Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.mft
File:                     VRTBgTfeq40U8RHJD39rfjDQH2Q.mft (raw, json)
Hash identifier:          LXnZE6pSPcqy4GvtSGeVfT1ecD3rH2w29VpDpvbNRt8=
Subject key identifier:   3A:41:6C:43:BD:DD:C0:D9:EC:0B:95:4C:68:10:44:C3:8E:16:96:6A
Authority key identifier: 55:14:C1:81:37:DE:AB:8D:14:F1:11:C9:0F:7F:6B:7E:30:D0:1F:64
Certificate issuer:       /CN=A916D1DA/serialNumber=5514C18137DEAB8D14F111C90F7F6B7E30D01F64
Certificate serial:       34CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRTBgTfeq40U8RHJD39rfjDQH2Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.mft
Manifest number:          34CD
Signing time:             Sat 18 Oct 2025 15:08:09 +0000
Manifest this update:     Sat 18 Oct 2025 15:08:08 +0000
Manifest next update:     Sat 25 Oct 2025 15:08:08 +0000
Files and hashes:         1: VRTBgTfeq40U8RHJD39rfjDQH2Q.crl (hash: fiAzjNT56+K1q/3LHAcy8medeqOEulY6ZizYFDzvVV4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.crl
                          rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRTBgTfeq40U8RHJD39rfjDQH2Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 15:08:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13517 (0x34cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D1DA, serialNumber=5514C18137DEAB8D14F111C90F7F6B7E30D01F64
        Validity
            Not Before: Oct 18 15:08:08 2025 GMT
            Not After : Oct 25 15:08:08 2025 GMT
        Subject: CN=68f3ad59-123c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:dc:b0:37:77:d4:ee:af:27:b5:a5:27:62:a6:
                    77:5f:61:bf:c1:a5:01:e3:8e:72:40:b6:fd:30:9c:
                    09:fc:07:86:59:b0:3c:75:fd:df:f3:ca:0c:a9:8c:
                    28:c4:8d:b2:c9:71:98:84:a4:5f:f6:47:ae:03:06:
                    41:4f:f1:25:03:65:91:e6:74:e8:18:94:45:29:04:
                    32:b5:28:a0:64:e5:12:c5:d9:cd:f7:a7:9f:06:c6:
                    54:e8:26:7c:48:4f:f3:1d:49:2f:09:12:4c:1f:db:
                    3b:21:f9:05:fb:67:ab:ec:a4:dc:62:e8:f8:92:bb:
                    bc:d8:89:5d:6a:0a:48:12:c9:e5:25:1a:2f:25:56:
                    f0:e0:35:16:52:3a:8b:27:af:a7:e4:31:09:4e:91:
                    03:8e:72:ae:35:18:86:ec:98:a2:2f:7b:06:e8:8c:
                    02:38:4a:56:63:14:d2:12:dd:42:96:58:58:7f:34:
                    a0:30:cc:5b:ad:a4:3d:b9:e2:91:f3:59:d5:44:1d:
                    d0:87:5b:9d:61:69:c7:60:c6:5c:37:38:dd:85:c7:
                    42:86:68:d3:5a:8e:98:77:29:14:26:c2:82:ca:b1:
                    f2:57:47:0a:df:fb:e2:9b:77:c4:5c:dd:00:c2:1c:
                    38:58:cd:36:d6:a0:66:06:c4:49:d9:06:1a:38:b0:
                    e2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:41:6C:43:BD:DD:C0:D9:EC:0B:95:4C:68:10:44:C3:8E:16:96:6A
