Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171845/7B62C80820CA11ECB66C1452C4F9AE02/vJfyb7J4ln3TyjnFndCMaiwjBvk.mft
File:                     vJfyb7J4ln3TyjnFndCMaiwjBvk.mft (raw, json)
Hash identifier:          GRfc6HFZWUXAx0sMk5pRxbolPURbCqtZBmrhDluT4r0=
Subject key identifier:   EE:FB:FE:9B:12:62:51:36:33:83:04:87:26:24:A0:55:87:99:EE:73
Authority key identifier: BC:97:F2:6F:B2:78:96:7D:D3:CA:39:C5:9D:D0:8C:6A:2C:23:06:F9
Certificate issuer:       /CN=A9171845/serialNumber=BC97F26FB278967DD3CA39C59DD08C6A2C2306F9
Certificate serial:       052B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vJfyb7J4ln3TyjnFndCMaiwjBvk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171845/7B62C80820CA11ECB66C1452C4F9AE02/vJfyb7J4ln3TyjnFndCMaiwjBvk.mft
Manifest number:          0522
Signing time:             Sun 19 Oct 2025 01:19:26 +0000
Manifest this update:     Sun 19 Oct 2025 01:19:26 +0000
Manifest next update:     Sun 26 Oct 2025 01:19:26 +0000
Files and hashes:         1: vJfyb7J4ln3TyjnFndCMaiwjBvk.crl (hash: DmNomlDnAgk3YG9CYEw3HSbTxpDoJddRCfJ7bhAEzCY=)
                          2: 8B91EDB420CD11EC97292B78C4F9AE02.roa (hash: lu1tvmrK1UL4Y/2Rq1YIX+Lb2/NNmqFCgC6huHfwCqg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171845/7B62C80820CA11ECB66C1452C4F9AE02/vJfyb7J4ln3TyjnFndCMaiwjBvk.crl
                          rsync://rpki.apnic.net/member_repository/A9171845/7B62C80820CA11ECB66C1452C4F9AE02/vJfyb7J4ln3TyjnFndCMaiwjBvk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vJfyb7J4ln3TyjnFndCMaiwjBvk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 01:19:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1323 (0x52b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171845, serialNumber=BC97F26FB278967DD3CA39C59DD08C6A2C2306F9
        Validity
            Not Before: Oct 19 01:19:26 2025 GMT
            Not After : Oct 26 01:19:26 2025 GMT
        Subject: CN=68f43c9e-2fb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7a:13:cb:12:94:90:be:64:b4:09:a4:76:3c:
                    55:aa:5e:9d:94:6b:9d:65:b1:89:65:59:28:7c:95:
                    d4:01:31:55:d7:90:95:c9:28:16:cf:00:6a:33:ae:
                    96:2f:55:0e:1a:6e:30:c0:d5:13:41:5a:a4:ec:13:
                    88:56:f5:cf:c9:45:fd:20:8b:e4:1f:58:10:5d:e6:
                    fc:34:df:7a:ba:3f:a8:91:48:b6:38:5d:f5:40:78:
                    98:ba:c5:8f:44:0a:49:df:ea:d7:6e:68:f4:30:c3:
                    7c:39:ad:bf:ab:10:02:da:3e:60:c7:61:27:7a:d0:
                    ca:e8:55:89:dd:c3:8a:25:12:c7:b0:4d:74:a4:43:
                    20:72:05:af:3f:82:e7:51:3e:4c:15:f8:57:7b:44:
                    58:e7:eb:1d:3e:41:41:ca:65:e2:69:bf:11:42:f8:
                    f8:92:82:1b:69:10:b7:66:45:30:4d:d1:65:f3:34:
                    44:92:54:52:c1:32:c6:a0:37:34:3c:ab:38:9e:3d:
                    2a:d9:bc:c8:69:53:ff:d1:7c:7a:8b:38:65:d1:98:
                    8d:b6:c5:11:e0:4a:c6:2d:dd:d9:b3:05:bf:25:13:
                    e0:59:f9:75:7b:c9:fe:c5:63:92:c6:f3:ba:12:43:
                    15:2c:31:22:74:fa:97:ab:88:58:54:35:57:76:a1:
                    36:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:FB:FE:9B:12:62:51:36:33:83:04:87:26:24:A0:55:87:99:EE:73
            X509v3 Authority Key Identifier:
                keyid:BC:97:F2:6F:B2:78:96:7D:D3:CA:39:C5:9D:D0:8C:6A:2C:23:06:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171845/7B62C80820CA11ECB66C1452C4F9AE02/vJfyb7J4ln3TyjnFndCMaiwjBvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vJfyb7J4ln3TyjnFndCMaiwjBvk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171845/7B62C80820CA11ECB66C1452C4F9AE02/vJfyb7J4ln3TyjnFndCMaiwjBvk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:91:4e:8e:80:1e:f3:40:51:57:67:f8:74:29:9a:24:76:d1:
         95:af:95:89:eb:19:74:08:3f:24:43:8e:db:89:fb:eb:c9:74:
         8e:6c:b1:94:c3:3d:2e:2f:f1:09:81:d5:ce:43:b8:1c:88:dc:
         f2:24:66:19:ab:3d:14:84:5d:6e:ec:ae:1d:35:ee:92:02:1e:
         3e:94:bf:01:1b:4c:2e:be:ee:58:7e:27:63:19:97:4f:20:fe:
         21:ae:9e:f0:23:44:55:c0:91:d4:e2:5c:3f:7d:72:ad:ca:a9:
         ec:06:01:d3:f3:c0:31:50:08:80:a4:bf:af:ff:bb:05:12:60:
         33:db:60:d7:3b:74:3f:3a:af:03:e6:e7:43:ce:33:fd:80:8a:
         f9:a0:e8:56:f9:8d:7c:2e:cf:a9:ba:b6:3b:18:33:01:e1:26:
         41:cd:00:6b:ee:c4:f1:ef:c3:4f:8d:84:eb:52:cf:c8:5c:99:
         2d:13:4a:ae:b5:0a:68:1d:01:59:d9:e6:7a:82:2e:62:5c:1f:
         b0:75:b1:13:36:56:be:4b:b3:d0:fc:41:13:80:ff:3b:ef:5e:
         13:48:01:fe:01:cf:74:49:ad:ee:ae:e2:bb:07:3a:b8:55:77:
         3b:f6:1f:a3:2b:28:47:39:b0:90:95:1e:c3:dd:59:86:19:b6:
         7c:5e:23:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:38:30 2025 by rpki-client