Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/VQsWD_T13X2ErD6LlZ3XmkL7V9o.mft
File:                     VQsWD_T13X2ErD6LlZ3XmkL7V9o.mft (raw, json)
Hash identifier:          4253uAxGDiNRLKltrWwzJNhTx15dx+xhDQm0V423HfA=
Subject key identifier:   FE:CB:EB:55:D6:91:EA:DB:44:44:F7:10:B8:11:C3:24:E4:17:66:9D
Authority key identifier: 55:0B:16:0F:F4:F5:DD:7D:84:AC:3E:8B:95:9D:D7:9A:42:FB:57:DA
Certificate issuer:       /CN=A917928F/serialNumber=550B160FF4F5DD7D84AC3E8B959DD79A42FB57DA
Certificate serial:       AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQsWD_T13X2ErD6LlZ3XmkL7V9o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/VQsWD_T13X2ErD6LlZ3XmkL7V9o.mft
Manifest number:          A9
Signing time:             Tue 01 Jul 2025 06:51:48 +0000
Manifest this update:     Tue 01 Jul 2025 06:51:48 +0000
Manifest next update:     Tue 08 Jul 2025 06:51:48 +0000
Files and hashes:         1: VQsWD_T13X2ErD6LlZ3XmkL7V9o.crl (hash: tdpO+zUIjG3FIpJPzle4kjagLIa7dH2POkCcOHRuTxo=)
                          2: CEF77C10FB3811EF8D87CD5DC4F9AE02.roa (hash: XlrGroWLq2F8K9TNvUILoHbQClBvuar5myCI5h2ZPFM=)
                          3: D4F41074FB3811EF841FDB5DC4F9AE02.roa (hash: 16Gqqt5QongQMmSrYwjFdVRxHCf2AKQuxpsVfZXRSdA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/VQsWD_T13X2ErD6LlZ3XmkL7V9o.crl
                          rsync://rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/VQsWD_T13X2ErD6LlZ3XmkL7V9o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQsWD_T13X2ErD6LlZ3XmkL7V9o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 06:51:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 173 (0xad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917928F, serialNumber=550B160FF4F5DD7D84AC3E8B959DD79A42FB57DA
        Validity
            Not Before: Jul  1 06:51:48 2025 GMT
            Not After : Jul  8 06:51:48 2025 GMT
        Subject: CN=68638584-5b80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e1:26:b9:e1:28:a2:5b:ef:5e:e2:40:6f:e1:
                    39:d0:02:30:a7:59:8b:d6:dc:db:00:66:09:ae:f4:
                    37:4b:b8:3c:ef:59:84:7c:8f:82:db:ee:b3:d4:e2:
                    62:0d:7b:60:9b:d5:1b:87:96:7b:30:fa:4f:8a:08:
                    48:d0:04:07:dc:3f:ce:18:81:c4:4c:7c:44:19:37:
                    99:5e:77:fe:61:b1:d7:0a:48:66:00:91:f2:2a:05:
                    2f:5e:bd:cb:d0:36:e7:6f:bc:5a:2e:11:5a:6f:84:
                    0c:78:82:6c:e4:38:ec:69:f0:86:54:ff:7b:85:ed:
                    c6:35:1f:69:12:e3:11:46:51:a7:67:22:21:1a:f7:
                    61:9b:92:f4:8e:8e:a4:a7:18:4a:24:44:a0:81:08:
                    cc:2d:71:bf:95:fa:fa:87:95:a2:b8:0f:83:cc:c0:
                    93:d0:ea:7a:9e:5b:dd:9e:41:31:53:77:b1:82:50:
                    86:08:4e:c3:da:c4:0a:a4:58:bf:31:ac:70:42:e8:
                    94:12:73:12:6a:1e:bb:7c:86:90:6a:1a:fe:ff:1d:
                    c9:6e:14:fd:7f:e3:63:ed:63:6f:e3:02:cd:29:fd:
                    1c:ba:1d:54:18:5f:4b:4e:2d:0a:86:60:91:3e:d7:
                    a7:fd:68:6b:ae:54:a3:f7:1f:f7:68:e4:9d:8b:00:
