Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178EF3/9281034A4AAD11EB90637E57C4F9AE02/vjP21UgZuYkyL1Kj7LXzP98OFZY.mft
File:                     vjP21UgZuYkyL1Kj7LXzP98OFZY.mft (raw, json)
Hash identifier:          XhG2HHgZohLYLdnwFbIE/RCWkI9o+OtzakuKCIBUTyQ=
Subject key identifier:   88:D0:E5:8D:62:4F:79:09:5A:F7:68:F4:D4:2A:B9:F2:1A:1F:62:93
Authority key identifier: BE:33:F6:D5:48:19:B9:89:32:2F:52:A3:EC:B5:F3:3F:DF:0E:15:96
Certificate issuer:       /CN=A9178EF3/serialNumber=BE33F6D54819B989322F52A3ECB5F33FDF0E1596
Certificate serial:       0727
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjP21UgZuYkyL1Kj7LXzP98OFZY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178EF3/9281034A4AAD11EB90637E57C4F9AE02/vjP21UgZuYkyL1Kj7LXzP98OFZY.mft
Manifest number:          0720
Signing time:             Fri 22 Aug 2025 21:59:28 +0000
Manifest this update:     Fri 22 Aug 2025 21:59:28 +0000
Manifest next update:     Fri 29 Aug 2025 21:59:28 +0000
Files and hashes:         1: vjP21UgZuYkyL1Kj7LXzP98OFZY.crl (hash: wmFteujF0Iri0A5XjGOFNsRPK5ClVi0d+evtwJz6eCg=)
                          2: 4BC1EE9A4AAF11EBBF031959C4F9AE02.roa (hash: 9QXEZ3KUMVxM1IFtAM5AqpjiZSShCfJ9XhH0+sUzVjs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178EF3/9281034A4AAD11EB90637E57C4F9AE02/vjP21UgZuYkyL1Kj7LXzP98OFZY.crl
                          rsync://rpki.apnic.net/member_repository/A9178EF3/9281034A4AAD11EB90637E57C4F9AE02/vjP21UgZuYkyL1Kj7LXzP98OFZY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjP21UgZuYkyL1Kj7LXzP98OFZY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 21:59:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1831 (0x727)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178EF3, serialNumber=BE33F6D54819B989322F52A3ECB5F33FDF0E1596
        Validity
            Not Before: Aug 22 21:59:28 2025 GMT
            Not After : Aug 29 21:59:28 2025 GMT
        Subject: CN=68a8e840-7a0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c0:75:4d:b3:ac:4c:ee:3e:4d:5f:db:29:df:
                    c4:03:5a:b0:3f:0a:a4:13:72:27:d1:58:99:b3:d4:
                    fc:42:56:51:dc:63:37:90:68:b3:5b:6a:c9:09:a0:
                    28:a5:46:97:c3:03:49:8c:b5:d6:f4:d3:cc:ee:5c:
                    3f:6d:2c:c8:d5:66:d2:76:c5:fb:d3:75:41:96:c4:
                    aa:a5:ec:b0:81:dc:54:69:63:7e:6e:6c:d7:bf:70:
                    5a:77:37:5b:20:8c:f8:44:4d:62:87:c6:67:3c:2a:
                    27:5b:00:4f:65:b8:0f:0c:27:28:64:78:dd:71:56:
                    d2:b2:d6:90:13:e7:d7:17:8a:09:40:39:81:8a:c7:
                    50:4a:c1:74:1f:68:f7:c0:08:42:df:56:32:53:cd:
                    f0:56:87:4b:8c:b9:50:d8:1e:14:8b:c7:37:2d:13:
                    c7:9f:e8:ab:1d:7e:b2:05:89:e2:7b:cd:a8:22:df:
                    27:cc:80:24:8d:5a:84:5e:8f:fc:a6:61:35:25:d1:
                    c5:99:7f:50:d8:91:d7:a5:97:db:b9:e3:f4:f8:99:
                    6e:48:57:99:be:29:b9:df:cb:06:1a:99:92:98:a5:
                    57:0a:93:e4:3f:14:51:17:f2:61:21:57:a1:89:89:
                    1d:df:2f:d2:15:9b:93:56:8e:4e:2a:b1:75:d3:19:
                    03:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:D0:E5:8D:62:4F:79:09:5A:F7:68:F4:D4:2A:B9:F2:1A:1F:62:93
            X509v3 Authority Key Identifier:
                keyid:BE:33:F6:D5:48:19:B9:89:32:2F:52:A3:EC:B5:F3:3F:DF:0E:15:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178EF3/9281034A4AAD11EB90637E57C4F9AE02/vjP21UgZuYkyL1Kj7LXzP98OFZY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjP21UgZuYkyL1Kj7LXzP98OFZY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EF3/9281034A4AAD11EB90637E57C4F9AE02/vjP21UgZuYkyL1Kj7LXzP98OFZY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:0f:46:c7:92:d7:10:39:cb:71:65:73:9b:28:58:74:50:98:
         e7:9e:f7:a5:18:0f:87:93:c5:7d:a3:bc:d1:5a:57:55:71:c2:
         99:6c:32:1c:b6:d0:15:ab:95:3d:ed:63:f1:79:47:85:33:99:
         31:8f:a4:af:f1:71:e2:ee:89:58:50:40:4b:ef:94:fd:8a:ee:
         78:a8:85:61:f2:f3:3c:ab:16:58:29:12:2a:ec:7f:4b:8b:88:
         0e:52:9c:a4:24:8b:2a:74:c0:0f:d4:70:b2:b3:f5:bd:86:a1:
         2e:10:93:5d:70:dd:73:b2:c2:ce:97:70:13:1c:87:1e:69:bc:
         55:88:28:51:86:38:63:26:1a:35:73:a3:6d:a1:63:fa:24:3f:
         a7:47:61:33:d0:03:1a:fc:79:f0:5d:c3:27:52:63:ad:92:c4:
         c8:76:c1:10:26:4c:90:e5:2e:8b:34:05:7d:17:e2:ac:7e:7e:
         dc:b2:a1:7a:88:26:96:9d:9f:bf:a1:f7:d4:63:aa:69:88:b3:
         9e:6d:b1:30:3d:74:19:2b:dc:24:78:59:92:37:09:fb:52:b0:
         3c:0e:7e:b2:8a:26:00:bc:58:6e:92:03:18:ee:ba:d4:07:4a:
         c5:f3:b3:13:5a:9b:cc:7f:f4:f6:10:e6:32:12:70:c0:42:10:
         c8:7f:7f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:10:40 2025 by rpki-client