            X509v3 Authority Key Identifier:
                keyid:55:14:C1:81:37:DE:AB:8D:14:F1:11:C9:0F:7F:6B:7E:30:D0:1F:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRTBgTfeq40U8RHJD39rfjDQH2Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:66:a2:f4:d2:8f:59:35:16:a6:e5:f8:54:94:cc:72:05:51:
         78:bb:78:6e:67:6b:11:d1:98:1a:48:e0:f4:48:11:ee:5f:3e:
         cc:f6:52:fc:eb:7b:b8:28:4e:d2:6e:fb:21:c6:ed:38:3a:b9:
         47:10:78:de:e5:00:66:c8:4b:c2:d1:bd:9f:a4:91:04:60:57:
         40:53:78:91:66:6a:09:36:97:51:ff:0f:52:84:86:d7:f6:fc:
         c1:7e:80:b8:6d:79:09:cd:f7:96:94:3c:5b:d4:ec:2c:5b:2b:
         73:93:6b:1c:78:28:d3:73:e1:ed:4f:88:57:00:31:82:53:7e:
         a6:e3:5e:5f:69:d8:a0:6a:f7:3b:79:e1:f3:33:c5:7f:7a:81:
         c8:a0:01:d3:b4:0e:d9:9a:1e:52:4f:3c:76:56:08:bd:6e:09:
         a0:d2:84:84:01:92:00:ae:e1:dd:b7:82:f1:a0:b8:df:05:34:
         55:d5:c4:95:18:1f:5c:a4:88:b9:09:81:d7:13:0f:de:79:13:
         95:74:29:5e:35:41:0c:32:59:b6:b6:ea:a3:6c:e0:e4:2b:bc:
         5a:0c:07:67:e9:98:bb:31:f2:3f:f4:06:72:dc:68:ee:0d:47:
         79:d5:e7:89:d7:25:a8:8d:7f:9e:b1:e5:62:02:d2:09:c2:94:
         c2:99:3f:ff
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkQxREExMTAvBgNVBAUTKDU1MTRDMTgxMzdERUFCOEQxNEYxMTFDOTBGN0Y2QjdF
MzBEMDFGNjQwHhcNMjUxMDE4MTUwODA4WhcNMjUxMDI1MTUwODA4WjAYMRYwFAYD
VQQDEw02OGYzYWQ1OS0xMjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq9ywN3fU7q8ntaUnYqZ3X2G/waUB445yQLb9MJwJ/AeGWbA8df3f88oMqYwo
xI2yyXGYhKRf9keuAwZBT/ElA2WR5nToGJRFKQQytSigZOUSxdnN96efBsZU6CZ8
SE/zHUkvCRJMH9s7IfkF+2er7KTcYuj4kru82IldagpIEsnlJRovJVbw4DUWUjqL
J6+n5DEJTpEDjnKuNRiG7JiiL3sG6IwCOEpWYxTSEt1CllhYfzSgMMxbraQ9ueKR
81nVRB3Qh1udYWnHYMZcNzjdhcdChmjTWo6YdykUJsKCyrHyV0cK3/vim3fEXN0A
whw4WM021qBmBsRJ2QYaOLDiLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDpBbEO9
3cDZ7AuVTGgQRMOOFpZqMB8GA1UdIwQYMBaAFFUUwYE33quNFPERyQ9/a34w0B9k
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDFEQS8wMDhDRTUyQTFE
OUUxMUUyOTY0Qjk1OEQwOEIwMkNEMi9WUlRCZ1RmZXE0MFU4UkhKRDM5cmZqRFFI
MlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZSVEJnVGZlcTQwVThSSEpEMzlyZmpEUUgyUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RDFEQS8wMDhDRTUyQTFEOUUxMUUyOTY0Qjk1OEQwOEIwMkNEMi9WUlRCZ1RmZXE0
MFU4UkhKRDM5cmZqRFFIMlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBdZqL00o9ZNRam5fhUlMxyBVF4u3huZ2sR0ZgaSOD0SBHuXz7M9lL8
63u4KE7Sbvshxu04OrlHEHje5QBmyEvC0b2fpJEEYFdAU3iRZmoJNpdR/w9ShIbX
9vzBfoC4bXkJzfeWlDxb1OwsWytzk2sceCjTc+HtT4hXADGCU36m415fadigavc7
eeHzM8V/eoHIoAHTtA7Zmh5STzx2Vgi9bgmg0oSEAZIAruHdt4LxoLjfBTRV1cSV
GB9cpIi5CYHXEw/eeROVdCleNUEMMlm2tuqjbODkK7xaDAdn6Zi7MfI/9AZy3Gju
DUd51eeJ1yWojX+eseViAtIJwpTCmT//
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:11:26 2025 by rpki-client