                    9c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:CB:EB:55:D6:91:EA:DB:44:44:F7:10:B8:11:C3:24:E4:17:66:9D
            X509v3 Authority Key Identifier:
                keyid:55:0B:16:0F:F4:F5:DD:7D:84:AC:3E:8B:95:9D:D7:9A:42:FB:57:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/VQsWD_T13X2ErD6LlZ3XmkL7V9o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQsWD_T13X2ErD6LlZ3XmkL7V9o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/VQsWD_T13X2ErD6LlZ3XmkL7V9o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:52:b8:2a:48:b7:57:8c:92:2e:24:62:2e:96:79:99:27:6b:
         5c:b9:09:49:c2:46:f3:25:bd:a9:f9:47:fc:8e:a0:35:4a:a6:
         a6:42:c0:7f:54:da:9b:39:66:28:ee:a4:86:5a:ef:85:2a:08:
         d3:b5:9d:df:00:85:fb:9f:e2:22:3a:6d:88:8c:4f:87:d7:93:
         c0:fc:91:6a:dc:3e:53:24:f5:ae:de:31:fa:d3:f3:28:63:99:
         1f:5a:33:03:59:16:99:8b:fc:ad:f0:86:92:50:40:5e:76:71:
         3b:38:12:ad:d7:19:e2:ce:3d:21:15:a1:6e:1e:91:9c:f9:26:
         6c:4a:0b:e3:0c:da:c1:5b:1d:b0:cf:04:19:cb:bc:dd:ba:6b:
         91:6e:6f:ba:e4:03:97:48:ae:84:12:a5:29:65:6a:e1:e4:4b:
         4a:ae:a2:1b:f3:34:3c:05:8a:35:f5:a9:e2:a8:d8:0c:c1:dd:
         e5:cc:25:31:30:df:59:8e:5c:05:c0:43:3f:6b:17:69:78:73:
         37:12:f0:9a:54:43:7a:42:4b:07:8a:0c:4b:a8:e2:b8:64:90:
         85:d3:3d:e2:e8:ac:54:27:45:64:78:fe:c9:75:02:66:00:81:
         a4:97:9c:ad:59:04:16:ed:b6:d9:69:f3:4f:03:ea:58:f0:0b:
         26:10:50:d8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzkyOEYxMTAvBgNVBAUTKDU1MEIxNjBGRjRGNUREN0Q4NEFDM0U4Qjk1OURENzlB
NDJGQjU3REEwHhcNMjUwNzAxMDY1MTQ4WhcNMjUwNzA4MDY1MTQ4WjAYMRYwFAYD
VQQDEw02ODYzODU4NC01YjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1+EmueEoolvvXuJAb+E50AIwp1mL1tzbAGYJrvQ3S7g871mEfI+C2+6z1OJi
DXtgm9Ubh5Z7MPpPighI0AQH3D/OGIHETHxEGTeZXnf+YbHXCkhmAJHyKgUvXr3L
0Dbnb7xaLhFab4QMeIJs5DjsafCGVP97he3GNR9pEuMRRlGnZyIhGvdhm5L0jo6k
pxhKJESggQjMLXG/lfr6h5WiuA+DzMCT0Op6nlvdnkExU3exglCGCE7D2sQKpFi/
MaxwQuiUEnMSah67fIaQahr+/x3JbhT9f+Nj7WNv4wLNKf0cuh1UGF9LTi0KhmCR
Pten/WhrrlSj9x/3aOSdiwCclwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP7L61XW
kerbRET3ELgRwyTkF2adMB8GA1UdIwQYMBaAFFULFg/09d19hKw+i5Wd15pC+1fa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTI4Ri8xNkZGNUY4MjVC
OUQxMUVGQjFENDIxNDZDNEY5QUUwMi9WUXNXRF9UMTNYMkVyRDZMbFozWG1rTDdW
OW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZRc1dEX1QxM1gyRXJENkxsWjNYbWtMN1Y5by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
OTI4Ri8xNkZGNUY4MjVCOUQxMUVGQjFENDIxNDZDNEY5QUUwMi9WUXNXRF9UMTNY
MkVyRDZMbFozWG1rTDdWOW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQArUrgqSLdXjJIuJGIulnmZJ2tcuQlJwkbzJb2p+Uf8jqA1SqamQsB/
VNqbOWYo7qSGWu+FKgjTtZ3fAIX7n+IiOm2IjE+H15PA/JFq3D5TJPWu3jH60/Mo
Y5kfWjMDWRaZi/yt8IaSUEBednE7OBKt1xnizj0hFaFuHpGc+SZsSgvjDNrBWx2w
zwQZy7zdumuRbm+65AOXSK6EEqUpZWrh5EtKrqIb8zQ8BYo19aniqNgMwd3lzCUx
MN9ZjlwFwEM/axdpeHM3EvCaVEN6QksHigxLqOK4ZJCF0z3i6KxUJ0VkeP7JdQJm
AIGkl5ytWQQW7bbZafNPA+pY8AsmEFDY
-----END CERTIFICATE-----
Generated at Wed Jul 2 07:33:52 2025 by rpki-client