Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.mft
File:                     VfLp2yg8tFniZmj5Ik8ms6KkRk4.mft (raw, json)
Hash identifier:          vv+gnb4akcxN/pSnYursfwLWX9rhAm+Xcm6Rgtwq+g4=
Subject key identifier:   30:6E:BD:45:F0:2C:B7:4A:6B:5B:0A:3A:16:F3:B3:12:CA:5B:2D:75
Authority key identifier: 55:F2:E9:DB:28:3C:B4:59:E2:66:68:F9:22:4F:26:B3:A2:A4:46:4E
Certificate issuer:       /CN=A915B878/serialNumber=55F2E9DB283CB459E26668F9224F26B3A2A4464E
Certificate serial:       05C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLp2yg8tFniZmj5Ik8ms6KkRk4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.mft
Manifest number:          05C7
Signing time:             Fri 22 Aug 2025 23:14:06 +0000
Manifest this update:     Fri 22 Aug 2025 23:14:06 +0000
Manifest next update:     Fri 29 Aug 2025 23:14:06 +0000
Files and hashes:         1: VfLp2yg8tFniZmj5Ik8ms6KkRk4.crl (hash: 9vQfk8VFBSQ/s/KtBolzIUXYHKWVQNs+VCmzPTgNANU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.crl
                          rsync://rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLp2yg8tFniZmj5Ik8ms6KkRk4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 23:14:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1481 (0x5c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B878, serialNumber=55F2E9DB283CB459E26668F9224F26B3A2A4464E
        Validity
            Not Before: Aug 22 23:14:06 2025 GMT
            Not After : Aug 29 23:14:06 2025 GMT
        Subject: CN=68a8f9be-3894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:29:b2:a5:90:37:6e:29:55:11:c0:b9:1f:10:
                    5a:7c:c4:c4:f9:11:4f:1f:d2:4b:3f:cb:45:3c:3d:
                    fb:29:0b:16:d0:e3:08:e4:9d:27:10:1f:2e:2e:68:
                    13:2c:d1:a3:ff:65:26:bc:4d:f7:46:fc:b8:cf:bf:
                    07:f8:c2:cb:ff:66:19:de:30:dd:40:21:22:f5:fb:
                    9d:34:1f:3b:cd:d2:88:84:83:81:42:de:78:9f:a5:
                    01:33:a9:89:0a:7e:e2:87:54:88:7f:b2:16:7c:7c:
                    cd:d8:1e:b4:1a:60:ec:8c:1e:11:e8:36:34:b9:98:
                    74:d8:81:7a:ca:85:c2:f7:ec:d5:4e:97:b9:4e:8f:
                    b8:22:08:1b:e1:bf:3f:bc:c0:1a:33:54:a1:ef:11:
                    a1:16:98:7a:63:9f:6f:47:2c:32:42:ec:38:fc:f0:
                    c4:ee:e7:64:5a:11:a6:31:f0:33:eb:2e:24:57:57:
                    77:f3:dd:89:74:93:a4:9b:a7:a2:0b:a1:ff:7b:dd:
                    e4:40:2e:c7:01:5f:85:48:06:75:9a:15:b0:eb:6e:
                    69:c5:4a:e2:90:2c:57:47:f0:35:5b:ec:93:25:38:
                    92:94:1f:6d:3e:1a:e5:92:62:64:6a:c8:84:a2:69:
                    51:8d:8a:4c:b5:ef:54:fd:99:dc:46:2a:91:d8:3c:
                    c9:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:6E:BD:45:F0:2C:B7:4A:6B:5B:0A:3A:16:F3:B3:12:CA:5B:2D:75
            X509v3 Authority Key Identifier:
                keyid:55:F2:E9:DB:28:3C:B4:59:E2:66:68:F9:22:4F:26:B3:A2:A4:46:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLp2yg8tFniZmj5Ik8ms6KkRk4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:cb:46:3a:e2:13:86:85:c9:8c:af:cb:48:d8:4f:ab:9d:0a:
         fd:26:2f:13:ad:1e:af:10:b9:20:0d:84:5d:eb:7c:31:ce:e0:
         98:62:1a:43:27:02:91:4f:6c:93:db:9f:37:46:5f:ee:a8:12:
         eb:ea:1c:e0:76:9a:75:b1:87:fd:cd:18:a3:24:ef:09:66:5d:
         8a:4a:c9:a3:c2:ea:5d:cd:a0:5d:76:4c:9f:41:d8:a2:18:50:
         42:ca:cc:48:6d:a8:91:1d:6b:2a:b5:8b:9c:53:ea:a8:04:38:
         8f:24:3e:8b:a8:94:f4:05:e7:a3:27:4e:5c:d0:9b:ec:6c:1e:
         af:a5:cd:9e:49:a7:a9:16:c5:ea:c9:c6:89:35:6b:19:68:50:
         d4:bb:d1:b5:ac:70:25:a8:2c:69:5e:62:14:6e:93:15:8e:35:
         75:28:c9:da:91:4b:37:fa:71:14:30:20:1e:68:d9:43:73:36:
         83:87:2e:0a:04:18:30:e2:b7:90:2b:ca:ee:33:17:36:01:a5:
         f1:1f:4b:3b:b9:bd:8d:33:78:e6:ea:29:84:04:8d:f1:c8:28:
         b5:d5:e4:d8:1f:b0:62:cf:1d:3a:8d:a4:70:56:40:c1:4d:50:
         00:05:0a:8c:c3:61:93:ab:ed:bb:a3:98:40:be:44:ec:bd:5b:
         6c:e8:35:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:06:52 2025 by rpki-client