug 2025 01:30:33 +0000
Files and hashes:         1: vNgnSl8YLOQAgCwIPo0VQi-bthE.crl (hash: EbayQivVwdSaTADkQDRdTAyCqnl0fL+umU4boveV4M0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/vNgnSl8YLOQAgCwIPo0VQi-bthE.crl
                          rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/vNgnSl8YLOQAgCwIPo0VQi-bthE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNgnSl8YLOQAgCwIPo0VQi-bthE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 01:30:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 764 (0x2fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91554E6, serialNumber=BCD8274A5F182CE400802C083E8D15422F9BB611
        Validity
            Not Before: Aug 23 01:30:33 2025 GMT
            Not After : Aug 30 01:30:33 2025 GMT
        Subject: CN=68a919ba-ff9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:38:1b:98:7e:29:32:91:fe:3f:77:de:c0:8f:
                    2a:a3:50:f5:09:81:39:9b:2f:0e:1f:a2:0f:04:d7:
                    18:8e:64:45:e5:8d:df:00:cf:f0:15:65:2a:61:e9:
                    b6:92:68:53:ce:36:25:f2:ad:e4:2c:a7:2e:66:0c:
                    84:bb:97:64:6e:59:80:d9:61:7e:9f:80:85:27:47:
                    2c:51:84:b3:fa:ee:3a:a3:d8:bb:bb:18:46:fd:ec:
                    98:3c:31:59:b7:2d:f2:41:37:55:f8:bf:cb:d2:bc:
                    a2:6c:ed:9e:3d:38:bd:b9:7c:8b:f6:27:a5:d4:a2:
                    d8:a8:5c:7b:6a:4a:2b:db:8d:14:7c:fd:8d:9b:3b:
                    55:12:fd:2f:36:7f:21:ed:57:a4:ed:8f:e6:4f:f5:
                    e2:26:f9:71:63:67:1d:fd:81:f0:2f:ba:9f:df:10:
                    6d:59:05:8f:88:06:16:d4:83:88:46:87:4c:40:04:
                    4f:56:10:bf:42:3f:92:cf:65:48:1f:ec:c0:54:d8:
                    9e:7c:f4:45:67:1a:7c:d0:fd:42:3a:ad:3d:34:d8:
                    a9:e8:80:37:4f:35:9c:dc:3d:86:13:11:3e:c0:e7:
                    1e:2b:38:74:dd:a6:e7:b6:09:83:f1:95:54:68:03:
                    80:b1:1e:f9:fa:cc:63:34:99:d1:01:ae:ba:4b:0c:
                    40:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:4A:90:C0:C6:60:5C:69:49:AD:D3:50:04:FE:B8:E6:22:48:60:F7
            X509v3 Authority Key Identifier:
                keyid:BC:D8:27:4A:5F:18:2C:E4:00:80:2C:08:3E:8D:15:42:2F:9B:B6:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/vNgnSl8YLOQAgCwIPo0VQi-bthE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNgnSl8YLOQAgCwIPo0VQi-bthE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/vNgnSl8YLOQAgCwIPo0VQi-bthE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:62:35:4b:5f:6d:52:6d:1c:05:80:d2:38:c3:f8:84:2b:78:
         69:dc:37:12:e9:50:84:15:16:00:cd:f1:2d:a6:cc:19:8b:57:
         6c:16:49:e5:5f:7f:ef:8d:46:15:7d:f9:70:63:bb:c2:c7:e1:
         6f:89:82:b1:4f:56:4c:3b:3c:7f:23:7a:c7:ec:23:4e:93:1c:
         87:2c:d3:67:27:b1:7b:54:5b:63:c8:df:d0:85:5b:9c:d8:52:
         63:21:dd:8f:5e:c1:10:75:e3:e0:2d:18:fe:4c:b8:56:34:37:
         05:88:48:b2:db:d4:d7:83:5b:01:5c:96:c5:f6:f8:8f:16:84:
         66:b3:5b:bf:d2:28:0e:04:27:91:de:64:5f:ee:1a:a1:5c:93:
         6f:6d:e3:08:0e:3e:01:23:28:b6:7f:40:e2:5c:7d:6a:1d:ec:
         1a:d1:7b:7e:dc:ce:7d:5c:b6:7f:ca:83:3f:68:c1:0f:7b:21:
         03:87:85:e2:9c:99:3f:f6:05:82:e1:0c:52:03:74:3e:90:11:
         d1:bb:cd:9c:26:de:f7:d2:e2:22:a5:0e:26:bd:b4:8e:34:b5:
         fe:a1:53:53:e2:a8:1b:f8:3c:24:75:b9:5f:ca:63:98:da:17:
         16:e4:13:be:48:f5:05:51:a1:3a:4e:12:0b:c2:00:b6:cd:a4:
         34:8b:d9:4f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAvwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTU0RTYxMTAvBgNVBAUTKEJDRDgyNzRBNUYxODJDRTQwMDgwMkMwODNFOEQxNTQy
MkY5QkI2MTEwHhcNMjUwODIzMDEzMDMzWhcNMjUwODMwMDEzMDMzWjAYMRYwFAYD
VQQDEw02OGE5MTliYS1mZjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuTgbmH4pMpH+P3fewI8qo1D1CYE5my8OH6IPBNcYjmRF5Y3fAM/wFWUqYem2
kmhTzjYl8q3kLKcuZgyEu5dkblmA2WF+n4CFJ0csUYSz+u46o9i7uxhG/eyYPDFZ
ty3yQTdV+L/L0ryibO2ePTi9uXyL9iel1KLYqFx7akor240UfP2NmztVEv0vNn8h
7Vek7Y/mT/XiJvlxY2cd/YHwL7qf3xBtWQWPiAYW1IOIRodMQARPVhC/Qj+Sz2VI
H+zAVNiefPRFZxp80P1COq09NNip6IA3TzWc3D2GExE+wOceKzh03abntgmD8ZVU
aAOAsR75+sxjNJnRAa66SwxA5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOtKkMDG
YFxpSa3TUAT+uOYiSGD3MB8GA1UdIwQYMBaAFLzYJ0pfGCzkAIAsCD6NFUIvm7YR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTRFNi85RjA2Nzc0OEVE
NEIxMUVDQUI4RkFBNzdDNEY5QUUwMi92TmduU2w4WUxPUUFnQ3dJUG8wVlFpLWJ0
aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZOZ25TbDhZTE9RQWdDd0lQbzBWUWktYnRoRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NTRFNi85RjA2Nzc0OEVENEIxMUVDQUI4RkFBNzdDNEY5QUUwMi92TmduU2w4WUxP
UUFnQ3dJUG8wVlFpLWJ0aEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCqYjVLX21SbRwFgNI4w/iEK3hp3DcS6VCEFRYAzfEtpswZi1dsFknl
X3/vjUYVfflwY7vCx+FviYKxT1ZMOzx/I3rH7CNOkxyHLNNnJ7F7VFtjyN/QhVuc
2FJjId2PXsEQdePgLRj+TLhWNDcFiEiy29TXg1sBXJbF9viPFoRms1u/0igOBCeR
3mRf7hqhXJNvbeMIDj4BIyi2f0DiXH1qHewa0Xt+3M59XLZ/yoM/aMEPeyEDh4Xi
nJk/9gWC4QxSA3Q+kBHRu82cJt730uIipQ4mvbSONLX+oVNT4qgb+DwkdblfymOY
2hcW5BO+SPUFUaE6ThILwgC2zaQ0i9lP
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:11:51 2025 by rpki-client